CYBER SECURITY

Cloud related acronym to help you in your CCSP and other cyber security exams.

CASB – CLOUD ACCESS SECURITY BROKER
CSP – CLOUD SERVICE PARTNER
CSB – CLOUD SERVICE BROKER
SAN – STORAGE AREA NETWORK
NAS – NETWORK ATTACHED STORAGE
DRP – DISASATER RECOVERY PLAN
BCP – BUSINESS CONTINUITY PLAN
FISMA – FEDERAL INFORMATION SECURITY ACT
PCI DSS – PAYMENT CARD INDUSTRY DATA SECURITY STANDARD
FIPS – FEDERAL INFORMATION PROCESSING STANDARD
AES – ADVANCED ENCRYPTION STANDARD
HSM – HARDWARE SECURITY MODULE
HVAC – HEATING VENTILLATION AND AIR CONDITIONING
RTO – RECOVERY TIME OBJECTIVE
RPO – RECOVERY POINT OBJECTIVE
RSL – recovery service level
SCM – SOFTWARE CONFIGURATION MANAGEMENT
CMDB – CONFIGURATION MANAGEMENT DATABASE
CI/CD – CONTINOUS INTEGRATION / CONTINOUS DEPLOYMENT
SAST – STATIC APPLICATION SECURITY TESTING
DAST – DYNAMIC APPLICATION SECURITY TESTING
IAST – INTERACTIVE APPLICATION SECURITY TESTING
RASP – RUNTIME APPLICATION SECURITY TESTING
OSS – OPEN SOURCE SOFTWARE
REST API – REPRESENTATIONAL STATE TRANSFER
BIOS – BASIC INPUT OUTPUT SYSTEM
FCOE – FIBRE CHANNEL OVER ETHERNET
CIS – CENTRE FOR INTERNET SECURITY
DISA – DEFENCE INFORMATION SYSTEM AGENCY
STIG – SECURITY TECHNICAL IMPLEMENTATION GUIDE
KVM – KEYBOARD VIDEO MOUSE SWITCH
VXLAN – VIRTUAL EXTENSIBLE LAN
DNSSEC – DNS SECURITY EXTENSION
IKEV2 – INTERNET KEY EXCHANGE V2
WSUS – WINDOWS SERVER UPDATE SERVICE
ITIL – INFORMATION TECHNOLOGY INFRASTRUCTURE LIBRARY
ITSM – IT SERVICE MANAGEMENT
ACL=access control list
ANF=application normative framework
API=application program interface
APSM=application security mgmt process
ASC=application security control
ASIC=application specific integrated circuit
BC/DR=business continuity/disaster recovery
BCM=business continuity management
BIA=business impact analysis
BYOD=bring your own device
CBK=common body of knowledge
CCSK=certificate of cloud security knowledge
CCSP=certified cloud security professional
CDN=content delivery network
CIA triad=confidentiality, integrity, availability
CPU=central processing unit
CRM=customer relationship manager
CSA=cloud security alliance
DAM=database access management
DAR=data at rest
DEVops=development operations
DLP=data loss prevention
DOS/DDOS=denial of service/distributed denial of service
DRM=digital rights management
EOL=end-of-life
FTP=file transfer protocol
GLBA=Gramm-Leach-Bliley Act
IAAS=infrastructure as a service
IAM=identity access management
IPSEC=IP security
LAN=local area network
LDAP=lightweight directory access protocol
MPLS=multi protocol label switching
ONF=organizational normative framework
OSI=open systems interconnection
PAAS=platform as a service
PCI=payment card industry
PII=personally identifiable information
PKI=private key infrastructure
RAM=random access memory
REST=representational state transfer
RMF=risk management framework
SAAS=software as a service
SAML=security assertion markup language
SDLC=software development life cycle
SLA=service level agreement
SMTP=simple mail transfer protocol
SOAP=simple object access protocol
SOX=sarbanes-oxley
SQL=structured query language
SSL=secure sockets layer
SSO=single sign on
STRIDE=spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege
TCI=trusted cloud initiative
TCP=transmission control protocol
TLS=transport layer security
TOS=trusted operating system
UDP=user datagram protocol
VLAN=virtual local area network
VM=virtual machine
VPN=virtual private network
WAF=web application firewall
WAN=wide area network
WDE=whole disk encryption
WINE=Wine is not an emulator
XML=extended markup language
PIMS – PRIVACY INFORMATION MANAGEMENT SYSTEM
FINRA – FINANCIAL INDUSTRY REGULATORY AUTHORITY
SOC – SERVICE ORGANIZATION CONTROL
GAPP – GENERALLY ACCEPTED PRIVACY PRINCIPLES
CSC – CRITICAL SECURITY CONTROLS
CCM – CLOUD CONTROL MATRIX
ENISA – EUROPEAN NETWORK AND INFORMATION SECURITY AGENCY
STAR – SECURITY TRUST AND ASSURANCE REGISTRY
AICPA – AMERICAN INSTITUTE OF CERTIFIED PUBLIC ACCOUNTANTS
NFPA – NATIONAL FIRE PROTECTION ASSOCIATION

Reference:

CCSP study guide ver.3

hxxps://www.txhackertracker.com/2019/06/ccsp-acronyms-initial-draft.html