CRISC - Certified in Risk and Information Systems Control term definition - Part 33

IT Governance Basic

Level of assurance

Refers to the degree to which the subject matter has been examined or reviewed.

Librarian

The individual responsible for the safeguard and maintenance of all program and data files.

Licensing agreement

A contract that establishes the terms and conditions under which a piece of software is being licensed (i.e., made legally available for use) from the software developer (owner) to the user.

Life cycle

A series of stages that characterize the course of existence of an organizational investment (e.g., product, project, program).

Limit check

Tests specified amount fields against stipulated high or low limits of acceptability.

Link editor (linkage editor)

A utility program that combines several separately compiled modules into one, resolving internal references between them.

Literals

Any notation for representing a value within programming language source code, e.g., a string literal; a chunk of input data that is represented "as is" in compressed data.

Local area network (LAN)

Communication network that serves several users within a specified geographic area.

Log

To record details of information or events in an organized record-keeping system, usually sequenced in the order in which they occurred

Logical access controls

The policies, procedures, organizational structure and electronic access controls designed to restrict access to computer software and data files

Logoff

The act of disconnecting from the computer.

Logon

The act of connecting to the computer, which typically requires entry of a user ID and password into a computer terminal.

Logs/log file

Files created specifically to record various actions occurring on the system to be monitored, such as failed login attempts, full disk drives and e-mail delivery failures.

Loss event

Any event during which a threat event results in loss

Layer 2 switches

Data link level devices that can divide and interconnect network segments and help to reduce collision domains in Ethernet-based networks

Layer 3 and 4 switches

Switches with operating capabilities at layer 3 and layer 4 of the open systems interconnect (OSI) model. These switches look at the incoming packet’s networking protocol, e.g., IP, and then compare the destination IP address to the list of addresses in their tables, to actively calculate the best way to send a packet to its destination.

Layer 4-7 switches

Used for load balancing among groups of servers.

Legacy system

Outdated computer systems

Likelihood

The probability of something happening

Logical access

Ability to interact with computer resources granted using identification, authentication and authorization.