Page 401 - CyberSecurityEssentialsEnglish
P. 401
Term Common abbreviation Plain-language explanation
A structured identification of effects on individuals,
Impact assessment -
groups, and society.
A pre-release test against criteria proportionate to
Acceptance test -
the risk.
A bounded trial with trained users, limits, and a
Pilot -
rollback plan.
Re-assessment triggered by a material change in
Change review -
model, data, or purpose.
Ongoing measurement of performance and risk
Monitoring -
after release.
Stopping a system safely, with access revoked and
Retirement -
records retained.
An organized attempt to find how a system can fail
Red teaming -
or be misused.
Incident and near An event causing or nearly causing harm, both
-
miss worth recording.
A structured review that turns an incident into
Post-incident review -
system improvement.
Provable answers about data, security, change, and
Vendor assessment -
exit before adoption.
A tested path to leave a vendor with data,
Exit plan -
templates, and continuity.
Input attempting to change a system’s behavior or
Prompt injection -
bypass its instructions.
A system able to act more widely than the task
Excessive agency -
requires.
A system that plans, calls tools, and carries out
Agentic AI -
actions toward a goal.
Least privilege - Granting only the minimum access a task requires.
Mapping assets, boundaries, and flows to find
Threat modeling -
where trust can be abused.
A record tying each obligation to its source, owner,
Obligations register -
evidence, and review date.
Knowledge and skill proportionate to a person’s
AI literacy -
role, system, and risk.
400
