Glossary · Security, trust and compliance
Encryption in transit and at rest
Protection of data moving between systems (TLS 1.2 or higher) and stored (AES-256 with keys in a cloud key management service).
More in security, trust and compliance
- Audit scope
- CSA STAR, CAIQ and SIG
- CVE (Common Vulnerabilities and Exposures)
- Data processing agreement (DPA)
- GDPR, UK GDPR and CCPA/CPRA
- HIPAA and PHI
- IAM (identity and access management)
- ISO/IEC 27001 and 42001
- Key management service (KMS)
- Lateral movement
- Multi-factor authentication (MFA)
- NERC CIP
- NIST Cybersecurity Framework (CSF)
- OWASP and ASVS
- PCI DSS
- Penetration test
- SAML and OIDC (single sign-on protocols)
- Secure software development (SSDF) and SBOM
- Security packet
- security.txt
- Server-side request forgery (SSRF)
- SOC 2 Type I and Type II
- SOC 2 Type II
- Subprocessor
- Trust Center
- Vulnerability disclosure
Bring us your last P1.
Keep the root cause to yourself; in a 30-minute session we walk through how REAP would have investigated it, evidence first. The replay on your own network happens inside the proof of value.