CRISC - Certified in Risk and Information Systems Control term definition - Part 32

IT Governance Basic

Intrusion prevention

A preemptive approach to network security used to identify potential threats and respond to them to stop, or at least limit, damage or disruption

Intrusion prevention system (IPS)

A system designed to not only detect attacks, but also to prevent the intended victim hosts from being affected by the attacks

Investigation

The collection and analysis of evidence with the goal to identifying the perpetrator of an attack or unauthorized use or access

IP address

A unique binary number used to identify devices on a TCP/IP network

IP Authentication Header (AH)

Protocol used to provide connectionless integrity and data origin authentication for IP datagrams (hereafter referred to as just "integrity") and to provide protection against replays. (RFC 4302).

Irregularity

Violation of an established management policy or regulatory requirement. It may consist of deliberate misstatements or omission of information concerning the area under audit or the enterprise as a whole, gross negligence or unintentional illegal acts.

Job control language (JCL)

Used to control run routines in connection with performing tasks on a computer.

Journal entry

A debit or credit to a general ledger account, in Oracle. See also Manual Journal Entry.

Judgment sampling

Any sample that is selected subjectively or in such a manner that the sample selection process is not random or the sampling results are not evaluated mathematically.

Key goal indicator (KGI)

A measure that tells management, after the fact, whether an IT process has achieved its business requirements; usually expressed in terms of information criteria.

Key management practice

Management practices that are required to successfully execute business processes.

Key performance indicator (KPI)

A measure that determines how well the process is performing in enabling the goal to be reached.

Key risk indicator (KRI)

A subset of risk indicators that are highly relevant and possess a high probability of predicting or indicating important risk.

Knowledge portal

Refers to the repository of a core of information and knowledge for the extended enterprise. Generally a web-based implementation containing a core repository of information provided for the extended enterprise to resolve any issues

Kernel mode

Used for execution of privileged instructions for the internal operation of the system. In kernel mode, there are no protections from errors or malicious activity and all parts of the system and memory are accessible.

Key length

The size of the encryption key measured in bits

Keylogger

Software used to record all keystrokes on a computer

Latency

The time it takes a system and network delay to respond.

Leadership

The ability and process to translate vision into desired behaviors that are followed at all levels of the extended enterprise.

Leased line

A communication line permanently assigned to connect two points, as opposed to a dial-up line that is only available and open when a connection is made by dialing the target machine or network. Also known as a dedicated line.