CRISC - Certified in Risk and Information Systems Control term definition - Part 51

IT Governance Basic

Servlet

A Java applet or a small program that runs within a web server environment.

Session border controller (SBC)

Provide security features for voice-over IP (VoIP) traffic similar to that provided by firewalls.

Shell

The interface between the user and the system.

Shell programming

A script written for the shell, or command line interpreter, of an operating system; it is often considered a simple domain-specific programming language.

Sign-on procedure

The procedure performed by a user to gain access to an application or operating system.

Simple fail-over

A fail-over process in which the primary node owns the resource group.

Simple Mail Transport Protocol (SMTP)

The standard electronic mail (e-mail) protocol on the Internet

Simple Object Access Protocol (SOAP)

A platform-independent formatted protocol based on extensible markup language (XML) enabling applications to communicate with each other over the Internet.

Single point of failure

A resource whose loss will result in the loss of service or production.

Slack time (float)

Time in the project schedule, the use of which does not affect the project’s critical path; the minimum time to complete the project based on the estimated time for each project segment and their relationships.

SMART

Specific, measurable, attainable, realistic and timely, generally used to describe appropriately setgoals

Smart card

A small electronic device that contains electronic memory, and possibly an embedded integrated circuit.

Sniff

The act of capturing network packets, including those not necessarily destined for the computer running the sniffing software.

Sniffing

The process by which data traversing a network are captured or monitored.

Social engineering

An attack based on deceiving users or administrators at the target site into revealing confidential or sensitive information.

Software

Programs and supporting documentation that enable and facilitate use of the computer.

Software as a service (SaaS)

Offers the capability to use the provider’s applications running on cloud infrastructure. The applications are accessible from various client devices through a thin client interface such as a web browser (e.g., web-based e-mail).

Software as a service, platform as a service and infrastructure as a service (SPI)

The acronym used to refer to the three cloud delivery models.

Source code

The language in which a program is written.

Source code compare program

Provides assurance that the software being audited is the correct version of the software, by providing a meaningful listing of any discrepancies between the two versions of the program.