Sharing Indicator: White Essential Cybersecurity Controls Terminology Definition Retention The length of time that information, data, event logs or backups must be retained, regardless of the form (i.e., paper and electronic). Secure Coding Standards A practice for the development of computer software and applications in a way that protects against the exposure to cybersecurity vulnerabilities related to software and applications. Secure Configuration and Hardening Protecting, hardening and configuring the settings of computers, systems, applications, network devices and security devices for resisting cyber-attacks, such as: stopping or changing factory and default accounts, stopping of unused services and unused network ports. Security Information and Event Management (SIEM) A system that manages and analyzes security events logs in real time in order to provide monitoring of threats, analysis of the results of interrelated rules for event logs and reports on logs data, and incident response. Security Testing A process intended to ensure that modified or new systems and applications include appropriate security controls and protection and do not introduce any security holes or vulnerabilities that might compromise other systems or applications or misuses of the system, application or its information, and to maintain functionality as intended. Security-byDesign A methodology to systems and software development and networks design that seeks to make systems, software and networks free from cybersecurity vulnerabilities/weaknesses and impervious to cyber-attack as much as possible through measures such as: continuous testing, authentication safeguards and adherence to best programming and design practices. Sender Policy Framework A method to validate that the email server used in the sender’s email address actually belongs to the sender’s organization email domain. Segregation of Duties Key principle in cybersecurity that aims at minimizing errors and fraud when processing specific tasks. It is accomplished through having several people with different privileges, required to complete a task. Third-Party Any organization acting as a party in a contractual relationship to provide goods or services (this includes suppliers and service providers). Threat Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals through an information system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. Also, the potential for a threat-source to successfully exploit a particular information system vulnerability. Threat Intelligence It provides organized information and analysis of recent, current and potential attacks that could pose a cyber threat to the organization. Vulnerability Any type of weakness in a computer system, software, application, set of procedures, or in anything that leaves cybersecurity exposed to a threat. Web Application Firewall It analyzes, filters, monitors, and blocks Internet traffic to and from a web application. It is also able to filter the content of specific web applications. Zero-Day Malware Malware that is unknown before, produced/disseminated recently, and normally hard to detect by signature-based protection anti-malware applications. Document Classification: Unclassified 35