IT Resilience and Third-Party Risk

The terms

• Cloud Governance

  Cloud governance is the set of policies, roles and checks that decide who may buy and use cloud services, how data and costs are controlled, and how security and legal duties are met.

  Domain: Technology, Cyber and Data

• Cyber Supply Chain Risk Management Acronym: C-SCRM

  Cyber supply chain risk management is the practice of identifying and reducing the security risks that come from suppliers, software components, hardware and service providers an organisation depends on.

  Domain: Technology, Cyber and Data

• Disaster Recovery Testing

  Disaster recovery testing is the planned exercise of restoring systems and data from backups or alternate sites, to prove that recovery can meet its time and data-loss targets before a real failure.

  Domain: Technology, Cyber and Data

• IT Governance

  IT governance is the structure of decision rights, policies and oversight through which leaders direct technology so that it supports business strategy, delivers value, and keeps its risks within acceptable limits.

  Domain: Technology, Cyber and Data

• Shared Responsibility Model

  The shared responsibility model divides security and compliance duties between a cloud provider and its customer, with the split depending on the service type, so that each knows what it must secure.

  Domain: Technology, Cyber and Data

• Single Point of Failure (SPOF)

  A single point of failure is any one component, person, supplier or process whose breakdown would stop an entire service or system because no backup or alternative route exists.

  Domain: Technology, Cyber and Data