Glossary

Identity and access management is the set of processes and tools that establish who a user is, give them the right level of access to systems and data, and review and remove that access over time.

Identity theft is the use of another person's identifying details, such as name, account numbers, documents or login credentials, without consent to commit fraud or obtain money, credit or services.

Incident response is the organised process of detecting, assessing, containing and recovering from a security incident or operational disruption, and learning from it afterwards.

An information security risk assessment is a structured exercise that identifies what information assets matter, what threats and weaknesses could harm them, and how likely and costly the harm would be.

Inherent risk is the exposure an activity carries by its very nature, judged as if no safeguards were in place. It is the starting point before any control is credited.

An insider threat is the risk that someone with authorised access, such as an employee, contractor or partner, harms the organisation by misusing data, systems or premises, on purpose or by mistake.

Insurance fraud is any dishonest act to obtain an insurance benefit, premium advantage or payment that is not deserved, committed by policyholders, claimants, intermediaries, insiders or organised groups.

Integration is the final stage of money laundering, in which cleaned funds re-enter the legitimate economy as apparently lawful wealth, such as property, business assets, investments or luxury goods.

Integrity is the quality of acting in an honest way and consistently with stated values and rules, including when nobody is watching or when doing otherwise would be easier or more profitable.

An internal carbon price is a cost per tonne of carbon dioxide that a company sets for itself, and applies in its own decisions, to reflect the present or future cost of emissions.

Internal fraud is fraud committed by an organisation's own employees, managers or directors, who use their position, access or knowledge to take assets or manipulate records for personal gain.

Investment fraud is deceiving investors with false or misleading claims about an investment, so they hand over money on the basis of promised returns, safety or opportunities that do not exist.

ISO 14001 is an international standard that sets requirements for an organisation's environmental management system, which can be assessed and certified by an independent body.

IT change management is the controlled process for requesting, assessing, approving, testing, scheduling and recording changes to systems, so that updates do not cause outages, security gaps or unauthorised alterations.

IT governance is the structure of decision rights, policies and oversight through which leaders direct technology so that it supports business strategy, delivers value, and keeps its risks within acceptable limits.