General
a
- Audit Report -
A formal document that summarizes the findings of an audit. It details whether a company’s policies, controls, and procedures meet defined standards or regulatory requirements. Audit reports may include recommendations for remediation and improvement.
- Audit Testing -
The process of evaluating an organization’s internal controls, systems, and data through specific procedures. These tests are used to determine compliance with established standards and identify potential weaknesses or risks.
c
- Compliance Risk Management -
The practice of identifying, assessing, and mitigating risks related to legal, regulatory, or internal compliance requirements. It involves implementing policies, monitoring controls, and continuously evaluating the compliance landscape to reduce the risk of violations or breaches.
- Cybersecurity -
The practice of protecting systems, networks, and data from digital attacks, unauthorized access, or damage. It includes policies, technologies, and controls to ensure the confidentiality, integrity, and availability of information.
p
- Penetration Testing Services -
Simulated cyberattacks conducted by ethical hackers to test an organization’s security defenses. These tests identify vulnerabilities that could be exploited by real attackers.
q
- Qualified Security Assessor (QSA) -
An individual certified by the PCI Security Standards Council to assess and validate a merchant’s or service provider’s compliance with PCI DSS requirements.
s
- Social Engineering -
A cyberattack technique that manipulates people into revealing confidential information. Common tactics include phishing, pretexting, and baiting.
