Glossary

AI red teaming

Experts attack an AI system on purpose, to find ways it could be tricked or misused before criminals do.

AML / KYC

Anti-Money Laundering / Know Your Customer. Checks that banks use to confirm who customers are and stop criminal money.

API

Application Programming Interface. The way two software programs talk to each other.

BCM / BCP

Business Continuity Management / Plan. Being ready to keep working when something goes wrong.

CISO / vCISO

Chief Information Security Officer: the leader in charge of security. A virtual CISO is an expert who does this job for you part-time.

CNAPP

Cloud-Native Application Protection Platform. One tool that protects everything you run in the cloud.

CTEM

Continuous Threat Exposure Management. Testing your defences again and again, not just once a year.

DDoS

Distributed Denial of Service. An attack that floods a website with fake visits so real people cannot use it.

DLP

Data Loss Prevention. Stops private information from leaving the organization.

DPO

Data Protection Officer. The person responsible for protecting personal data and following privacy law.

DR / DRaaS

Disaster Recovery (as a Service). Getting your systems and data back after a disaster or attack.

DSPM

Data Security Posture Management. Finds where sensitive data is kept and checks that it is protected.

EDR

Endpoint Detection & Response. Protects each computer or phone and reacts if it is attacked.

Firewall / NGFW

A security gate that decides which internet traffic is allowed in or out. A next-generation firewall also understands apps and users.

Forensics

Investigating an attack after it happens, to find out what happened and collect evidence.

GRC

Governance, Risk & Compliance. Making sure an organization is well managed, knows its risks and follows the rules.

IAM

Identity & Access Management. Makes sure the right people get the right access.

ICS / OT

Industrial Control Systems / Operational Technology. Computers that run machines in factories, power plants and oil and gas sites.

IEC 62443

The international standard for keeping industrial control systems safe.

IGA

Identity Governance & Administration. Keeps track of who has access to what, and removes access that is no longer needed.

ISO 27001

An international standard that shows an organization manages information security properly.

ISO 42001

An international standard for managing artificial intelligence responsibly.

MCP

Model Context Protocol. A way for AI assistants to connect to other tools and data. It needs protecting like any other connection.

MDR

Managed Detection & Response. A service where experts find and stop attacks for you.

MFA / SSO

Multi-Factor Authentication: logging in with two proofs, like a password and a code. Single Sign-On: one login for many apps.

MSS

Managed Security Services. Security that we run for you as a subscription.

NCSA

Qatar’s National Cyber Security Agency.

NDR

Network Detection & Response. Watches network traffic for suspicious behaviour.

NIA

Qatar’s National Information Assurance policy and standard: the national rules for protecting information.

PAM

Privileged Access Management. Protects the most powerful accounts, like system administrators.

PCI DSS

The security standard for organizations that handle payment cards.

PDPPL

Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016).

Penetration test

A safe, approved attack by experts to find weak spots before criminals do.

Phishing

Fake emails or messages that trick people into giving passwords or money.

Prompt injection

Hiding instructions in text to trick an AI system into doing something it should not.

RAG

Retrieval-Augmented Generation. An AI that looks up your own documents before answering. It must be set up so it cannot leak them.

Ransomware

Malware that locks your files and demands payment to unlock them.

SASE / SSE

Secure Access Service Edge. Cloud-delivered security for staff working from anywhere.

SCADA

Supervisory Control and Data Acquisition. Systems that monitor and control industrial equipment.

SIEM

Security Information & Event Management. Collects security records in one place to spot attacks.

SIM swap

A fraud where criminals move your phone number to their own SIM card to steal codes and accounts.

SOAR

Security Orchestration, Automation & Response. Automates routine security actions so response takes minutes, not days.

SOC

Security Operations Center. A team that watches and defends systems around the clock.

SS7 / Diameter

The signalling systems mobile networks use to connect calls and messages. Attackers can misuse them to track or intercept phones.

TCO / ROI

Total Cost of Ownership: what something really costs over time. Return on Investment: what you get back for what you spend.

UEBA

User & Entity Behaviour Analytics. AI that learns normal behaviour and warns when something looks unusual.

VAPT

Vulnerability Assessment & Penetration Testing. Finding and safely testing weak spots.

XDR

Extended Detection & Response. Connects security alerts from many places into one view.

Zero Trust

A security approach that checks every user and device every time, instead of trusting anyone automatically.

No term found. Try a shorter word, or ask our team.