Information Security Glossary

Research conducted to gain the knowledge or understanding to meet a specific, recognized need.

A family of security controls that enable an organization to periodically assess the security controls effectiveness

Any hardware, software, system, or data owned, leased, vended, contracted, or operated by the university that is essential to its operations

The degree of confidence in the identity verification, authentication process, and security measures used to issue and manage digital certificates

A family of security controls that allow an organization to create, protect, and retain system audit record

Authentication is a way of establishing that the user is who they claim to be before granting access to university systems and data.

An IPSec security protocol that can provide integrity protection for packet headers and data through authentication

Washington University in St. Louis uses a two-factor (or two-step) authentication service provided by Duo…

A system or device that verifies the identity of a user or network element