Set 7: Policies, Compliance and Business Continuity

PCI DSS

Payment Card Industry Data Security Standards – security rules for any business that handles credit card data

GDPR

General Data Protection Regulation – a European Union law that protects people's personal data and privacy

AUP

Acceptable Use Policy – a company's rules for how employees may use its networks and devices

EULA

End User License Agreement – the legal contract that explains how you are allowed to use software

BYOD

Bring Your Own Device – a policy that lets employees use their personal phones and laptops for work

DR

Disaster Recovery – the plan and steps for getting systems working again after a major failure or disaster

RPO

Recovery Point Objective – how much data loss, measured in time, a business can accept

RTO

Recovery Time Objective – how quickly a system must be back up after a failure

MTBF

Mean Time Between Failure – the average time a device works before it breaks

MTTR

Mean Time To Repair – the average time it takes to fix a device after it breaks

SLA

Service-level Agreement – a contract that promises a certain level of service, like 99.9% uptime

EOL

End-of-life – the point when a vendor stops selling a product

EOS

End-of-support – the point when a vendor stops providing updates and help for a product