Skip to content
GDFN domain marketplace banner

Data Protection Glossary

A working glossary for protection programs: classification, access control, encryption, backup, detection, response, and assurance.

Term: Network Segmentation Definition: Network Segmentation is the practice of dividing networks into zones to limit lateral movement and reduce blast …

Data Protection Glossaryprotection-term-network-segmentation

Term: Patch Management Definition: Patch Management is the process of deploying software updates to remediate vulnerabilities and maintain system …

Data Protection Glossaryprotection-term-patch-management

Term: Privileged Access Management (PAM) Definition: Privileged Access Management (PAM) is controls that govern high-risk administrative access …

Data Protection Glossaryprotection-term-privileged-access-management-pam

Term: Recovery Point Objective (RPO) Definition: Recovery Point Objective (RPO) is the maximum acceptable data loss measured in time; a core data …

Data Protection Glossaryprotection-term-recovery-point-objective-rpo

Term: Recovery Time Objective (RTO) Definition: Recovery Time Objective (RTO) is the maximum acceptable time to restore a service after disruption; a …

Data Protection Glossaryprotection-term-recovery-time-objective-rto

Term: Retention and Legal Hold Definition: Retention and Legal Hold is policies and controls that govern how long data and logs are kept and how …

Data Protection Glossaryprotection-term-retention-and-legal-hold

Term: Role-Based Access Control (RBAC) Definition: Role-Based Access Control (RBAC) is an authorization model that assigns permissions to roles (job …

Data Protection Glossaryprotection-term-role-based-access-control-rbac

Term: Secrets Management Definition: Secrets Management is tools and processes for storing, rotating, and auditing credentials, API keys, …

Data Protection Glossaryprotection-term-secrets-management

Term: Secure SDLC Definition: Secure SDLC is embedding security controls and testing into software development from design through deployment and …

Data Protection Glossaryprotection-term-secure-sdlc

Term: Security Information and Event Management (SIEM) Definition: Security Information and Event Management (SIEM) is centralized collection and …

Data Protection Glossaryprotection-term-security-information-and-event-management-siem