Information Security Frameworks

The terms

• Identity and Access Management (IAM)

  Identity and access management is the set of processes and tools that establish who a user is, give them the right level of access to systems and data, and review and remove that access over time.

  Domain: Technology, Cyber and Data

• Information Security Risk Assessment

  An information security risk assessment is a structured exercise that identifies what information assets matter, what threats and weaknesses could harm them, and how likely and costly the harm would be.

  Domain: Technology, Cyber and Data

• IT Change Management

  IT change management is the controlled process for requesting, assessing, approving, testing, scheduling and recording changes to systems, so that updates do not cause outages, security gaps or unauthorised alterations.

  Domain: Technology, Cyber and Data

• Principle of Least Privilege

  Least privilege is the rule that every person, account or application gets the smallest set of permissions that lets it do its job, and keeps them only while the need lasts.

  Domain: Technology, Cyber and Data

• Privileged Access Management (PAM)

  Privileged access management is the set of tools and rules that control, record and limit the use of powerful accounts, such as system administrators, database owners and service accounts.

  Domain: Technology, Cyber and Data