Viernes 16 Octubre 2026 18:51:38 GMT+02:00
Netcrook
WIKICROOK - C
TÉRMINOS TÉCNICOS
C-ITSCooperative Intelligent Transport Systems for connected communication between vehicles and road infrastructure.C-suiteThe senior executive layer where security decisions compete with business priorities.c-toxcoreThe reference implementation of the Tox protocol, used by Tox-compatible clients.C2 APIA command-and-control interface that lets operators issue instructions to compromised systems.C2 check-inA periodic outbound connection used by malware to receive instructions or send status.C2 serverCommand-and-control server used by malware to receive instructions or send stolen data.C2 trafficCommand-and-control communications used to direct malware or compromised systems.CACertificate Authority, the entity that issues digital certificates and signs them for trust validation.CA-agnosticAble to manage certificates from multiple certificate authorities rather than relying on a single issuer.CACCustomer acquisition cost, meaning the total spend required to win a new customer.Cache ComponentsA Next.js feature related to caching and prerendering in the App Router.Cache dataTemporary web data that can help confirm recent browsing.Cache foldera temporary storage location used by software to stage data or files.Cache hitA request that reuses stored context, often reducing computation and cost.Cache Hit RateThe share of requests that reuse cached content, which can strongly affect total AI spend.Cache integrityThe trustworthiness of stored cached content, meaning the cache contains the expected data and not altered material.Cache keythe identifier a cache uses to store and retrieve a response.Cache missA request that cannot reuse prior context and must be processed from scratch.Cache storageA browser-side storage layer that can retain web responses associated with a site’s origin.Cached tokensReused prompt material that some AI systems track separately for usage and billing.CAD drawingstechnical design files that can be highly sensitive in industrial work.CAD modelsdigital engineering files used to design and refine products.Cadastrea public register used to manage property, land, and ownership-related records.CAEcomputer-aided engineering tools used for simulation and design work.CageFSAn isolation layer used in shared hosting to separate one user’s environment from another’s.CAI digitaleThe digital version of the amicable accident report used to document a road incident and support an insurance claim.CAISIThe U.S. Center for AI Standards and Innovation, a Commerce Department office focused on AI standards and evaluation.CalcLibreOffice’s spreadsheet application, used to create and open workbooks and tables.CalDAVA protocol used to sync calendar data between a server and client devices.Calendar agingCapacity loss that occurs as a battery gets older, even when it is not heavily used.Call redirectionA feature or abuse pattern that reroutes calls to another destination or handler.Call scriptA prepared set of lines used to guide a fraudulent or deceptive phone call.Call transferA feature that moves an active call from one endpoint to another.Callback verificationA control that confirms a request through a separate, known-good contact path before money moves.Caller contextExtra information shown about an unknown caller to help a user judge trust before answering.Caller locationThe mechanism that helps emergency services determine where a call is coming from, especially important when networks fail.Caller verificationChecking a caller’s identity through an independent trusted channel.Caller-context signalsExtra information shown about an incoming call to help users judge whether it may be suspicious.Caller-ID spoofingFalsifying the number shown on a call so it appears to come from a trusted source.Calliopea steam-powered musical instrument associated with loud, distinctive tones.Camera conversionThe process of adapting an existing camera into a new operating form or use case.Camera repairWork done to restore a camera to usable condition.Camera systemThe software logic that defines what the viewer sees and from which angle.CampaignA coordinated wave of malicious activity aimed at a specific target set or region.Campaign labelAn analyst-assigned tracking name used to group related malicious activity.Campaign missionA story-driven gameplay segment used to test narrative and gameplay systems.Campaign scopeThe exact outreach activity a permission covers.Canary buildan early software release channel used to test features before wider deployment.Canary deploymentA staged release method that exposes a fix to a small group before wider rollout.Candidate patchA proposed fix that still needs review and testing before it can be trusted.Canned airPressurized air sold in a portable can, often used for dust removal.CanonA recurring fee in a software contract, often tied to service and support obligations.CanoneA recurring fixed fee paid to use a service or device.Canone mensilea recurring fixed payment made every month for access to a service.Canonical originThe single server-defined base URL an application should use for security-sensitive links and callbacks.Canonical pageThe preferred version of a page that a site wants search systems and users to treat as authoritative.Cap TableA record of who owns equity in a company and how ownership is divided across stakeholders.Capability benchmarksRepeatable tests used to compare how well different AI tools perform on the same task.Capability evaluationA targeted assessment that checks whether a model crosses a risk-relevant threshold.Capability gapA shortfall in staffing, skills, tools, or operational maturity that limits defense.Capability gatingA review process that slows or limits release when a model crosses a risk threshold.Capability profileA living view of a worker's strengths, gaps, and readiness for specific kinds of work.Capability roadmapA living plan for how a business function will improve over time after implementation.Capability-based regulationA policy model where legal obligations increase as a system becomes more powerful or risky.Capability-level viewAn approach that asks what business capability a system should improve before choosing the technology.CapacitanceThe ability of a system to store electrical charge, which can change when touched.Capacitive touch sensorA component that detects touch by sensing changes in capacitance.CapacityThe maximum amount of work or output a system, process, or plant can handle.Capacity buildingtraining and institutional support that helps organizations or countries adopt and govern technology more effectively.Capacity gatingLimiting access to a service when demand, compute, or operational limits are reached.Capacity headroomExtra infrastructure room that helps a service survive sudden traffic spikes.Capacity lossproductive time consumed by fixes, checks, and exception handling.Capacity reservationA mechanism for holding cloud compute capacity in advance so a workload has a better chance of running when needed.CAPEC-242A code injection attack pattern describing how input flaws can lead to executed code.Capillary electrophoresisA laboratory method used to separate DNA fragments for analysis.Capital allocationThe disciplined choice of where to place limited budget, time, and talent across competing technology priorities.Capital ImprovementA long-term business investment that is typically treated differently from ordinary maintenance for tax purposes.Capital incomeIncome earned from assets, such as profits, dividends, rents, and intellectual property.Capital intensityThe amount of money a business must keep spending to build and sustain a product or platform.Capital Markets UnionAn EU initiative aimed at making capital flow more easily across member states.Capitalized expectationsFuture profit expectations that become reflected in asset prices today.Capitolato di garaThe technical specification in a public tender that sets requirements, obligations, and acceptance criteria.CAPMA PMI entry-level certification that tests basic project management knowledge and requires no prior experience.CaporalatoIllegal labor recruitment or exploitation, especially where workers are subjected to unfair or degrading conditions.CAPSSCyber Assurance of Physical Security Systems, a certification scheme for cyber mitigations in network-connected security products.CAPTCHA spoofingA fake verification prompt designed to look legitimate while driving user action.Captive portalA guest-network access gate that controls connectivity until certain conditions are met.Capture-ReplayAbuse of previously obtained authentication material by sending it again to a target.Capture-the-Flag (CTF)A cybersecurity exercise where participants solve tasks to retrieve hidden markers, often used to measure offensive skill.CAPWAPA protocol used to manage wireless access points through centralized control traffic.Carbon creditA unit representing a quantified climate contribution, usually tied to one metric ton of CO2 equivalent.Carbon offsetA mechanism used to balance emissions by funding equivalent reduction projects.Card datainformation linked to a payment card that can increase fraud risk if exposed.Card expiry dataThe date information used to determine whether a payment card should still be accepted.Card governancethe rules and controls for issuing, limiting, freezing, and revoking cards.Card-present fraudFraud involving a transaction that is treated like an in-person tap or chip payment.Card-present transactionA payment made when the customer’s card is physically present at checkout.CardDAVA protocol used to sync contact data between a server and client devices.CardingA form of payment fraud that involves testing or using stolen card data, often in small initial transactions.Cardiology practicea medical provider specializing in heart and circulatory care.Care sectora healthcare and elderly-care environment that can face elevated operational and data sensitivity.Career anxietystress or worry linked to job uncertainty, progression, or long-term employability.Career capitalSkills, experience, and connections that increase future job options.Career planningthe process of setting goals and choosing steps that support long-term work growth.CargoRust’s package manager and build tool, responsible for fetching, compiling, and building crates.Cargo transportationThe movement of goods through logistics networks, including rail freight.Carrier-grade NAT (CGNAT)A large-scale address translation method used to share public IP space across many private devices.Carrier-side enforcementA control applied by the telecom network instead of the user device.Carriera incertaa professional path without clear progression, often reducing motivation and retention.Cascade RiskThe chance that a disruption in one service spreads into other connected sectors or operations.Case archivea stored collection of legal or administrative records that can contain sensitive personal details.Case management dataInternal records used to track requests, incidents, or service workflows.Case-opening siteA service built around paying for randomized in-game item rewards.Cash dispenserThe ATM component that releases banknotes during a withdrawal.Cash forecastingEstimating future cash positions using current balances, expected inflows, and expected outflows.Cash-outthe point at which criminals try to withdraw or convert stolen funds into usable value.Cash-out pathThe route used to turn digital proceeds into spendable value.Catalog consolidationThe merging of publishing portfolios into fewer owners, which can increase market leverage.Catalog pipelineThe backend process that publishes and updates products across sales channels.CatalystA substance that can speed up a chemical reaction without being consumed in it.CatastoItaly’s administrative property registry used to identify buildings, land parcels, and related fiscal records.Catastrophic forgettingThe loss of previously learned knowledge when a model learns new tasks.CATVcable television infrastructure and the equipment used to support it.CC-Link IE TSNAn industrial Ethernet network designed for real-time control and scheduled traffic.CCaaSContact Center as a Service, cloud software used to run customer service operations and call handling.CCBHCCertified Community Behavioral Health Clinic, a care model centered on coordinated behavioral health services.CDMOa contract development and manufacturing organization supporting specialized production work.CDN/WAFEdge layers used to deliver content and filter malicious requests before they reach services.CDRCloud Detection and Response, a security discipline for spotting and responding to threats in cloud environments.CDSCore Data Services, SAP's model for defining structured data views and business logic foundations.CE-TCOsCyber-enabled transnational criminal organizations, a category for foreign groups tied to cybercrime and fraud.Cellular authenticationThe process a carrier and device use to confirm network access.Cellular backupA backup communication path that uses mobile networks when primary connectivity is unavailable.Cellular downgrade attackA tactic that pushes a device onto a less secure mobile network mode.Cellular-at-seashipboard mobile infrastructure that can distribute connectivity when normal land networks are out of reach.Center of excellenceA cross-functional group that reviews, standardizes, and guides AI adoption.Center of gravitythe balance point that affects stability in vehicles and other physical systems.Center-pivot irrigationa rotating watering system that creates circular crop patterns.Central bankA public institution that manages monetary policy, financial stability, and payment infrastructure.Central consoleA single dashboard for managing security settings across many devices.Central infrastructureThe core servers and systems that keep a platform running and coordinated.Central loggingCollecting activity records in one place so security teams can audit and investigate events.Central Person Register (CPR)Denmark’s civil registration system for core identity data.Central storageShared file location that can concentrate high-value project documents in one place.Centralized credential managementA model where an organization stores and governs employee secrets from one admin-controlled system.Centralized enforcementThe use of management tools to apply the same security policy across many endpoints.Centralized finance managementa setup where one system or admin view oversees multiple payment functions.Centralized serviceA remote platform that controls access, storage, or authentication for many users at once.Centralized subscription managementa model where many device connections are administered from one control point.Centralized systemsshared platforms that support many users or locations from one core environment.CentrifugeA device that spins samples so denser material moves away from lighter material.Centripetal forcethe net inward force required to keep an object moving in a circle.CEO impersonationA social-engineering tactic that mimics executive authority to pressure staff into acting quickly.CEO transitionThe transfer of top leadership from one chief executive to another.Certificate bindingThe process of tying an identity claim to the exact certificate that was actually authenticated.Certificate fingerprintA short cryptographic identifier used to compare whether two certificates are identical or closely related.Certificate governanceThe management of digital certificates used to authenticate systems and protect secure exchanges.Certificate hierarchyThe chain of trust that connects a certificate to its issuing authorities.Certificate impersonationA situation where a fake or mismatched certificate is used to pose as a trusted server.Certificate inventorya complete record of certificates, their owners, and their expiration dates.Certificate issuanceThe process of validating domain control before a certificate is signed.Certificate migrationThe process of moving from older cryptographic trust material to newer trusted certificates.Certificate Revocation List (CRL)A signed list of certificates that should no longer be trusted.Certificate rotationThe scheduled replacement of cryptographic certificates to keep trust systems current and secure.Certificate validityThe period during which a digital certificate is considered trusted and usable.Certification guideStructured study material meant to help candidates prepare for a credential.Certification programA structured process used to assess whether a service meets defined security or compliance criteria.Certification schemeA formal framework for evaluating whether a service meets defined security or compliance criteria.Certification scopeThe exact product, module, or environment covered by a security validation or approval.Certification testingFormal testing used to check whether a component meets required standards.Certified communicationsmessages handled with stronger delivery and evidentiary guarantees than ordinary email.Certified DataAn inferred technical reading for validated, authoritative, and controlled datasets used as a trusted AI input base.Certified renewable sourcesEnergy traced to approved renewable generation under a recognized certification process.CFDComputational Fluid Dynamics, a simulation method for analyzing airflow and related behavior.CFIUSA U.S. review body that examines some foreign investments for national-security risk.CFOChief Financial Officer, the executive typically responsible for financial planning, budgeting, and capital decisions.CGI endpointA web handler that processes HTTP requests, often used by embedded devices for administration or diagnostics.CGI programA web-handling component that processes browser or HTTP requests on a device.cgroupA Linux control-group mechanism that tracks and constrains processes.Chain of commandthe formal line of authority that defines who can direct actions and approvals.Chain of controlThe sequence of parties and actions that determines who can govern or verify a process.Chain of thoughtStep-by-step text generated by a model to resemble reasoning.Chain-of-Thought (CoT)A prompting pattern that asks a model to solve a task step by step.Chain-of-thought monitoringReview of a model’s intermediate reasoning to help spot suspicious behavior.Chained exploitA sequence of vulnerabilities combined to reach a deeper target than any single flaw could.Chained exploitationcombining multiple weaknesses in sequence to reach a larger objective.Chained flawsMultiple weaknesses combined to create a more powerful attack path than either flaw would provide alone.Chained URLa sequence of linked web addresses used to guide automated browsing.Chained VulnerabilitiesMultiple flaws combined so the output of one bug helps trigger another.Challenge PageA legitimate anti-bot interstitial used by web security systems to verify traffic before granting access.Chamber pressureThe pressure inside a combustion chamber that affects performance and safety.Change approval workflowa process that reviews and authorizes network policy edits before deployment.Change authorityThe right to make a system modification, separate from the ability to recommend one.Change detectionMonitoring that spots modifications to security rules or configurations.Change fatigueReduced organizational capacity caused by too many overlapping changes and demands.Change monitoringSecurity checks that look for unexpected modifications in files, updates, or admin activity.Change requesta formal workflow used to request and approve modifications to security policy or infrastructure.Change validationTesting updates before broad rollout to catch breakage early.Channel Awardsindustry awards tied to partners, resellers, and service providers.Channel ecosystemthe network of resellers, integrators, and service partners that help deliver security products and services.Channel enablementVendor programs that train and support partners so they can sell, deploy, and service security products.Channel governanceThe rules, permissions, and controls that manage how sales channels share and update data.Channel incentivesThe sales pressures or rewards that shape how partners and resellers behave.Channel mappingThe process of assigning captured data to specific output color channels.Channel orchestrationThe coordination of multiple delivery paths so notices move through the right route in a controlled way.Channel surfingMoving between channels without choosing specific programs in advance.Character rigThe underlying digital structure that lets animators pose and move a character in production software.Characteristic curveA graph showing how one electrical quantity changes in relation to another for a component or circuit.Charged dropleta liquid drop that carries electrical charge and may interact differently with a surface.ChargemasterA hospital pricing and billing file that maps services, supplies, and procedures to billable entries.Charging failureA condition where a battery will not accept power from its charger.CharismaPersonal influence that can inspire trust and action, while sometimes reducing critical scrutiny.Chart integrityThe reliability of music rankings when streams and metadata are not distorted by abuse.Chart of AccountsThe structured list of accounts used to organize financial reporting.Charter party recordsshipping contracts that define voyage terms, cargo obligations, and liability details.ChassisThe outer case that protects internal hardware components from physical damage.Chat logStored conversation data that may include sensitive or personal information entered by users.Chatbot governanceThe policies, roles, and controls used to manage a conversational AI system over time.Cheat sellera person or service that markets game-bypass tools.Checkout datainformation collected during purchase that can link identity, contact details, and order history.CheckpointA predefined point where extra review or safeguards are required.Checksum fileA file of hash values used to confirm that a downloaded file has not been altered.Checksum validationA network integrity check used to detect corrupted or malformed data.Chest strapa wearable band that keeps a sensor positioned against the body.Chief AI officerAn executive role that coordinates AI strategy, governance, and cross-functional execution.Chief executive officerThe top executive responsible for overall company direction and management.Chief Information Security Officer (CISO)The executive responsible for setting and running an organization’s security strategy.Child process chainA sequence of programs launched by one another, often useful for spotting suspicious execution.Child safety reviewan assessment of whether a product may create risks for minors.Children’s privacylegal and operational protections for personal data belonging to minors.Chimney effecta vertical channel that helps rising warm air escape from an enclosure.China-nexusAn attribution label indicating suspected alignment with China-linked activity, not proof of state sponsorship.Chip efficiencyThe amount of useful computing work a processor can deliver for each unit of energy consumed.Chip fabricationThe manufacturing of integrated circuits on silicon wafers using specialized equipment and processes.Chip shortageA supply condition where demand for chips exceeds available manufacturing output.ChipletA small semiconductor die that can be combined with others inside one package to build a larger system.ChiralityA property where a molecule exists in two mirror-image forms that can behave differently in biology.Choker designA neck-worn style that places hardware close to the body in a compact layout.Chosen plaintextData an attacker can select and ask a system to encrypt, often used in lab attacks.Chrome DevTools Protocol (CDP)A legitimate browser debugging and automation interface that malware may abuse for control or inspection.Chrome extension storageA browser API where extensions keep persistent data separate from normal browsing history.Chrome Stable ChannelThe production release track for Chrome, where security updates reach regular users and managed fleets.chrome.proxy.settingsA Chrome setting that lets an extension change how browser traffic is routed.Chromium BrowserA browser built on the Chromium project, including Chrome-like products that share similar profile storage patterns.Chromium sessionAn authenticated browser state that can preserve access through cookies and tokens.ChromotingThe Chrome component named in the fix, associated with Chrome Remote Desktop functionality.Chronic patientsPeople who need ongoing monitoring or long-term treatment.Chunk isolationSeparating retrieved content into controlled pieces to reduce instruction leakage across context.Chunked prefillA method that breaks long prompts into smaller pieces to reduce memory pressure during processing.Chunked transfer codingA way to send HTTP data in pieces when the full length is not known in advance.CIContinuous integration, the automated testing and build stage for code changes.CI FortifyA guidance term discussed in relation to isolating vital systems and planning for resilience in critical environments.CI integrationConnecting security checks to continuous integration pipelines so they run during builds.CI metadataconfiguration and operational details from continuous integration systems.CI workflowAn automated build-and-test process that may also run code generation or publishing tasks.CI/CD control planeThe management layer that coordinates builds, tests, and software delivery.CI/CD EnvironmentAutomated build and deployment systems used to test, package, and release software.CI/CD jobAn automated task in a pipeline, such as building, testing, or deploying code.CI/CD supply chainThe chain of tools, actions, and automation that can be abused if one trusted component is compromised.CI/CD workflowautomated build and release pipeline used to ship software changes.CIAMCustomer Identity and Access Management, the systems used to register, authenticate, and govern external user accounts.CIO readinessThe blend of skills and judgment needed to step into the chief information officer role.CIPCommon Industrial Protocol, a core industrial communications protocol used for device and control messaging.CIP SecurityA Rockwell-supported security layer for authenticated and protected industrial communications.CIP-002A NERC standard focused on identifying and categorizing BES Cyber Systems.CipherThe rule set or algorithm used to encrypt and decrypt a message.Circuit architectureThe overall structure and organization of an electronic design.Circuit boardthe flat board that connects electronic components into a working system.Circuit breakerA resilience pattern that pauses requests to a failing service before repeated errors cascade.Circuit theoryThe branch of electrical engineering that studies how components and networks behave under voltage and current.CircuitPythona Python variant for microcontrollers that emphasizes ease of use.Circular energyAn energy model that aims to reuse resources and reduce waste within a local system.Circular FinancingA funding pattern where money may loop through related parties and obscure true demand.Circular sawA rotating blade tool commonly used for cutting wood and other materials.Circular supply chainsProduction loops that reuse materials to reduce waste and resource demand.Circular validationA loop where the same system creates an artifact and then helps certify or explain it.CISA advisoriesOfficial cybersecurity notices that summarize vulnerabilities and defensive guidance for critical systems.CISA Known Exploited Vulnerabilities CatalogA U.S. government list used to prioritize patching for vulnerabilities believed to be exploited in the wild.CISA performance goalsA set of high-impact cybersecurity practices designed to help organizations focus on measurable risk reduction.Cisco ISECisco Identity Services Engine, a platform for centralized network access control and policy enforcement.CISO burnoutA deeper state of exhaustion that can reduce focus, resilience, and judgment.CISO fatigueOngoing strain caused by sustained pressure, high expectations, and constant decision load.CISO gapThe shortage or absence of dedicated security leadership inside an organization.CitationA reference to a source used to support an AI-generated response.Citation signalA reference marker that can influence whether content is surfaced inside a generated answer.Citation verificationThe process of checking that a referenced case, quote, or authority is real and accurate.Citizen engagement portala public-service interface where residents submit reports or requests.Citizen scienceScientific work that relies on participation from volunteers or non-professionals.Citrix NetScalerAn application delivery and access platform commonly deployed at the network edge.Civic addressthe specific service location used to determine what networks or technologies are available.Civil registryA government system that stores official identity and status records for residents.CJISThe FBI framework for protecting Criminal Justice Information across participating agencies and partners.Claim validationchecking whether an allegation is backed by independent evidence.Claim-only postingA threat statement that has not been independently verified.Claimed attackan allegation that still needs independent verification.Claimed data volumeA reported amount of files or storage attached to a victim entry.Claimed incidentan asserted event that has not been independently confirmed.Claimed responsibilityan allegation by a threat actor that still needs verification.Claims deadlineThe final date by which eligible people must submit a request for compensation.Claims PlatformA system that processes insurance or benefit claims and often stores identity and payment-related records.ClamAVAn open-source antivirus engine used to scan files, email, and archives for malware.Class actionA civil lawsuit brought on behalf of a larger group with similar claims.Class-action settlementA legal agreement that resolves claims brought by a group of plaintiffs.Classe di rischioThe level of AI risk used to determine how strict the relevant obligations will be.Classic OutlookMicrosoft’s desktop Outlook client for Windows.Classical computera standard computer built on conventional binary processing.Classical computingConventional computing based on bits that are either 0 or 1.Classical hardwareconventional computing systems built around standard processors.Classification taskA machine learning task where the system assigns a label, category, or score to an input.Clavichorda small keyboard instrument known for delicate touch and intimate sound.Claymore minea directional military device associated with forward-projected fragmentation.Clean backupsBackups trusted for restoration after an attack, ideally isolated and tested to reduce the risk of reinfection.Cleanroom recoveryan isolated restore environment used to rebuild systems with less risk of reintroducing threats.Cleanup toolsoftware intended to remove malware or help restore systems after an infection.Cleartext trafficNetwork data sent without encryption, making it easier to read or alter in transit.Click rateThe percentage of recipients who click a link in a phishing message or simulation.Click-RateThe percentage of recipients who interact with a simulated phishing message, usually by clicking a link or opening an attachment.Click-through rateThe share of users who interact with a lure, often used to judge phishing risk.Clickbaitingcontent designed to attract clicks through exaggerated or misleading framing.ClickFix CAPTCHAa fake verification prompt used to trigger harmful user interaction.ClickOnceA Microsoft Windows deployment technology that can install and run applications with minimal user interaction.ClientThe player-side software that renders the game and can be modified by cheats.Client Code ExecutionRunning attacker-influenced code on an end-user workstation or application client.Client confidentialitythe obligation to protect sensitive client records from unauthorized access or release.Client datarecords tied to customers that can create legal and financial risk.Client data breachalleged exposure of customer-related records.Client executionA class of attack where the vulnerable application on the endpoint runs attacker-controlled code.Client librarySoftware used by applications to communicate with an external service, such as a database.Client recordsinformation tied to service relationships, often sensitive and time-critical during incidents.Client SecretA private value used to identify and protect an app during authentication flows.Client startup chainThe sequence of components and checks an app needs before it opens successfully.Client tax datasensitive financial records that may carry legal and privacy risk.Client trust accountfunds held for clients under strict handling and access controls.Client Trust BoundaryThe point where software decides whether remote data or an external server should be trusted.Client-keyAn authorization token used by a device or service to recognize a trusted client.Client-server architectureA design where one component stores or provides data and another component accesses it.Client-sideSoftware logic that runs on the device itself rather than relying on a remote server.Client-side authenticationAuthentication logic handled by the client or browser, which is unsafe if the server does not independently verify it.Client-side checksSecurity logic that runs inside the app on the user’s device.Client-side codelogic that executes in the user's browser instead of on a server.Client-side exposureRisk that data shipped to a user's device can be inspected and recovered outside the developer's control.Client-side filteringDecisions made on the user device about what content to load, show, or suppress.Client-side middlewareLocal software that helps a browser or application handle security, authentication, or encryption tasks.Client-Side RiskSecurity exposure that occurs in the user’s browser or device before data reaches a server.Client-side runtimeThe environment in which code executes on the user's device through the browser.Client-side stateData a web app stores or sends with the browser and later trusts on the server side.Client-side trackingTracking behavior carried out in the user’s browser rather than on a server alone.Client-side validationChecks performed in the browser that can be bypassed if the server does not enforce the same rule.Client-side verificationA check performed by the local application to confirm that downloaded code matches the expected version.Client-visible dataInformation shown inside the app or game that users and observers can read directly.Climate disinformationmisleading or false content that distorts understanding of climate-related risks or data.Climate marketingBrand communication shaped by climate pressure, adaptation, and environmental context.Climate neutralitya state in which remaining greenhouse gas emissions are balanced by removal or offsetting.Climate riskthe chance that weather-related events will affect assets, people, or operations.ClingSTUNA Linux backdoor that exploits IoT vulnerabilities, provides remote command access, and can turn infected devices into proxy nodes.Clinical AIsoftware used to support diagnosis, triage, or treatment decisions.Clinical benchmarka test used to measure whether a medical AI system performs safely and accurately.Clinical databaseA structured collection of health-related records used for analysis or operations.Clinical pathwaysStructured steps that guide diagnosis, treatment, and follow-up in patient care.Clinical settingA supervised medical environment with defined safeguards and procedures.Clinical trial simulationthe use of models to explore possible outcomes before real-world testing.Clinical workflowthe practical sequence of tasks used by healthcare professionals in routine care.Clipboard abuseUsing copied text as a delivery step for attacker-controlled commands.Clipboard clipperMalware that watches copied text and swaps it, often to hijack crypto transfers.Clipboard dataText or other content temporarily stored by a user’s copy-and-paste actions, which malware may try to capture.Clipboard hijackA lure that places a malicious command on the clipboard so the victim pastes it into a local tool.Clipboard managerSoftware that stores, organizes, or recalls copied content for reuse.Clipboard pathThe internal route software uses to copy and paste data between locations or applications.Clipboard permissionsBrowser settings that let an extension read from or write to copied data, which can be sensitive in wallet workflows.Clipboard redirectionAn RDP feature that synchronizes clipboard data between the local machine and the remote session.Clipboard synca feature that moves copied content between devices.Clipboard textData temporarily copied by a user, which can include secrets, tokens, or sensitive text.Clipboard theftCapturing copied text or objects, which can expose passwords, tokens, and other secrets.CLIPRDRThe RDP clipboard redirection channel that transfers clipboard data between client and server.Clock driftGradual divergence between clocks that should stay synchronized.Clock stabilityHow accurately a radio stays on frequency over time, which is important for reliable reception and transmission.ClockworkA mechanical system of gears and parts that regulates motion or timekeeping.Clone modeA safer workspace mode that keeps the host-side copy read-only and reduces writable exposure.Clone websitea copied site used to imitate a legitimate business online.Cloned repositoryA copied project page or code base that can resemble a legitimate software project.Closed cooling loopA cooling design that recirculates water rather than relying on open evaporation, depending on site design.Closed systemA deployment where the model remains on the provider side and users interact through a controlled interface.Cloud abuseMisuse of cloud services, accounts, or features to support intrusion, persistence, or data access.Cloud account compromiseUnauthorized use of a valid cloud identity to access systems or data.Cloud account exploitationmisuse of online tenant or identity accounts to reach data or services.Cloud accountingonline financial software used to manage bookkeeping, invoicing, and reporting.Cloud AI infrastructureCloud-hosted model endpoints, API keys, and related services used to run AI systems.Cloud ALMA cloud-based application lifecycle management platform used to monitor and coordinate hybrid enterprise operations.Cloud API keyA secret used to authenticate software or scripts to cloud services.Cloud backlogContracted cloud revenue expected to be recognized in future periods, used as a commitment metric rather than a usage metric.Cloud bindingThe linking of a local controller or device to a cloud account for remote management.Cloud business platformonline software that supports core customer operations.Cloud C2Command-and-control that uses legitimate cloud platforms to hide malicious traffic.Cloud canonA recurring fee for using cloud services, typically paid as part of ongoing operations rather than a one-time purchase.Cloud chatTelegram’s cloud-based chat mode, separate from its end-to-end encrypted Secret Chats.Cloud complianceThe practice of mapping cloud controls, evidence, and monitoring to security or regulatory requirements.Cloud compromiseUnauthorized access to cloud systems, often through stolen credentials or misconfigurations.Cloud computeRemote processing power used to run tasks on a provider's servers instead of a local device.Cloud creditsPromotional compute or API allowances offered to new users or startups to encourage adoption.Cloud data estateData stored across cloud services, platforms, and backups under shared administrative control.Cloud data warehouseA hosted analytics platform used to store and query large datasets, such as Snowflake or BigQuery-class systems.Cloud databasean online database service hosted by a provider.Cloud dependencyReliance on remote servers for core features, storage, control, or authentication.Cloud directoryA centralized service that stores or brokers identities, groups, and access policy across connected systems.Cloud directory serviceA directory platform delivered from the cloud that can centralize identity records and access control.Cloud discovery policyA security rule that helps identify and alert on unfamiliar or risky cloud app usage.Cloud EntitlementsAccess rights and permission relationships that define what identities can do in cloud systems.Cloud environmentShared computing resources delivered through internet-based services, often with centralized identity controls.Cloud interoperabilityThe ability of different cloud systems to work together through compatible interfaces and governance.Cloud keysCredentials used to access cloud services and APIs, often high value if exposed on a public server.Cloud modelThe way cloud services are delivered and managed, including how responsibility is divided between provider and customer.Cloud modernizationUpdating applications and infrastructure so they can run more effectively in cloud environments.Cloud platformA remotely hosted computing service used to run applications, store data, or manage operations.Cloud postureThe current security state of cloud settings, identities, workloads, and configurations.Cloud posture managementContinuous visibility into cloud configurations, risk, and policy alignment.Cloud posture toolSoftware that assesses cloud settings and configurations against security expectations.Cloud providerA company that delivers computing, storage, and platform services over shared infrastructure.Cloud ProxyA broker that mediates traffic between users and protected resources.Cloud qualificationThe process of checking whether a cloud service meets required security and governance standards for public use.Cloud regionA geographic area where a cloud provider groups infrastructure for deploying services and workloads.Cloud relayA remote management path that routes traffic through a vendor service so devices can be reached over the internet.Cloud save workflowthe sequence of steps an app uses to move a file into online storage.Cloud secretSensitive credential material such as a password, API key, token, or certificate.Cloud securityPractices and controls that help protect cloud-hosted data, identities, and workloads.Cloud security platformA broader product stack that combines multiple security functions into one system.Cloud Security Posture Management (CSPM)A category of tools focused on finding and tracking cloud misconfigurations and policy drift.Cloud serviceA remote system that provides features, storage, or account functions over the internet.Cloud sessionA remotely hosted working session that can hold application state, user context, or runtime activity.Cloud SOCA security operations center focused on monitoring and responding to cloud-based threats.Cloud spendMoney spent on public cloud services such as compute, storage, networking, and managed platforms.Cloud stagingThe use of cloud services as temporary infrastructure for hosting, redirecting, or delivering malicious content.Cloud storage quotaThe amount of data a service lets an account store at a given time.Cloud switchingThe process of moving data and workloads from one cloud service to another.Cloud syncThe process of copying data between a device and remote servers.Cloud tenancyThe way a cloud service separates customers, permissions, and stored data.Cloud tenantA customer or workload running inside a shared cloud environment with assigned resources and permissions.Cloud trustThe assurance that cloud services meet required security, reliability, and governance expectations.Cloud workflowBusiness processes run through online applications, often spanning multiple linked services.Cloud workloadAn application, service, or process running in a cloud environment.Cloud-assisted detectionUsing remote infrastructure to help identify suspicious activity, often alongside local checks.Cloud-based pathA route through cloud-hosted infrastructure that can be reachable from the internet or from connected services.Cloud-based softwareapplications delivered over the internet rather than installed locally.Cloud-based solutionA service delivered through cloud infrastructure rather than installed only on local hardware.Cloud-based TMSonline trucking management software used to organize logistics workflows.Cloud-hosted stagingUsing cloud content or services to distribute malware stages or supporting files.Cloud-linked featurea function that depends on remote services as well as local hardware.Cloud-Managed SecurityProtection operated through a provider platform instead of local hardware.Cloud-native automationPatch orchestration delivered through cloud services, often with centralized policy control.Cloud-native certificate automationAutomated certificate handling built for cloud platforms and their deployment workflows.Cloudflare TunnelA persistent outbound connection used for remote access that can remain active until the connector is removed.Cloudflare WorkerServerless code that runs at the network edge and can modify web responses.CloudWatch metricsOperational measurements used to track activity, latency, errors, and usage trends in AWS services.Cluster-adminThe highest practical Kubernetes role, with full control over cluster resources, policies, and access rules.Cluster-proxy-addonA Red Hat component that relays requests between a hub cluster and managed clusters.Clustered deploymentA setup where several servers work together as one service for resilience and scale.CLVCustomer lifetime value, the total value a customer is expected to generate during the relationship.CMOS sensorA common silicon-based image sensor that converts light into electrical signals.CMPCertificate Management Protocol, a protocol for automated certificate enrollment and lifecycle management in PKI systems.CMS AuthEnvelopedDataA Cryptographic Message Syntax structure used to carry encrypted content and related parameters.CNACVE Numbering Authority, an organization authorized to assign CVE IDs and publish records for vulnerabilities in scope.CNABA standardized Brazilian banking file format used in remittance and return workflows.CNAME chainA sequence of DNS aliases that can make infrastructure ownership and routing harder to trace.CNAME recordA DNS alias that points one hostname to another hostname.CNC machinerycomputer-controlled industrial equipment used in manufacturing.CNSICBrazil’s committee that issued Resolution No. 20 and set new critical-infrastructure protection guidelines.Co-ownershipa legal arrangement in which two or more people share ownership of the same asset.CO2 emissionsCarbon dioxide released into the atmosphere, often used as a key measure of climate impact.Code baseThe shared underlying source code that different product editions or versions are built from.Code commentNon-executable text in source code meant for humans, not for the program at runtime.Code diffA side-by-side record of source code changes, commonly used to review patches before they are merged.Code generatorSoftware that automatically produces source code from schemas, templates, or definitions.Code golfThe practice of solving a programming task in as few bytes or characters as possible.Code indexingA system for cataloging source code so searches and AI tools can retrieve relevant context from large repositories.Code integrityThe reliability of code as written, without transcription errors or unauthorized changes.Code of PracticeA voluntary framework meant to help organizations apply AI transparency obligations in a practical way.Code ownershipAn assigned person or team responsible for reviewing and maintaining a codebase or document.Code pathA route through software that runs under specific conditions.Code repositoryA managed store for source code and related development files.Code-capable modelA model designed to help write, edit, or reason about software.Code-generation libraryA tool that automatically creates source code or client wrappers from a specification such as OpenAPI.Code-switchingMixing languages within one prompt or conversation, which can change how a model interprets instructions.Code-to-cloudA security approach that links source code, delivery pipelines, cloud posture, and runtime context.Codebase auditA broader review of an entire repository to find patterns, flaws, or risky logic.Codebase scanautomated inspection of source code to find security issues, secrets, or risky patterns.Codebase-wide reviewAn examination of an entire project rather than only the latest change set, useful for finding broader security issues.CodecSoftware that compresses and decompresses audio or video data.CODECOA port message type used for gate and container movement events.CodecsThe media components that decode and encode audio or video data.Coded identifierA label that hides the real name of the victim.CodeQLA code analysis engine used to find security flaws through query-based scanning.codice ATECOthe business classification code used to categorize an economic activity.Codice dell’amministrazione digitaleThe Italian legal framework that governs digital administration.Coding assistantAn AI tool that helps write, review, or modify code inside developer workflows.Coding emotivocoding activities designed to support engagement and emotional response.Coercive exploitationThe use of pressure, threats, or control to force people into harmful activity.Cognitive artifactsTraces that may suggest AI integration, such as prompts or provider references.Cognitive biasA systematic tendency in human thinking that can distort judgment and decision-making.Cognitive capitalThe organizational knowledge and judgment needed to oversee AI effectively.Cognitive flexibilityThe ability to shift thinking, strategies, or interpretation when the task or context changes.Cognitive GovernanceA governance approach focused on protecting human judgment and agency in AI-assisted decisions.Cognitive laborWork centered on thinking, analysis, judgment, and problem-solving rather than physical tasks.Cognitive rust beltA metaphor for the slow loss of analytical capability under repeated reliance on AI.Cognitive securityProtection of human judgment, trust, and decision-making from manipulation.Cognitive shortcutA fast mental rule people use to make decisions with limited attention or information.COGSCost of goods sold, the expenses directly tied to producing the goods or services a company sells.CoherenceThe consistency between risk analysis, chosen measures, and the final security program.Cohort analysisA method for comparing groups of users that share a common starting point or behavior over time.Cohort retentionA method that groups users by a shared start event and tracks whether they return over time.Coil whinea high-pitched buzz or whine produced by some electronic devices.Coinvestmenta funding arrangement where multiple investors back the same company in a coordinated way.Cold data storagestorage for information that is kept long term and accessed infrequently.Cold plateA heat-transfer surface attached to a chip so coolant can absorb heat at the source.Cold storageOffline key storage used to protect crypto assets from direct internet access.Cold walletAn offline wallet used for stronger storage isolation and reduced internet exposure.CollaborationShared work between people or teams, often supported by digital tools and communication platforms.Collaboration estateShared workspaces where files and content are exchanged across teams.Collaboration suiteSoftware that combines email, calendars, chat, and related workplace functions.Collaborative editingMultiple users working on the same document or spreadsheet in near real time.Collaborative robot (cobot)A robot designed to work in shared space with people under controlled safety conditions.Collaborative roboticsRobots designed to work alongside people in shared environments.Collateral damageUnintended impact on systems or users not meant to be targeted.Collateral harmunintended impact on systems, users, or services not meant to be involved.Collateral impactunintended effects on systems or users outside the intended target.Collective responsibilitythe idea that multiple stakeholders share duty for reducing a common risk.CollectorSoftware that gathers, processes, and forwards telemetry from one or more sources.Collector’s seta premium edition that usually includes physical extras beyond standard retail packaging.Color 3D printingAdditive manufacturing that produces parts with more than one color.ColorimeterAn instrument that measures color numerically instead of by eye.CombatPlayer-versus-environment or player-versus-opponent action built around attacks and defense.CombinationThe SECI phase where explicit knowledge is reorganized and integrated into new usable forms.Combined Heat and Power (CHP)A system that produces electricity and useful thermal energy from the same fuel source.CombosquattingRegistering a domain that mixes a real brand with extra words or characters to create a deceptive lookalike.CombustionThe process of burning fuel to produce heat.Command and Control (C&C)The system attackers use to send instructions to compromised devices and receive data back.Command APIAn application interface used to issue management or control actions to software.Command approval promptA safety control that asks for human confirmation before an agent executes risky commands.Command argumentsValues passed directly on a command line, which may be visible in logs or process listings depending on the environment.Command busThe operational path used to issue mission commands through the toolkit.Command integrityAssurance that control instructions are authentic and have not been altered.Command interpreterSoftware that reads and executes typed or pasted commands, such as a shell.Command line interfaceA text interface where users type commands instead of clicking menus.Command linkerA JupyterLab mechanism that turns certain links into executable commands.Command serverA system used to send instructions to malware or receive data from it.Command verificationChecks that confirm an instruction is authorized and valid before it is executed.Command-and-control pathThe communication route used to send operational instructions to a satellite.Command-and-control serverInfrastructure used to coordinate malicious activity and manage compromised systems.Command-Line AccessDirect local execution of a program, often relevant in local exploit paths.Command-line argumentA value passed to a program when it starts, which may be recorded or inspected in some environments.Command-line interface (CLI)A text-based way to run software and administrative tasks by typing commands.Command-line telemetryLogs and signals from terminal or shell activity that can reveal suspicious execution.Comment moderationA control that determines whether comments appear immediately or wait for review.Comment surfacethe user-facing area where replies, reactions, and related interactions happen.Commerce automationtechnology that handles parts of the buying journey with limited human intervention.Commerce runtimeThe operational environment where a commerce platform processes business logic and requests.Commercial deviceAn organization-managed endpoint used in a business or enterprise setting.Commercial devicesOrganization-managed endpoints used in business environments.Commercial feea recurring fixed charge for supply and service management.Commercial intelligenceThe process of turning market data, text, and signals into actionable business decisions.Commercial mortgage servicingThe operational records used to manage loans, payments, and reporting.Commercial originThe business source behind a product, service, or brand message.Commercial plan nameA marketing label used to package a service offer, which may not describe technical details on its own.Commercial real estatea sector where document handling and partner coordination can raise operational pressure.Commercial structureThe sales and organizational setup used to operate in a market.Commercialization componentThe service fee or supply margin included in the tariff.Commercialization costa fee tied to managing and supplying the energy service.Commercialization feea recurring charge that covers retail service costs and affects the real bill.CommercializzazioneThe retail charge tied to selling and managing the electricity contract.Commission chainthe linked payment structure that rewards referrals, conversions, or sales across multiple actors.Commission ratethe percentage charged on each transaction processed through a payment service.Commissionea fee charged on each transaction, usually as a percentage or fixed amount.Commitment periodthe minimum time a user agrees to stay subscribed.Commitment-based discountA pricing model that reduces unit cost when an organization agrees to a predictable level of usage or spend.Commodity pricethe market cost of the underlying electricity or gas.Commodity RATA widely used remote-access trojan reused across campaigns because it already provides control and persistence features.Common Data Environment (CDE)A shared digital workspace used to manage project information across teams and stages.Common operating pictureA shared view of the incident that helps teams act on the same facts.Common practiceA shared interpretive approach used to support more consistent assessment across cases.Common Weakness Enumeration (CWE)A taxonomy used to classify the root causes behind software vulnerabilities.Common-Mode FailureA situation where one shared weakness can affect many systems at the same time.Communication obligationsRules that can require sharing certain information in defined circumstances.Communication protocolThe agreed method for exchanging messages in a consistent way.Communications BackboneThe core network paths that carry traffic between major services, sites, and users.Communications blackoutA scenario in which normal digital connectivity is heavily restricted or unavailable.Communications continuityThe ability to keep trusted coordination channels working during disruption or network separation.Community EditionA free product tier that usually includes limited licensing terms but can still provide useful security functions.Community infrastructureThe informal systems, venues, and routines that help a specialist community keep operating over time.Community Investment Framework (CIF)A state framework intended to guide community-benefit expectations and local negotiations for large projects.Community-poweredA product model that relies on shared input or collective data to improve outcomes.Comodato gratuitoA loan arrangement where equipment is supplied for use without a purchase transfer.Compaction SummaryA compressed form of prior context used to support long-running AI tasks.Companion softwareAn application used to configure a hardware device after installation.Companion toolA supporting application, such as a GUI or driver, that connects software to a database or service.Comparable indicatorsmetrics designed so different places or systems can be measured against the same standard.Comparative advantageAn allocation idea that assigns people to the tasks where they have the greatest relative strength.Comparative claimA statement that contrasts one product, service, or company with another.Comparative mappingSide-by-side analysis used to examine similarities and differences.Compatibility AppraiserA Windows component that checks software and hardware compatibility before or after updates.Compatibility breakA change that causes older clients, plugins, or integrations to stop working correctly.Compatibility checkA validation step to confirm that different software versions can work together safely.Compatibility flagA label that indicates which hardware or system a product is intended for.Compatibility issuea failure caused when software, firmware, or hardware does not work well together.Compatibility regressionA new bug introduced when an update breaks something that previously worked.Compatibility toolSoftware that helps different systems or applications work together.CompatTelRunner.exeA Windows process used for compatibility and diagnostic tasks tied to app and driver inventory.Compensating mitigationA temporary control used to reduce risk when immediate patching is not possible.Compensation transparencyClear information about pay structure, which helps reduce confusion and uneven bargaining power.Competence measurementThe process of evaluating whether training actually improves knowledge or performance.CompetenciesThe formal powers and responsibilities assigned to an institution.CompetencyThe human skills needed to build, manage, and safely use AI systems.Competency-based frameworkA workforce model that defines work through tasks, knowledge, and skills, making gaps easier to identify and address.Competenze digitaliThe knowledge needed to understand how technology affects business decisions and risk.Competenze sottoutilizzateskills that are present but not fully applied, lowering the return on training.CompetitionMarket pressure that can influence price, access, and investment discipline.Compiacenza algoritmicaModel behavior that tends to agree with or flatter the user rather than challenge them.Compiler backendThe lower-layer implementation that turns an intermediate form into code for a specific target system.Compiler front-endThe part of a compiler that reads, parses, and validates source code before later stages process it.Completion achievementA marker that recognizes finishing a game or related objectives.Complex adaptive systemA system whose behavior emerges from many interacting parts and feedback loops.Complex valueIn NGINX, an expression combining static text and variable expansions, evaluated at runtime during stream or request processing depending on context.Complexitythe set of hidden constraints and tradeoffs that make a simple idea harder to implement.Compliance automationSoftware that helps teams collect evidence, manage controls, and prepare for audits with less manual effort.Compliance BaselineA set of required controls or checks used to measure whether cloud settings match a security standard.Compliance consistencyThe degree to which different reviewers reach similar conclusions when applying the same standard.Compliance controla process that helps ensure a business meets legal or regulatory requirements.Compliance controlsPolicies and technical checks used to meet legal and regulatory obligations.Compliance documentaleCompliance focused on storing records and forms rather than proving how work was actually carried out.Compliance documentationRecords and evidence showing that a system meets legal, regulatory, or internal rules.Compliance driftThe gradual departure of a live environment from approved security or governance settings over time.Compliance duplicationRepeated controls or obligations that create extra administrative work.Compliance governanceThe internal controls used to review, approve, and monitor regulated statements.Compliance notificationA required or expected report to a regulator after a security incident, depending on law and context.Compliance obligationsLegal or regulatory duties that apply to a system depending on jurisdiction and use case.Compliance overheadthe extra work needed to follow different legal or administrative requirements.Compliance planningPreparing systems and processes to meet legal or regulatory obligations.Compliance policyrules that define whether a device can access company services.Compliance reviewInternal checking to see whether a company’s conduct matches legal requirements.Compliance riskThe chance that a practice conflicts with legal, regulatory, or internal obligations.Compliance roadmapA plan that tracks legal milestones, internal tasks, and evidence needed to meet regulatory duties.Compliance signala data point used to help an app meet legal or policy requirements.Compliance traceabilitythe ability to prove that a business process followed the required rules.Compliance verificationA review that checks whether required security measures are present and effective.Compliant foota flexible contact surface that can absorb shock and adapt to uneven ground.Component HashA cryptographic fingerprint that helps identify a specific software component without relying on names alone.Component inventoryA record of what parts are present in a software product.Component labelA tag used to group a vulnerability by the area of code it affects.Component placementThe arrangement of parts on a board so they fit and function together properly.Component pricinghow the market value of parts affects final product cost.Component supplyThe availability of critical parts needed to assemble and scale a product.Component-level repairTroubleshooting and fixing individual electronic parts instead of replacing the entire device.Componente energiaThe part of an energy bill tied to the commodity cost of electricity or gas, separate from other charges.Composable infrastructureA model that pools compute, storage, and networking resources for software-driven allocation.Composite benchmarkA score built from multiple tests or categories, often with different weights.Composite indexA score built from several evaluations rather than one single test.Composite materialA material made by combining two or more components to create new performance properties.Composite monitorA display that accepts composite video, often from older hardware.CompositingThe process of combining page layers into the final image a browser shows on screen.Composition effectsChanges in the mix of jobs or applicants that can influence statistical wage results.CompostableA material that can break down under defined composting conditions, not automatically in every setting.Compounding pharmacya pharmacy that prepares customized medications and may depend on sensitive operational workflows.Compressed airPressurized air used to move, shape, or stabilize material flow.Compressed archivepackaged data set that may be large but is not self-verifying.Compressionreducing data size to make transfer lighter and faster.Compression side channelA leak that infers secrets from changes in compressed data size.CompressorA machine that supplies pressurized air for tools or cleanup tasks.Compromise HuntingThe process of checking systems for signs that an attacker already gained a foothold.Compromise indicatorsSigns in logs, files, or behavior that suggest a system may have been breached.Compromise scopethe real extent of any affected systems or data.Compromise validationchecking logs, access patterns, and system changes before treating a claim as confirmed.Compromised infrastructureLegitimate systems that attackers repurpose after gaining unauthorized access.Compromised mailboxan email account taken over and used in place of the legitimate owner.Compromised websitea legitimate site that has been altered or abused by an unauthorized party.CompTIA Security+A cybersecurity certification focused on core security knowledge.Computational costThe time and processing resources needed to complete a calculation.Computational modela mathematical or algorithmic representation used to analyze complex behavior.Computational patienta digital representation used to simulate likely treatment responses.Computational problem solvingthe ability to break down unfamiliar tasks and work toward a solution.Compute accessAvailability of the processing power needed to train, tune, and run large AI models.Compute financing platformA funding structure designed to help reserve or build AI infrastructure capacity over time.ComputerA local device that can run installed applications outside the browser.Computer historyThe study of how machines, ideas, and engineering practices developed over time.Computer-aided engineering (CAE)software-based engineering work used to design, test, and analyze products or systems.Computer-use toolsFunctions that let a model interact with screens, clicks, typing, and web interfaces.Comunicazione ObbligatoriaThe mandatory employment notice used to formalize a hiring event.Concealed lensa camera lens hidden inside another object or enclosure.Concealed recording deviceA hidden microphone or recorder used to capture speech without notice.Concentrated dependencyA risk pattern where many services rely on the same provider or control layer.Concierge modela service style built around named specialists and hands-on support.Concrete examplea specific past experience used to support a claim about ability.ConcurrencyThe number of users or sessions active at the same time.CondaAn open-source package and environment manager used to install and isolate software dependencies.CondensationThe phase change when vapor turns into liquid and releases heat.Condensed fonta typeface with narrow letterforms designed to fit more text into limited space.Condition checkA quick assessment of whether a device is worth fixing.Conditional Access for workload identitiesPolicy controls for non-human identities such as service principals and app registrations.Conditional activationA design where malicious functions run only after a specific trigger is met.Conditional clauseA term that applies only if specific conditions are met.Conditional pricingA fee or reward model that changes depending on product type, transaction type, or account settings.ConductiveAble to carry electric charge or respond strongly to electromagnetic fields.Conductive surfaceA surface that can carry electric current and receive an electroplated coating.Conferencea scheduled event where people gather to share ideas, research, and practical experience.Conference room sweepA check for unauthorized electronics or recording gear before sensitive meetings.Conference showcaseAn event setting where companies present tools and messaging to an industry audience.Confidence calibrationThe alignment between a model’s stated certainty and the real accuracy of its output.Confidence gapThe self-doubt that can make capable students hesitate to pursue demanding subjects.Confidence thresholdA cutoff used by AI systems to decide whether a prediction is reliable enough to keep.Confidential informationSensitive data such as source code, tokens, private notes, or internal configuration.Confidential VMa virtual machine designed to keep data and code hidden from privileged infrastructure.Confidentiality boundaryThe security line that separates protected data from people or systems that should not see it.Confidentiality BreachAn incident where sensitive data is accessed or taken without permission.Confidentiality controlA process or rule that limits who can access sensitive technical or business information.Confidentiality EventAn incident where sensitive information may be revealed without changing or destroying the data itself.Confidentiality failureA security problem where information is revealed to someone who should not be able to see it.Confidentiality leakUnauthorized disclosure of data, such as information read from a program’s memory.Confidentiality riskThe chance that sensitive information may be exposed to unauthorized parties.Confidentiality, integrity, availabilityThe three core security goals used to judge whether data stays secret, correct, and accessible.Config ConnectorA Kubernetes integration that manages Google Cloud resources through custom resources.ConfigsConfiguration settings that shape how a platform behaves in a specific customer environment.ConfigurabilityThe ability to change system behavior through settings or rules.Configurable rulesSettings that let organizations adapt a control to different payment scenarios.Configuration analysisReview of settings and files that can reveal how a system is deployed or connected.Configuration archiveA saved backup of device settings that can contain credentials, keys, and trust data.Configuration changeAn adjustment to how a feature behaves by default or after setup.Configuration directiveA setting that controls how software behaves, often in a server configuration file.Configuration disciplineThe practice of keeping system settings consistent, documented, and securely maintained.Configuration errora wrong setting that can change how a system is exposed or protected.Configuration mismatchA settings conflict that can cause systems to behave unexpectedly.Configuration overwriteA change that replaces trusted device settings with malicious or altered ones.Configuration persistenceThe ability of a system to preserve settings after updates or restarts.Configuration preconditionA feature, mode, or setting that must be present before a vulnerability can be triggered.Configuration profileA management file used to apply settings and restrictions on Apple platforms.Configuration recordsinternal files that may describe how a process or system is arranged.Configuration Secretscredentials, keys, or tokens that can unlock systems or services.Configuration stateThe actual settings in use on a system, which can determine whether a vulnerability is reachable.Configuration tamperingUnauthorized changes to app settings that alter behavior without changing the program itself.Configuration TheftThe unauthorized copying of device settings and operational files that can aid follow-on intrusion.Configuration trackingRecording changes so a build or system can be understood and reproduced later.Configuration-dependent riskExposure that changes based on which modules, features, or directives are enabled.Configuration-sensitive flawA vulnerability that affects only certain settings, roles, or enabled features.Confirmed accessevidence that an attacker has already entered a victim environment.Confirmed malicious activityEvents that survive investigation and are judged to be genuinely harmful or unauthorized.Conflict managementThe ability to handle disagreements in a constructive way without blocking progress.Conflict of interestA situation where one role’s duties can compromise the independence of another role.Conflict resolutionThe process of addressing disagreements so teams can move forward with shared priorities.Confluence Data CenterAtlassian's self-managed collaboration platform for enterprise deployments.ConfusableA character that visually resembles another character, often across different scripts.CongestionPerformance loss that can happen when shared capacity is heavily used.Connected Building SystemsNetworked building controls such as HVAC, lighting, security, and elevators.Connected carA vehicle that exchanges data with external services, apps, or infrastructure.Connected cityAn urban area where digital tools and networked systems help coordinate services and public life.Connected deviceHardware that can communicate with other systems through a network or pairing link.Connected EnvironmentsNetworks where operational systems are linked to IT, cloud, or remote-access tools.Connected foldersUser-selected directories an app is allowed to access instead of the whole filesystem.Connected medical devicesClinical devices that communicate with networks or other systems and therefore need lifecycle security controls.Connected servicesshared systems or third-party tools that can raise the stakes if an incident is real.Connected systemsOther services or devices that rely on the same platform for access, trust, or data flow.Connected toyA toy that links to apps or online services, expanding the device into a broader data and security ecosystem.Connection gapA condition where intelligence exists, but the formal decision process does not require it to be used.Connection poola shared set of reusable network connections.Connection privacylimiting what network intermediaries can learn from a session.Connection recordslogs that can reveal relationships between users, services, and systems.Connection trackingThe mechanism used by network devices to monitor flow state and enforce per-connection handling.Connection-tracking stateThe record a network device keeps to follow active sessions and their mappings.ConnectomeA map of how neurons connect within a nervous system.Connector governanceThe policies and controls that decide which systems an integration can reach and what it can do.Connector paththe route a signal or cartridge follows between the device and its interface.Connector permissionsThe access rights granted to an integrated service, which can determine whether it can read, write, or share data.Connector/CMariaDB’s C/C++ client library used by applications to communicate with MariaDB or MySQL servers.ConntrackShort for connection tracking, a firewall or router feature that monitors session state for network flows.Consensus managementThe process of building agreement inside a group, which can improve coordination but may also mute dissent.Consensus rulea negotiation process that depends on broad agreement to move forward.Consent decreea court-approved agreement that can impose compliance obligations.Consent handlingThe process for obtaining and recording permission to collect or use data.Consent lifecyclethe sequence from collection to update, restriction, or withdrawal of permission.Consent sprawlThe buildup of too many app approvals and permissions, making review and revocation difficult.Consequence analysisA method for identifying the worst-case effects of system failure or manipulation before controls are selected.Consequential actionAn operation that changes data, sends a message, or moves money and therefore needs stronger oversight.ConservationThe long-term preservation of a record so it remains available when needed.Conservation documentaleThe long-term preservation of documents so they remain accessible and verifiable over time.Conservazionethe retention period for collected data before deletion or secure disposal.Conservazione a normaRegulated digital preservation that keeps electronic records usable and evidentiary over time.Consigli di disciplinaDisciplinary bodies that handle conduct issues within professional regulation.Consignmenta sales model where goods remain with the supplier until they are sold.Console modA hardware or software change that alters how a game console looks or works.console-script entry pointA metadata-defined command wrapper that Conda may generate during installation.ConsoleLoginThe AWS authentication event for console sign-in, useful for spotting suspicious login attempts.Constitutional AIAn alignment approach that guides model behavior using explicit principles or rules.Constrained hardwaredevices with limited memory, storage, and processing capacity.Constraint-driven designbuilding software by starting from the platform's limits rather than its ideal capabilities.Constructive frictionSmall design hurdles that slow decisions enough to encourage review and verification.Consultancy roleA limited advisory position that can still carry political or security significance if the mandate is unclear.Consumablea material or part that wears down during normal use and must be replaced.Consumer CodeItalian rules that protect consumers in commercial relationships.Consumer electronicsEveryday electronic products designed for general public use.Consumer hardwarephysical technology built for personal use rather than purely industrial or server environments.Consumer privacy riskThe chance that a product's behavior or disclosures may conflict with user expectations.Consumer protectionA legal framework focused on preventing unfair or harmful products and practices.Consumer support channelA help, dispute, or safety path used to resolve problems after purchase.Consumer-contract frameworkThe EU legal basis that shapes information duties, withdrawal rights, and remedies in online sales.Consumption bandA pricing or benchmarking category based on how much energy a customer uses.Consumption managementTools or services that help users monitor and control how much energy they use.Consumption patternthe way a household uses energy over time.Consumption trackera tool that helps users monitor energy use over time.Contact degradationLoss of reliable electrical connection caused by wear, oxidation, or residue.Contact patchthe area where a moving object actually touches the surface beneath it.Contact pointThe person or role designated to receive and manage official security-related communications.Contact recordspersonal and work details that can support impersonation and phishing.Contact resistanceElectrical resistance caused by poor or degraded connections.ContainerAn isolated runtime package that bundles an application with its dependencies.Container filesystemThe isolated file space inside a container, separate from the host system.Container gate movementoperational data tracking cargo entry, exit, and handoff activity.Container hardeningThe practice of reducing risk by tightening settings, permissions, and exposed services.Container image scanningAnalysis of container images to find vulnerabilities, misconfigurations, and secrets before deployment.Container isolationA security boundary that separates processes, but still requires hardening and least privilege.Container manifestA shipping record that lists cargo details tied to a container.Container RCERemote code execution inside a containerized application environment, often a stepping stone to wider compromise.Container startup logicThe first-run behavior that initializes settings and secrets inside a container.Container Storage Modules (CSM)Dell software that connects enterprise storage arrays to Kubernetes environments.Container-to-host copy workflowA process that moves data from isolated container space onto the host machine.ContainerizationPackaging software and its dependencies so it can run more consistently across environments.Containment authorityThe permission to take immediate defensive action, such as isolation or blocking.Containment boundaryThe security line meant to keep a test system from reaching unauthorized external targets.Containment planningSteps taken to limit damage while an incident claim is being checked.Containment reviewa rapid check to limit potential spread and verify account or system exposure.Containment timeThe period required to isolate an intrusion and stop further spread.ContaminationThe presence of benchmark content, or closely related material, in training data or model memory.Contamination riskThe chance that test data leaks into training or tuning, weakening the benchmark.Content amplificationthe process of increasing how widely or frequently a post is shown.Content authenticityThe quality of being verifiably genuine rather than synthetic, altered, or misleading.Content classificationA system for sorting material by age, sensitivity, or subject matter.Content delivery networkA distributed system that helps deliver large files and updates efficiently.Content Disarm and Reconstruction (CDR)A preventive technique that removes risky active elements from files and rebuilds safer versions.Content disseminationthe process by which posts or messages are spread to users on a platform.Content distributionThe way material spreads across posts, pages, and links online.Content LabelingTags or metadata attached to content to indicate origin, risk, or compliance status.Content lifecycleThe full path of digital material from creation to retention, access, and eventual deletion or archival.Content persistenceThe tendency for online material to remain visible, reappear, or keep influencing perception over time.Content rankingA system that orders posts or items based on predicted relevance or user interest.Content restorationThe practice of bringing back material that was removed or softened.Content roadmapthe planned sequence of future updates and releases for a product.Content Scanner ToolsA supporting component that helps process and inspect content inside the gateway.Content validationChecking a file’s real format and structure, not just its name or header.Content-Security-Policy (CSP)An HTTP header that restricts what resources a page is allowed to load.Contenziosoa formal legal dispute over an assessment, interpretation, or obligation.Contestationthe formal challenge to an alleged violation in an administrative process.Context analysisthe review of internal and external factors that shape an organization’s risk profile.Context captureCollecting relevant information from tools and documents so an AI system can work with real business data.Context continuityAn AI design that preserves information across apps or sessions so the system can respond with more memory of prior activity.Context framingThe way season, theme, or presentation changes how an object is perceived.Context governanceRules that limit what information an AI system can see, retain, and use.Context graphA structured model that links related data points, such as employees, skills, jobs, and tasks, so AI systems can reason with more business context.Context hygieneThe practice of limiting what information an AI system can see during a task.Context menuThe right-click menu that exposes actions for files and folders.Context of useThe specific situation in which a response is meant to be interpreted and applied.Context packagingThe practice of assembling the right instructions, data, and constraints for an AI tool.Context ProvenanceThe practice of tracking where AI inputs came from and how trustworthy they are.Context shiftwhen a message changes meaning as it moves from one setting to another.Context-Aware AccessAccess decisions that depend on signals such as device state, user identity, or session risk.Context-aware analysisEvaluation that combines content with user, app, or destination context to improve decisions.Context-aware authorizationAccess decisions that factor in task purpose, data sensitivity, and current risk, not just a fixed role.Context-aware encodingThe practice of escaping data differently depending on where it appears in HTML, such as text, attributes, or scripts.Context-aware securityDefensive logic that adapts to the current state, role, and risk profile of an environment.Context-aware translationTranslation that uses surrounding text to preserve meaning across sentences and paragraphs.Contextual access signalA factor such as IP reputation or geolocation used to inform access decisions, but not treated as proof of identity.Contextual advertisingAdvertising that matches a message to the content or situation around it.Contextual analysisReviewing how surrounding facts change the meaning or sensitivity of information.Contextual enforcementA control approach that evaluates content, labels, and surrounding context instead of relying only on identity.Contextual evidenceClues whose meaning depends on where and how they were found.Contextual sensitivitythe idea that data becomes sensitive based on situation, use, and possible consequences.Continual learningA training approach where a model keeps learning over time without restarting from scratch.Continuing development unitsOngoing learning credits used to keep some certifications active.Continuity of OperationsPlanning that keeps essential services functioning during and after disruption.Continuity of Operations PlanA recovery plan that keeps essential services running during or after a disruption.Continuous AvailabilityA product pattern where a system is reachable at any time, which can intensify use.Continuous compliancea model that checks security and governance controls on an ongoing basis.Continuous controlsongoing checks designed to track system behavior after it goes live.Continuous cybersecurityA security model that extends beyond periodic checks toward ongoing monitoring and validation.Continuous discoveryongoing identification and remediation of vulnerabilities instead of periodic checks.Continuous evaluationOngoing review of signals such as device trust and session risk, used to refine access decisions over time.Continuous evidenceOngoing proof that security controls remain active and effective.Continuous extrusionA process that produces output without frequent stops and restarts.Continuous fuzzingrunning fuzz tests repeatedly in automation so new bugs are caught as code changes.Continuous Glucose Monitoring (CGM)A system that tracks glucose levels over time using a body-worn sensor.Continuous health dataHealth information collected over time rather than only during clinic visits.Continuous improvementAn ongoing cycle of updating controls, processes, and governance as conditions change.Continuous Integration (CI)Automated testing and build systems that run code checks whenever a project changes.Continuous supportRepeated follow-up that helps patients stay engaged with care.Continuous testingRepeated validation of security controls over time instead of a single one-off check.Continuous validationrepeated testing that security controls and recovery steps still work as intended.Continuous verificationongoing checks that a security control still behaves as expected after changes.Contract clarityThe degree to which an offer clearly defines what is included and excluded.Contract dataThe stored terms that define price, duration, and service conditions.Contract durationThe length of time during which the agreed pricing conditions apply.Contract expirythe date when a promotional or fixed term ends and conditions may change.Contract for Difference (CfD)A contract that stabilizes revenue by compensating the gap between market price and an agreed strike price.Contract manufacturingoutsourced production work that can increase business and partner exposure.Contract metadatathe structured details that define a service agreement in digital systems.Contract nullitya legal outcome in which an agreement may be treated as invalid.Contract research organizationa company that supports research and development work for clients.Contract termThe rules, duration, and conditions that govern a service agreement.Contract variationA formal change to a contract’s scope, timing, price, or terms.Contractor GovernanceControls used to define, monitor, and limit third-party access, responsibility, and administrative authority.Contributed moduleA third-party Drupal extension that is not part of the core codebase.Contribution feedThe live video path that moves a match from the venue into a production environment.Contributo umanoThe human input that must be identified when an invention is developed with AI assistance.Control assuranceEvidence that a security control is not only documented, but operating effectively in practice.Control boundaryThe defined set of systems, users, and data flows covered by a security assessment.Control cabinetAn enclosure that houses electrical and control components for a machine.Control channelThe part of a protocol used for commands and session handling rather than file content.Control coverageThe share of systems, users, and processes actually protected by a security control.Control evidenceProof that a security control exists, is active, and remains effective over time.Control frameworkA structured set of security practices used to manage risk consistently.Control libraryA structured set of security controls used to map policies, assets, and compliance requirements.Control modelThe set of permissions, checks, and oversight rules that limit what a system can access or change.Control pathThe route through which a device receives instructions or triggers action.Control prioritya defensive safeguard that receives emphasis because it reduces risk in a high-value area.Control screenA dedicated display used to operate a system without relying only on a phone or computer.Control selectionThe step where an organization maps identified risks to specific safeguards.Control sequenceThe order of commands used to move components correctly.Control stackthe combined people, tools, and procedures that help govern a system.Control systemA system that influences real-world behavior, where errors can matter more than fluent language.Control taxonomyA classification system that groups security issues so they can be reviewed consistently.Control UIThe operator-facing interface used to manage sessions, permissions, and browser-linked actions.Control-flow hijackAn attack outcome where execution is redirected in a way the program did not intend.Control-flow hijackingAn exploitation outcome where execution is redirected away from the intended program path.Control-Plane EventA security issue that affects the systems used to administer other systems, often increasing impact.Controlled AreaA protected physical space where entry is restricted and monitored to reduce unauthorized access.Controlled changeA careful, traceable modification that limits unintended side effects.Controlled descenta managed return through the atmosphere intended to reduce damage and maintain stability.Controlled Unclassified InformationSensitive government-related information that is not classified but still requires protection.Controlled update ringA staged deployment group used to test updates before wider rollout.Controller BindingThe process of linking a device controller to an account or cloud service for remote management.Controller layoutthe arrangement of buttons and controls on a gaming device.Controller-to-device trustThe relationship that lets a managed device accept instructions from an authorized controller.Controls-by-designEmbedding security, compliance, and oversight into architecture during development rather than after deployment.ControlServletThe OFBiz request router that maps HTTP traffic into application actions.Convectionheat transfer through the movement of air or another fluid.Converged networkA shared infrastructure that carries multiple services such as Wi-Fi, operations, and digital media.ConvergenceThe tendency for different AI outputs to become similar when inputs and defaults are alike.Convergent evolutionindependent evolution of similar traits in different species.Conversation historyA service-managed record of prior AI interactions and generated items.Conversational agentAn AI system that interacts through natural language to collect input or guide users.Conversionthe point at which interest turns into an actual purchase.Conversion processThe series of steps used to change one material into another product.Conversion rateThe share of eligible visits or interactions that result in a desired action, such as a purchase or signup.Converter stationEquipment that changes electrical characteristics so power can move efficiently between grids.ConvertibilityThe ease with which a technology can be repurposed for a different use case.Cookie theftStealing session cookies so an attacker may reuse an authenticated browser session.CookiesSmall pieces of data sites store in a browser to manage sessions and settings.CoolantThe liquid that circulates through the loop and absorbs heat.Coolant distribution unit (CDU)The subsystem that controls coolant temperature, pressure, and flow in a liquid cooling loop.CooldownA built-in waiting period before an automated update is allowed to proceed.Cooldown PeriodA delay before newly published packages are widely trusted, giving defenders more time to inspect for abuse.Coordinated inauthentic behaviorOrganized activity by deceptive accounts acting together to mislead audiences.Coordination rulesThe technical and regulatory conditions that help different services share spectrum without conflict.Coordination structureAn organized channel for sharing alerts, priorities, and response duties.COPASIRItaly's parliamentary oversight committee for the intelligence system.Copilot accessPermission to use Microsoft 365 Copilot within the data and files available to the signed-in user.Copilot ChatThe chat-oriented interface for interacting with Copilot.COPPAU.S. children’s privacy law requiring notice, parental consent, and parental rights for data collected from children under 13.Copper cablinga cable that carries data through electrical signals.Copper oxidea family of compounds made from copper and oxygen, some of which can show useful electrical behavior.CoprocessorA secondary processor that handles specialized tasks alongside the main CPU.Copy and pastea basic workflow that moves data from one place to another inside an application or between applications.Copyright compliancefollowing legal rules that govern the use of protected works.CORDICAn iterative method for trigonometric calculation using shifts and adds.Core architectureThe underlying model design that powers different product variants.Core isolationThe Windows Security area that groups protections designed to keep critical system processes and memory more tightly separated.Core Technology Feea per-install charge associated with app distribution in the EU context.CoreGraphicsApple’s graphics framework used by multiple operating system branches.Corner liftwhen the edges of a printed part start to rise from the bed.Corporate powerThe ability to steer decisions, priorities, and behavior within an organization.Corporate serveran internal business system that may store or process sensitive organizational data.Corporate systemsinternal business infrastructure used for operations, storage, and communications.Corrective actionsspecific follow-up tasks created to close gaps found during the review.Corrective orderAn official instruction to fix a compliance problem or change a system or process.CorrosionChemical damage that can weaken contacts, connectors, and conductive traces in electronics.Cortex XSIAMPalo Alto Networks’ platform for centralized security operations, combining data, analytics, and automation.Cortex-M33an Arm-based microcontroller core commonly used in embedded devices.CorundumA crystalline form of aluminum oxide that includes both ruby and sapphire.Cosmetic itemA visual reward that changes appearance without affecting core gameplay.Cosmic rayshigh-energy particles from space that can interfere with ultra-sensitive experiments.CosmicPulseA backdoor mentioned in the technical analysis as part of the delivery chain discussed in the report.Cosmos DBMicrosoft’s managed database service for Azure that supports multiple APIs and data models.Cost and frictionThe expense and delay a process step adds to operations.Cost and Usage Report (CUR)A detailed export for reconciling cloud usage and cost data.Cost attributionThe process of mapping spend back to the team, product, task, or workflow that caused it.Cost ExplorerAWS service for analyzing usage trends and estimating future cloud spend.Cost per resultA unit metric that measures how much it costs to produce one useful output.Cost per Unique OutcomeTotal AI spend divided by the number of distinct useful results produced.Cost per verified outcomeThe total cost to produce a result that has been checked and can be shipped.Costi di commercializzazionemonthly service fees added to the energy price.Coulomb’s lawA rule describing the force between electric charges.Counter-surveillanceTools or tactics used to detect secret monitoring, including hidden cameras.Counterbalancea weight arrangement that offsets motion so an object can stay in place.Counterfeit consumableA fake replacement item that imitates a legitimate product but may not meet expected standards.Counterfeit hardwareFake or cloned devices and accessories that can pose safety or security risks.CounterfeitingMaking fake goods, documents, or credentials that are meant to be accepted as genuine.Counterintelligence valueThe usefulness of stolen or exposed information for mapping people, relationships, and operational patterns.Counterparty RiskThe risk that a customer or trading partner will not meet its obligations.CounterspaceCapabilities used to deny, degrade, disrupt, or defend against the use of space systems.CounterterrorismSecurity operations aimed at preventing, disrupting, or responding to terrorist activity.CounterweightA mass that stores potential energy and helps drive mechanical motion.Coverage obligationA rule requiring a provider to serve a specified area or population.Coverage obligationsRegulatory requirements that push operators to extend service availability across a defined area or population.Coverage validationThe process of checking whether detections actually fire on known malicious behavior.Coverage-guided fuzzinga method that uses execution feedback to steer test generation toward new code paths.Covered entityA healthcare organization, insurer, or clearinghouse regulated under HIPAA.Covert communicationsHidden or disguised data exchange used to avoid detection.Covert RecorderA hidden device used to capture audio without the knowledge of the people being recorded.Covert recordingSecret capture of audio or video without the knowledge of the people being recorded.CoWoSChip-on-Wafer-on-Substrate, an advanced packaging method that integrates chips and memory in one high-performance module.cPanel & WHMA Linux hosting control panel suite used to manage servers, accounts, and administrative tasks.cPanel WHMserver management tools used to administer hosting environments.cPanel/WHMA hosting control panel environment used to administer Linux servers.CPEA naming scheme that helps map vulnerabilities to specific products and versions.CPRCardiopulmonary resuscitation, a lifesaving technique used when breathing or heartbeat stops.CPR numberA 10-digit national identifier used to distinguish people in Danish public services.CPSCyber-physical systems that combine digital, physical, analog, and human components to support real-world operations.CPT/HCPCS codesUS medical billing code sets used to describe procedures, services, and supplies.CPythonThe reference implementation of Python, including its standard library and default runtime behavior.CQLCommon Query Language, a filter syntax used to express geospatial search conditions.Crafted HTTP requestA deliberately shaped web request designed to trigger unexpected behavior in a server or interface.Craftsmanshipthe combination of practice, care, and technique that turns tools into reliable results.CrashAn unexpected application failure that forces a program to close or stop responding.Crash triagethe process of sorting, reproducing, and prioritizing failures found during fuzzing.crates.ioThe default package registry for Rust, where developers publish and fetch reusable libraries.crawl accessPermission for a search bot to fetch a page’s content for indexing or previewing.CrawlabilityThe ability of a search engine bot to reach and inspect a page or resource.Crawlersoftware that visits web pages and follows links automatically.Crawler provenanceThe evidence that a bot really came from the operator it claims to represent, such as verified IP ranges or reverse DNS.CrawlingThe automated fetching of web pages by a search engine bot.CRDCustom Resource Definition, a Kubernetes extension that adds new resource types to the API.CRDMOa contract research, development, and manufacturing organization in life sciences.Creative rotationThe process of showing different ad variants to see which performs best.Credential activitylogin behavior that can reveal abuse of stolen or weak access.Credential attackAttempts to access accounts by guessing, spraying, stuffing, or testing usernames and passwords.Credential AttacksAttempts to obtain or test usernames and passwords to gain unauthorized access.Credential brokeringA system role that stores, injects, or relays secrets for remote access.Credential crackingThe act of trying to recover usable login secrets through automated guessing, reuse, or other abuse.Credential decryptionRecovering stored login data in usable form if protections are weak.Credential enrollmentThe process of adding a new login method or authenticator to an account.Credential exchangeA standardized process for moving credentials between trusted providers or applications.Credential exporta file set containing saved logins or password data that can be abused for account access.Credential extractionthe collection of secrets that can help an intruder reuse access.Credential handlingThe way software stores, protects, and passes passwords, tokens, and API keys.Credential isolationUsing separate, narrowly scoped credentials so one agent or workflow cannot overreach its intended permissions.Credential LayerThe combined set of credentials, secrets, and access controls that connect users, services, and automated systems to resources.Credential managerA system feature that stores and helps use sign-in credentials across apps and devices.Credential maskingA control that keeps secrets such as passwords or API keys out of logs, chats, and model context.Credential protectionControls that reduce the chance that passwords, keys, or tokens are exposed or reused unsafely.Credential providerThe device or service that stores and presents login credentials such as passkeys or passwords.Credential scopeThe specific permissions attached to a token, key, or login used by a system.Credential scopingLimiting what a token or login can access so misuse has a smaller blast radius.Credential sharingThe controlled distribution of passwords or secrets to authorized users.Credential snifferA module that searches for or identifies default access credentials; the exact mechanism is not specified here.Credential vaultAn encrypted container used to store passwords and related secrets securely.Credential verificationThe process of confirming that a digital certificate or badge is authentic and valid.Credential-probingRepeated attempts to test or guess valid usernames, passwords, or account access.Credential-theft utilitysoftware used to harvest usernames, hashes, or other login material from compromised systems.Credentialed ScanningTesting done with authorized access to reveal deeper configuration and patch issues.Credentialing fraudUsing fake documents or badges to make a lie look official.Credibility launderingThe use of branding, fake institutions, or copied material to make false claims seem trustworthy.Credible alternativeA replacement option that is realistic, tested, and available within the needed window.Credit card informationpayment data that can create fraud and compliance risk if exposed.Credit incentiveA financial benefit that encourages a specific type of borrowing or investment.Credit limitThe maximum amount that can be spent on a card, subject to the product’s terms.Credit modelA scoring framework banks use to estimate borrower risk and pricing.Credit reporting firma company that handles sensitive financial identity data and is often operationally sensitive.Credit scoringAn automated assessment of risk or eligibility based on structured information.Credit uniona member-owned financial institution that can face high-impact trust and access risks.Credit-based licensingA pricing model where protected assets consume abstract units that must be translated into actual coverage.CreditsPrepaid or pooled units that are consumed as AI features or workflows run.Creditworthiness assessmentThe review lenders use to judge whether a borrower can likely repay a loan.Criminal infrastructureThe systems, locations, and processes that support organized crime at scale.Criminal Justice Information (CJI)Sensitive data used in criminal justice operations and protected under CJIS policy.Criminal liabilityLegal exposure where conduct may be treated as an offense under law.Crisi della rappresentanzaloss of confidence in parties or institutions that are meant to speak for citizens.Crisis communication channelA formal line for rapid clarification during tense incidents to reduce escalation risk.Crisis Communications PlanA заранее prepared plan for who communicates what, when, and through which channels during an incident.Crisis deconflictionCommunication channels designed to reduce misunderstanding and escalation between rival military forces.Crisis protocolA pre-agreed process for coordinating action during a fast-moving emergency.Criteri comuniShared standards used to make assessments more consistent across firms and cases.Critical Capability LevelA safety threshold used to judge whether an AI model has reached a level of cyber capability that needs tighter controls.Critical cyber thresholdA risk level used for models that may autonomously support advanced exploit discovery or attack planning.Critical cybersecurity capabilityA threshold where a model may be able to carry out advanced cyber offense tasks with minimal human help.Critical cybersecurity thresholdA higher-risk category in the framework, described here as the maximum "critical" threshold.Critical digital infrastructureSystems whose failure can affect essential services or broad organizational resilience.Critical Information Infrastructure (CII)regulated systems that support essential services under Singapore’s cybersecurity regime.Critical informational infrastructureGeneral background term for systems that help society communicate and process information, such as government and media channels.Critical Infrastructure Protection (CIP)NERC’s set of mandatory reliability standards covering certain BES cyber systems.Critical Infrastructure ResilienceThe ability of essential services to withstand disruption and restore operations quickly and safely.Critical materialsMaterials identified as strategically important and potentially vulnerable to supply disruption.Critical mineralsRaw materials that are difficult to replace and are essential for advanced technology manufacturing.Critical servicesessential digital functions that support core business or public operations.Critical temperatureThe threshold below which a material enters the superconducting state.Critical transmission facilityA transmission asset whose loss could create major grid stability risk.CRLFCarriage return and line feed, control characters that mark line endings in HTTP text formatting.CROcontract research organization, a company that supports research and related operations.CronA Linux scheduling system that runs tasks at set times and is often checked during compromise investigations.Cron jobA scheduled task used on Unix-like systems for automated actions.crontabThe file or command interface used to define cron jobs for a user or system.Cross-border fraudA scam operation that involves people, victims, or infrastructure in more than one country.Cross-border remunerationPayment rules for works used in one jurisdiction but created, performed or managed across multiple countries.Cross-border transfera payment moved between countries, often complicating enforcement.Cross-chain bridgeA tool that moves crypto assets between blockchains, sometimes used to complicate tracing.Cross-chain tracingFollowing assets as they move between different blockchains.Cross-cloudSecurity tools or policies designed to operate across AWS, Azure, GCP, or similar environments.Cross-compilingBuilding software on one system so it runs on a different CPU or operating system.Cross-device supporta feature that lets access extend across more than one platform or hardware type.Cross-Domain SolutionA controlled mechanism for moving data between separated security domains without creating unrestricted connectivity.Cross-domain transfermovement of data between systems with different trust or classification levels.Cross-functional teamA small group that combines different roles, such as subject matter expertise, product direction, and engineering.Cross-origin data accessA flaw that may let content interact with data from a different website origin when browser isolation is broken.Cross-origin data disclosureA flaw that allows data from one site to be accessed by another site or component.Cross-platform abuseHarmful activity that uses several services to avoid easy detection on any single one.Cross-platform amplificationThe practice of pushing the same message across multiple services to increase reach and perceived legitimacy.Cross-platform buildsmalware versions designed to run across different operating systems.Cross-platform depththe ability to support different operating systems and device classes from one console.Cross-platform loaderA component designed to run on more than one operating system and fetch or launch a payload.Cross-platform managementsupport for more than one operating system within the same management framework.Cross-platform payloadMalware built to run on more than one operating system, often with separate variants.Cross-platform supportSecurity coverage that works across Windows, macOS, and Linux.Cross-platform workflowA product design that lets one account or task move across multiple devices and interfaces.Cross-Profile ControlAndroid restrictions that limit how apps and data move between personal and work profiles.Cross-sectioningCutting through a specimen to reveal its internal structure.Cross-site cookieA cookie that can be sent on requests between different sites, often used for measurement or attribution.Cross-site data exposureA flaw that can let data from one site or context leak into another.cross-site propagationThe spread of malicious access or code from one WordPress site to another environment.Cross-tenant accessPolicy-governed interaction between identities or resources that belong to different organizations.Cross-tenant exposureA failure where one customer can see data that belongs to another customer on shared infrastructure.Cross-tenant issueA flaw that may let actions or data cross the boundary between separate customer environments.Cross-tenant vulnerabilityA flaw that can let data or actions cross from one tenant into another.Cross-trainingPreparing multiple staff members to handle critical tasks so recovery does not depend on one person.Cross-user contaminationA failure mode where one user’s stored context influences another user’s session.Cross-user data disclosureA flaw where one user's data appears in another user's response, breaking confidentiality across requests.Crosstool-NgA tool for building cross-toolchains for non-native target architectures.CrosswalkA mapping between two frameworks so teams can compare controls, requirements, or practices.Crowdsourcinggathering observations from many people to spot shared patterns.CRUDA shorthand for Create, Read, Update, and Delete, the core operations used to manage data.Cryptanalytic techniqueA mathematical method used to analyze or break cryptographic systems.Crypter-as-a-serviceAn underground service that wraps or modifies malware to make detection and analysis harder.Crypto off-rampa service that converts cryptocurrency back into fiat currency.Crypto on-rampa service that converts fiat currency into cryptocurrency.Crypto signerA device used to approve blockchain transactions while keeping private keys isolated.Crypto theftthe unauthorized taking of cryptocurrency or access to digital assets.Crypto wallet extensionA browser add-on that manages wallet keys, addresses, or signing workflows.Crypto wallet hijackingUnauthorized takeover of a wallet app or its secrets so funds can be accessed or moved.Crypto-drainingTheft activity designed to move cryptocurrency out of a victim wallet.Crypto-ransomwaremalware that encrypts data and seeks payment for recovery.Cryptocurrency minerSoftware that hijacks computing resources to generate digital currency.Cryptocurrency miningUnauthorized use of computing power to generate digital currency for an attacker.Cryptocurrency scamFraud that uses tokens, wallets, or investment bait to steal money or assets.Cryptocurrency walletSoftware or a device used to store keys and manage digital assets.Cryptocurrency wallet theftStealing keys, seed phrases, or account access used to control digital assets.Cryptographic authenticationA login method that uses public-key methods to prove identity without revealing the private key.Cryptographic Context InjectionA prompt-injection technique that hides instructions inside encrypted content.Cryptographic Context Injection (CCI)A method that hides malicious instructions inside encrypted content so the agent reveals them only at runtime.Cryptographic DiscoveryThe process of finding where cryptography is used across applications, devices, services, and infrastructure.Cryptographic infrastructurethe keys, certificates, algorithms, and protocols that protect data in transit and at rest.Cryptographic IsolationUsing encryption and trust boundaries to protect communications when physical separation is not possible.Cryptographic keyA secret mathematical credential used to prove identity during authentication.Cryptographic librarySoftware that provides encryption, decryption, hashing, and certificate-related functions to other programs.Cryptographic primitiveA basic building block such as encryption, hashing, or digital signing.Cryptographic protectionsEncryption and authentication methods that help protect data and commands from tampering.Cryptographic storageThe secure handling of encrypted data and the keys used to protect it.Cryptographic WeaknessA flaw in how secrets, signing, or randomness are handled.Cryptographically signed credentialA digitally signed record that can help verify identity or claims without relying on self-reported permissions.CryptonymA code-style name used to identify and track a threat cluster.Crystal growthThe process of forming an ordered solid structure from a melt, solution, or vapor.CSF 2.0NIST’s outcome-focused cybersecurity framework that helps organizations structure and communicate security priorities.CSIRTs NetworkThe European cooperation framework that helps incident response teams coordinate and build trust across member states.CSPUOracle’s monthly security patch update for selected products.csrss.exeA legitimate Windows system process name that malware may imitate to look trustworthy.CSS bombA crafted HTML and CSS payload designed to influence web rendering behavior in ways that can support data leakage or UI manipulation.CSS exfiltrationAbusing style rules and browser behavior to leak information from a rendered page.CSS selectorA pattern used by browser code to target page elements; unsafe input can change what gets selected.CTAPClient to Authenticator Protocol, the channel that lets browsers and apps talk to security keys.CTAP 2.3A newer FIDO authenticator protocol version associated with expanded device behaviors and emerging approval features.CTFCapture The Flag, a controlled cybersecurity exercise where participants solve challenges or exploit test systems.Cu2Ocopper(I) oxide, a semiconductor material used in light-sensitive experiments.CubeSatA small satellite built from standardized cube-shaped units, often used for testing new technologies.Cultural memoryThe way societies remember and reuse important moments from the past.Cumulative patchAn update that can include fixes for current and earlier vulnerabilities in the same product line.Cumulative patchingA patch model where the newest release includes prior security fixes.CUPSThe Common UNIX Printing System, a printing service stack used on Unix-like systems, including macOS.Curated feedA stream of selected content shaped by human or editorial judgment.Curated roundupA selected list of resources chosen for a specific audience or purpose.CuringThe final hardening stage that strengthens printed resin after it leaves the printer.Curl inwardthe inward bending that can appear as a warped print loses shape.Currency exchange commissionAn extra cost applied when spending in another currency.Current densityThe amount of electrical current applied per unit area during plating.Current directory hijackAn attack pattern where a program accidentally loads or runs a file from the working folder instead of a trusted location.Current remaining performance obligations (cRPO)Revenue already contracted but not yet recognized, usually over the next 12 months.Current transformerA device that scales high primary current to a lower secondary current for safe measurement and monitoring.Current-carryingconducting electrical current through a component or circuit.Current-state architectureThe live inventory of systems, sites, versions, and dependencies.Current-state inventoryA live map of systems, services, and ownership as they exist now.Curtailmentintentional reduction of power output when the grid cannot take all available generation.Curve bindingThe security requirement that a negotiated elliptic-curve algorithm must match the curve in the presented key.Curved foldA bend that follows a non-straight path across a sheet.Custody controlspolicies and technical safeguards that govern who can move assets and when.Custody layerThe part of a crypto platform that holds and moves user assets, including wallets, keys, and approval workflows.Custody stackThe collection of systems, policies, and controls used to store and move digital assets safely.Custom actionsInstaller routines that run extra code during setup or repair, and can become risky if they execute with elevated rights.Custom buildA one-off or heavily modified project made outside mass production.Custom ComponentsUser-defined extensions that add logic to a platform.Custom consolepurpose-built control hardware designed for a specific application.Custom content typesA WordPress feature for organizing site data beyond standard posts and pages.Custom CPUa processor designed and assembled from scratch rather than purchased as a standard chip.Custom executable file formatA non-standard binary layout used to complicate analysis and hinder signature-based detection.Custom fabricationBuilding a part to fit a specific need instead of using a standard component.Custom GPTA configurable ChatGPT instance that can combine instructions, knowledge, and tools to behave like a tailored assistant.Custom GPTsCustomized chatbot versions that can be tailored for a specific style, task, or workflow.Custom implantA purpose-built malicious tool developed for a specific campaign or operator.Custom InstructionsUser-provided guidance that shapes how an AI assistant responds.Custom malwareMalware built or adapted for a specific target or environment.Custom Protocol HandlerA component that opens and processes links using a nonstandard scheme such as sgbiz:.Custom ransomwareransomware adapted for a specific operation or target set.Custom recoveryAn alternative recovery environment that can support advanced maintenance tasks and device modification on Android-style systems.Custom rulesUser-defined detection logic that adapts a scanner to specific code patterns.Custom URL schemeAn app-specific link format used for deep-linking or app handoff between software components.Custom virtual machineA malware-controlled interpreter that can reconstruct or decode data in a nonstandard way to complicate analysis.Custom XML dataNon-visible document data that can be stored inside a Word file and may survive normal viewing.custom_generate/generate.pyA repository file used for custom generation logic in some model workflows.Customer AdvancesPayments received before delivery, recorded as a liability until earned.Customer careThe function that handles support requests, complaints, and service communication.Customer datainformation that can identify or relate to a user, account, or session.Customer experienceThe user-facing result of a service, including speed, clarity, reliability, and consistency.Customer Experience (CX)The full set of interactions a customer has with an organization, from first contact to support and retention.Customer Identity and Access Management (CIAM)The identity layer used to manage external users such as customers or partners.Customer order informationPurchase-related records that can include transaction context useful for fraud or social engineering.Customer perceptionthe buyer's impression of quality, reliability, and professionalism.Customer premises equipmentHardware installed at the user side of a service link, such as an optical network terminal.Customer recordsStored information linked to an account holder, such as identity or billing data.Customer-controlled environmentA deployment model where the customer retains primary control over the system boundary and operations.Customer-data lifecycleThe path data follows from collection to storage, use, sharing, and deletion.Customer-facing engineeringEngineering work that includes direct contact with users, support, or escalation paths.Customer-facing processAny workflow a client or partner uses to access support, services, or account functions.Customer-facing servicespublic websites or apps used by customers to access a company.Customer-Managed ComponentSoftware operated by the customer rather than fully hosted by the vendor.Customer-managed keysAn encryption setup where the customer controls the cryptographic keys, not the provider.CustomizationModifying a product so it behaves more like the user wants.Customization controlssettings that let users adjust how a feature looks or behaves.CustomizationsChanges made to standard software, such as custom fields, workflows, or code.CustomizerWordPress’s live-preview interface for testing design and settings changes.CV screeningAutomated review of resumes to filter or rank job applicants.CVE identifierA standardized public label used to track a specific cybersecurity vulnerability.CVE Numbering Authority (CNA)An organization authorized to assign CVE identifiers and publish vulnerability records.CVE publication dateThe date a vulnerability record becomes public, used as a rough awareness marker.CVE RootA management layer in the CVE hierarchy that oversees and coordinates CNAs within its scope.CVE-2013-4786An IPMI 2.0 authentication weakness that can reveal password-derived material during the login handshake.CVE-2021-35394A vulnerability referenced in connection with the Realtek Jungle SDK / UDPServer exposure.CVE-2021-36260A Hikvision flaw involving command injection in affected products.CVE-2023-49105An ownCloud Server 10 vulnerability that can bypass authentication through WebDAV request handling.CVE-2023-6448a default-password weakness on certain Unitronics devices that can allow remote commands or unauthorized control.CVE-IDA public identifier used to track a specific vulnerability across vendors, scanners, and advisories.CVFSCommvault File System, the storage layer used within the Commvault platform stack.CVSS 4.0A scoring system used to rate the severity of security vulnerabilities.CVSS scoreA numerical severity rating used to compare the impact of security vulnerabilities.CW E-78A weakness category for improper neutralization of special elements used in OS commands.CWE Top 25MITRE's annual ranking of the most common and dangerous software weakness types.CWE-1189A weakness class for improper isolation of shared resources on a system-on-chip.CWE-119A weakness class covering operations performed outside the intended bounds of a memory buffer.CWE-121A weakness classification for stack-based buffer overflows.CWE-122MITRE’s classification for heap-based buffer overflow weaknesses.CWE-1284A weakness category for failing to properly validate a quantity-like input before using it.CWE-1285A weakness class involving poor validation of an index, position, or offset supplied in input.CWE-1287A weakness class for improper validation of the specified type of input.CWE-1325A weakness category for improperly controlled sequential memory allocation.CWE-201A weakness class covering sensitive information being inserted into sent data.CWE-258A weakness involving an empty password in a configuration file or account setting.CWE-269A weakness class for failures in assigning or enforcing privileges correctly.CWE-276A weakness category for incorrect default permissions on files or directories.CWE-277A weakness class for insecure inherited permissions that grant more access than intended.CWE-307A weakness class covering poor resistance to repeated failed authentication attempts.CWE-321A weakness class for hard-coded cryptographic keys that cannot be changed easily if exposed.CWE-338A weakness category for using a cryptographically weak pseudorandom number generator in a security-sensitive context.CWE-415MITRE’s classification for double free weaknesses in software.CWE-426A weakness class called Untrusted Search Path, involving unsafe file or command lookup behavior.CWE-506A weakness category for embedded malicious code, used to describe code that appears intentionally hostile or covert.CWE-540A weakness category for sensitive information appearing in source code.CWE-611The weakness category for improper restriction of XML external entity references.CWE-640A weakness class covering insecure password-recovery mechanisms.CWE-648A weakness category for incorrect use of privileged APIs that can lead to unauthorized access.CWE-732A weakness category for incorrect permission assignment on critical resources.CWE-835A weakness class for logic that gets stuck in an infinite loop without an exit condition.CWE-863A weakness class for incorrect authorization, where access checks exist but are implemented wrongly.CWE-916A weakness class for password hashes that are too cheap to compute, making cracking easier.CWE-95A weakness category for improper neutralization of directives in dynamically evaluated code.CWE-96A weakness category covering improper neutralization of directives in statically saved code.CWE-98A weakness category covering unsafe control of filenames used in PHP include or require logic.CyberThe digital domain where networks, systems, and services are defended, monitored, or attacked.Cyber activismdigital action intended to expose, protest, or challenge a political or social issue.Cyber AIAI systems used to assist with cybersecurity tasks such as analysis, prioritization, and remediation support.Cyber Asset ManagementA security practice for discovering, classifying and tracking assets so defenders know what is present and how it is used.Cyber benchmark testingControlled evaluation of a model’s cyber capability, often using tasks that probe offensive reasoning or exploitation paths.Cyber BlueprintThe EU framework for coordinating response to large-scale cyber incidents and crises.Cyber capabilitythe practical ability to carry out security tasks effectively in real conditions.Cyber capacity buildingEfforts to improve the skills, processes, and institutions needed for cyber defense.Cyber capacity-buildingInvestment in skills, tools, coordination, and processes that strengthen security operations over time.Cyber CommandA military organization responsible for cyberspace operations and coordination.Cyber communitythe network of practitioners, researchers, and organizers involved in cybersecurity.Cyber decoyA fake or deceptive asset placed in an environment to attract suspicious activity.Cyber diplomacyDiplomatic activity focused on cyber norms, cooperation, and risk reduction.Cyber espionagecovert intrusion aimed at collecting information rather than causing immediate destruction.Cyber evaluationA controlled assessment of how an AI system behaves in security-related tasks or scenarios.Cyber exposure managementThe practice of discovering assets, measuring risk, and prioritizing what needs attention first.Cyber extortionPressure campaign that uses threats or stolen data to force payment or compliance.Cyber fraudDigital deception used to steal money, access, or sensitive information.Cyber operationA coordinated digital action designed to collect information, disrupt systems, or influence an adversary’s environment.Cyber operationsThe employment of cyberspace capabilities to achieve objectives in or through cyberspace.Cyber personaAn online identity used to hide the operator’s real affiliation while collecting or influencing.Cyber recoveryThe process of restoring systems and operations after an incident while verifying integrity and trust.Cyber refusalsSafety controls that make a model less willing to comply with cyber-related requests.Cyber reportingThe process of notifying authorities or trusted recipients about a security incident or related condition.Cyber resiliencyThe ability of a system to anticipate, withstand, recover from, and adapt to adverse conditions.Cyber Risk ManagementThe ongoing process of identifying, protecting against, detecting, responding to, and recovering from cyber threats.Cyber sabotageDeliberate digital interference designed to damage, disrupt, or weaken systems and services.Cyber strategyA formal plan that sets priorities and methods for dealing with cyber threats.Cyber stress testA resilience exercise that measures how an organization responds to severe cyber pressure.Cyber supply chainThe network of outside vendors and services that support an organization’s digital operations.Cyber Supply-Chain Risk Management (C-SCRM)The practice of identifying and reducing security risks across suppliers, components, software, and support services.Cyber surveillanceCovert collection of information from systems or networks, often with strong legal and operational limits.Cyber threat intelligence (CTI)information used to understand threats, attacker behavior, and likely targets.Cyber toolsPrograms or utilities used to support security testing, monitoring, or defense.Cyber-biodirittoAn interpretive legal concept focused on how digital systems should protect vulnerability, diversity, and participation.Cyber-espionageCovert digital activity aimed at gathering sensitive information.Cyber-informed engineeringA design approach that embeds cybersecurity into the creation and operation of physical systems to reduce the impact of cyber compromise.Cyber-physical attackA technique that links digital activity to a physical effect in the real world.Cyber-physical eventAn incident where a physical action disrupts digital infrastructure or service availability.Cyber-physical systemsSystems where software interacts directly with physical processes and equipment.Cyber-risk assessmentA structured review of threats, vulnerabilities, and likely business impact.Cyber-risk governanceThe process of overseeing, reviewing, and updating security decisions over time.Cyber-risk management measuresPolicies and controls used to identify, reduce, and monitor security risk.CyberAIA blended field that combines cybersecurity skills with artificial intelligence concepts and applications.Cyberbullyingrepeated harassment, humiliation, or intimidation carried out through digital platforms or messaging tools.CybercitizenA person whose daily online behavior is treated as part of the wider security environment.Cybercrime damagesthe financial losses and costs associated with cyberattacks and related disruption.Cybercrime gangsorganized groups that carry out illegal digital activity for profit or disruption.Cybercrime groupa criminal network that runs hacking, fraud, extortion, or theft operations.Cybercrime investigationthe process of collecting and analyzing digital evidence in a suspected online offense.Cybercrime legislationLaws that define and punish offenses involving computers, networks, or digital data.Cybercrime loss estimatea high-level financial figure used to describe the cost of malicious digital activity.Cybercrime networkA linked set of people, services, and infrastructure used to carry out online fraud or theft.Cybercrime toolsSoftware or services designed to support phishing, fraud, intrusion, or data theft.Cybercrime-as-a-Service (CaaS)A criminal business model that packages tools, infrastructure, or workflows for other offenders to use.Cybercriminal groupA loosely organized set of actors suspected of profit-driven or disruptive attacks.Cyberextortionpressure campaign that uses stolen data or access to force payment.CyberGymA benchmark for testing whether agents can reproduce vulnerabilities from unpatched code.Cyberinsuranceinsurance designed to help cover costs linked to cyber incidents.CyberneticsThe study of control, communication, and feedback in systems.Cybersecurity ActEU framework for cybersecurity certification and related regulatory requirements.Cybersecurity assessmentA structured review used to evaluate risk, gaps, controls, and readiness in an environment or organization.Cybersecurity Awareness MonthAn annual campaign focused on practical behaviors that reduce common cyber risk.Cybersecurity careerA professional path focused on protecting systems, data, and users from digital threats.Cybersecurity Certification SchemeA formal framework used to assess whether a service or product meets defined security criteria.Cybersecurity Code of Practice (CCoP)a regulatory code issued by CSA for CII owners.Cybersecurity compliance gapA shortfall between required security controls and what an organization can show it has implemented or documented.Cybersecurity consolidationThe process of larger firms buying smaller or adjacent security vendors to expand their platform reach.Cybersecurity educationTraining and learning designed to prepare people for security-focused roles.Cybersecurity FrameworkA governance model used to organize risk management, roles, and security priorities across an organization.Cybersecurity Framework (CSF) 2.0A framework for managing cybersecurity risk across organizations through governance and operational outcomes.Cybersecurity Framework 2.0 (CSF 2.0)NIST’s outcomes-based framework for managing and communicating cybersecurity risk.Cybersecurity hiringThe process of recruiting people for roles that protect systems, data, and users.Cybersecurity hygieneRoutine security behaviors such as strong passwords, training, and careful verification.Cybersecurity incidentAn event that disrupts or threatens digital systems, data, or operations.Cybersecurity investmentMoney spent on tools, people, and services intended to reduce digital risk.Cybersecurity leadershipThe practice of directing security teams, policy, and risk decisions at an executive level.Cybersecurity lifecycle managementSecurity controls that extend across design, deployment, maintenance, monitoring, and response.Cybersecurity modelAn AI model intended to support tasks related to digital defense or security analysis.Cybersecurity oversightThe review and guidance process used to assess security-relevant risks in systems and deployments.Cybersecurity Performance GoalsVoluntary healthcare security baselines designed to help organizations prioritize practical defenses.Cybersecurity postureThe overall strength and readiness of an organization's defenses.Cybersecurity RoadmapA planning document that sets priorities, ownership, and implementation steps for a security program.Cybersecurity ruleA requirement that sets baseline protections for digital systems, access, monitoring, or resilience.Cybersecurity supply-chain risk managementThe practice of identifying, assessing, and reducing cyber risk across suppliers, products, and services.Cybersecurity thresholdA capability line that helps determine when a model may be too risky for broad release.Cybersecurity Workforce FrameworkA taxonomy that helps map security roles, skills, and tasks for education and hiring.Cyberspace operationsPlanned actions in digital environments that can support defense, intelligence, or active effects.Cycloidal gearboxA gear mechanism that uses an offset motion path to transfer rotation in a compact design.CypherNeo4j's query language for reading and changing graph data.