Governance
69 acronyms in this category, in plain English.
- ALE Annualized Loss Expectancy
- ARO Annualized Rate of Occurrence
- ATO Authority to Operate
- BCP Business Continuity Plan
- BIA Business Impact Analysis
- CCPA California Consumer Privacy Act
- CIS Center for Internet Security
- CISO Chief Information Security Officer
- CJIS Criminal Justice Information Services
- CMMC Cybersecurity Maturity Model Certification
- COBIT Control Objectives for Information and Related Technologies
- COOP Continuity of Operations
- COPPA Children's Online Privacy Protection Act
- COSO Committee of Sponsoring Organizations of the Treadway Commission
- CPRA California Privacy Rights Act
- CRA Cyber Resilience Act
- CSF Cybersecurity Framework
- CUI Controlled Unclassified Information
- DFARS Defense Federal Acquisition Regulation Supplement
- DORA Digital Operational Resilience Act
- DPIA Data Protection Impact Assessment
- DPO Data Protection Officer
- DRP Disaster Recovery Plan
- EAR Export Administration Regulations
- eIDAS Electronic Identification, Authentication and Trust Services
- ENISA European Union Agency for Cybersecurity
- ERM Enterprise Risk Management
- FAIR Factor Analysis of Information Risk
- FedRAMP Federal Risk and Authorization Management Program
- FERPA Family Educational Rights and Privacy Act
- FFIEC Federal Financial Institutions Examination Council
- FISMA Federal Information Security Modernization Act
- GDPR General Data Protection Regulation
- GLBA Gramm-Leach-Bliley Act
- GRC Governance, Risk, and Compliance
- HIPAA Health Insurance Portability and Accountability Act
- HITECH Health Information Technology for Economic and Clinical Health Act
- ISMS Information Security Management System
- ISO 27001 ISO/IEC 27001 Information Security Management
- ITAR International Traffic in Arms Regulations
- ITGC Information Technology General Controls
- ITIL Information Technology Infrastructure Library
- KPI Key Performance Indicator
- KRI Key Risk Indicator
- LGPD Lei Geral de Protecao de Dados
- NDA Non-Disclosure Agreement
- NERC CIP North American Electric Reliability Corporation Critical Infrastructure Protection
- NIS2 Network and Information Security Directive 2
- NIST National Institute of Standards and Technology
- OCTAVE Operationally Critical Threat, Asset, and Vulnerability Evaluation
- PCI DSS Payment Card Industry Data Security Standard
- PDPA Personal Data Protection Act
- PHI Protected Health Information
- PII Personally Identifiable Information
- PIPEDA Personal Information Protection and Electronic Documents Act
- PIPL Personal Information Protection Law
- POA&M Plan of Action and Milestones
- POPIA Protection of Personal Information Act
- RMF Risk Management Framework
- RPO Recovery Point Objective
- RTO Recovery Time Objective
- SLA Service Level Agreement
- SLE Single Loss Expectancy
- SLO Service Level Objective
- SOC 2 System and Organization Controls 2
- SOX Sarbanes-Oxley Act
- STIG Security Technical Implementation Guide
- TPRM Third-Party Risk Management
- vCISO Virtual Chief Information Security Officer