Glossary

Cybersecurity & TPRM Glossary

Definitions of the most important terms from Third-Party Risk Management, Cyber Security and regulatory compliance.

🔍

A B C D E F G I N P R S T V Z

A

All exploitable entry points of an organisation

B

Business Continuity

Measures to maintain operations during a crisis

C

Common Vulnerabilities and Exposures — vulnerability database

Continuous Monitoring

Ongoing monitoring instead of periodic reviews

Critical Supplier

Supplier whose failure jeopardises critical business processes

Cyber Risk Score

Quantitative value measuring the cyber risk of an organisation

Adherence to legal, regulatory and internal requirements

D

Digital Operational Resilience Act for financial entities

Hidden part of the internet — source of leak and breach data

Thorough assessment before entering a supplier relationship

E

Exposed vulnerabilities and attack surfaces

F

Fourth Party Risk

Risks from sub-suppliers of your direct suppliers

G

Framework for direction, control and accountability in organisations

I

Raw risk before consideration of control measures

Risks from information and communication technology

N

EU directive on network and information security

P

Patch Management

Process for managing and applying software updates

R

Risk Assessment

Systematic analysis and evaluation of identified risks

Remaining risk after implementation of controls

Level of risk an organisation is willing to accept

S

Supply Chain Attack

Attacks via compromised supply chains

Supplier Inventory

Complete register of all external suppliers

Security Rating

External assessment of an organisation's cybersecurity posture

Supply Chain Security

Protection of the entire supply chain from cyber threats

T

Third-Party Risk Management — systematic management of supplier risks

Threat Intelligence

Processed threat data for proactive protection

V

Risks from external suppliers and service providers

Vendor Risk Management

Systematic management of risks from external providers

Security gap in software, hardware or processes

Z

Security model: no implicit trust, always verify