Cybersecurity and compliance glossary

Definitions of the terms, acronyms and frameworks used in security and compliance, with links to our guides on each topic.

All terms

From ISO 27001 and ENS to EDR, SIEM and pentesting, explained in plain language.

ISO 27001 Annex A

Attack Surface Management

Attack surface and pentesting

Business Email Compromise

Security awareness

Centro Criptológico Nacional

CCN-STIC security guides

Certificación de Conformidad

ENS Certification of Conformity

Common Vulnerabilities and Exposures

Attack surface and pentesting

Common Vulnerability Scoring System

Attack surface and pentesting

Declaración de Conformidad

ENS Declaration of Conformity

Digital Operational Resilience Act

Endpoint Detection and Response

SOC and monitoring

Esquema Nacional de Seguridad (Spanish National Security Framework)

Categorías del ENS: básica, media y alta

Compliance operations

Information Security Management System

Information security management system standard

Mobile Device Management

Security awareness

Managed Detection and Response

SOC and monitoring

Multifactor Authentication

Security awareness

Network and Information Security Directive 2

Password manager

Password manager

Security awareness

Penetration testing

Attack surface and pentesting

Security awareness

Plan de adecuación

ENS compliance plan

Attack surface and pentesting

Risk assessment

Risk assessment

SaaS management

SaaS management

Security awareness

Security Information and Event Management

SOC and monitoring

Security Operations Centre

SOC and monitoring

System and Organization Controls 2

Social engineering

Social engineering

Security awareness

Security awareness

Statement of Applicability

Attack surface and pentesting

Extended Detection and Response

SOC and monitoring