principles, frameworks and best practices Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/infosec-glossary/category/principles-frameworks-and-best-practices Exploring the intersection of cybersecurity, psychology, and resilience. Fri, 28 Mar 2025 12:01:53 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://jeanchristophvonoertzen.com/wp-content/uploads/2020/10/favicon-4.png principles, frameworks and best practices Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/infosec-glossary/category/principles-frameworks-and-best-practices 32 32 BCDR https://jeanchristophvonoertzen.com/infosec-glossary/bcdr https://jeanchristophvonoertzen.com/infosec-glossary/bcdr#respond Fri, 28 Mar 2025 12:01:53 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1740 BCDR: Business Continuity and Disaster Recovery BCDR refers to the strategies and processes that organizations put in place to ensure that critical business functions can continue during and after a disruptive event, such as natural disasters, cyber-attacks, or system failures. Business Continuity (BC) focuses on maintaining essential operations and services during such disruptions, while Disaster […]

The post BCDR appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/bcdr/feed 0 CPTED https://jeanchristophvonoertzen.com/infosec-glossary/cpted https://jeanchristophvonoertzen.com/infosec-glossary/cpted#respond Mon, 24 Feb 2025 18:21:44 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1444 CPTED: Crime Prevention Through Environmental Design Crime Prevention Through Environmental Design (CPTED) is a strategy that aims to deter criminal behavior by modifying the physical environment. CPTED principles focus on designing spaces that enhance visibility, accessibility, and natural surveillance, thereby reducing opportunities for crime. By implementing CPTED strategies, organizations can enhance security and create safer […]

The post CPTED appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/cpted/feed 0 CIA https://jeanchristophvonoertzen.com/infosec-glossary/cia https://jeanchristophvonoertzen.com/infosec-glossary/cia#respond Sat, 22 Feb 2025 23:31:49 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1586 CIA : Confidentiality Integrity Availability The CIA triad represents the three core principles of information security: Confidentiality, Integrity, and Availability. Confidentiality ensures that sensitive information is accessible only to authorized users, protecting it from unauthorized access. Integrity refers to the accuracy and reliability of data, ensuring that it is not altered or tampered with. Availability […]

The post CIA appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/cia/feed 0 CCB https://jeanchristophvonoertzen.com/infosec-glossary/ccb https://jeanchristophvonoertzen.com/infosec-glossary/ccb#respond Wed, 19 Feb 2025 16:12:15 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1438 CCB: Configuration Control Board A Configuration Control Board (CCB) is a group of individuals responsible for overseeing and managing changes to a project or system’s configuration. This typically includes evaluating, approving, or rejecting proposed changes to ensure that all modifications are aligned with project goals and do not negatively impact system performance or security. The […]

The post CCB appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/ccb/feed 0 BCP https://jeanchristophvonoertzen.com/infosec-glossary/bcp https://jeanchristophvonoertzen.com/infosec-glossary/bcp#respond Wed, 19 Feb 2025 09:56:08 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1584 BCP : Business Continuity Plan A Business Continuity Plan (BCP) is a documented strategy that outlines how an organization will continue its essential functions during and after a disruptive event. The BCP includes procedures for responding to emergencies, recovering critical operations, and protecting vital resources. It is a crucial component of Business Continuity Management (BCM) […]

The post BCP appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/bcp/feed 0 OSC&R https://jeanchristophvonoertzen.com/infosec-glossary/oscr https://jeanchristophvonoertzen.com/infosec-glossary/oscr#respond Wed, 19 Feb 2025 07:57:29 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1640 OSC&R : Open Software supply Chain attack Reference […] is an open framework that provides a comprehensive, systematic and actionable way to understand attacker behaviors and techniques. Like MITRE ATT&CK, OSC&R is organized into a clear and structured view of the tactics, techniques, and procedures (TTPs) used by adversaries. However, OSC&R is the first and […]

The post OSC&R appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/oscr/feed 0 OTP https://jeanchristophvonoertzen.com/infosec-glossary/otp https://jeanchristophvonoertzen.com/infosec-glossary/otp#respond Tue, 18 Feb 2025 18:49:00 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1566 OTP: One-Time Password An One-Time Password (OTP) is a unique code that is generated for a single use, providing an additional layer of security during authentication processes. OTPs are typically used in conjunction with traditional passwords to implement a stronger security measure known as Two-Factor Authentication (2FA). When logging into an account or system, a […]

The post OTP appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/otp/feed 0 ISAC https://jeanchristophvonoertzen.com/infosec-glossary/isac https://jeanchristophvonoertzen.com/infosec-glossary/isac#respond Sat, 05 Oct 2024 08:01:21 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1467 ISAC: Information Sharing and Analysis Center […] non-profit organizations that provide a central resource for gathering information on cyber threats (in many cases to critical infrastructure) as well as allow two-way sharing of information between the private and the public sector about root causes, incidents and threats, as well as sharing experience, knowledge and analysis. […]

The post ISAC appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/isac/feed 0 MAO https://jeanchristophvonoertzen.com/infosec-glossary/mao https://jeanchristophvonoertzen.com/infosec-glossary/mao#respond Mon, 10 Jun 2024 11:33:54 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1428 MAO: Maximum Allowable Outage see MTD MAO: Maximum Allowable Outage see MTD

The post MAO appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/mao/feed 0 MAD https://jeanchristophvonoertzen.com/infosec-glossary/mad https://jeanchristophvonoertzen.com/infosec-glossary/mad#respond Mon, 10 Jun 2024 11:33:09 +0000 https://jeanchristophvonoertzen.com/?post_type=encyclopedia&p=1426 MAD: Maximum Allowable Downtime see MTD MAD: Maximum Allowable Downtime see MTD

The post MAD appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/infosec-glossary/mad/feed 0