CISSP H13, 14, 15

• CAE

  Chief Audit Executive
• SSAE 18

  Standard of Statements for Attestation Engagements document
• SOC

  Service Organization Controls
• COBIT

  Control Objectives for Information and related Technologies
• SCAP

  Security Content Automation Protocol
• CVE

  Common Vulnerabilities and Exposures
• CVSS

  Common Vulnerabilities Scoring System
• CCE

  Common Configuration Enumeration
• CPE

  Common Platform Enumeration
• XCCDF

  Extensible Configuration Checklist Description Format
• OVAL

  Open Vulnerability and Assessment Language
• BAS

  Breach and Attack Simulations
• SAST

  Static Application Security Testing
• DAST

  Dynamic Application Security Testing
• RUM

  Real User Monitoring
• IAST

  Interactive Application Security testing
• RASP

  Runtime Application Self Protection
• IAM

  Identity and Acces Management
• HVAC

  Heating, Ventilation, AirConditioning
• MDM

  Mobile Device Management
• FRR

  False Rejection Rate
• FAR

  False Acception Rate
• CER

  Crossover Error Rate
• EER

  Equal Error Rate
• HMAC

  Hash Message Authentication Code
• HOTP

  HMAC One Time Password
• TOTP

  Time-based One Time Password
• IDP

  Identity Provider
• IDM

  Identity Management
• SSO

  Single Sign On
• PKI

  Public Key Infrastructure
• FIMs

  Federated Identity Management systems
• AUP

  Acceptable Use policy
• DAC

  Discretionary Access Control
• NTFS

  New Technology File System
• RBAC

  Role Based Access Control
• ABAC

  Attribute-Based Access Control
• SDN

  Software Defined Network
• MAC

  Mandatory Access Control
• XML

  Extensible Markup Language