Configuration control

Configuration control: A practice aimed at maintaining consistency of a system or component’s performance, functional, and physical attributes with its requirements, design, and operational information throughout its life. It involves processes such as identifying configurations, controlling changes, and ensuring that configurations conform to applicable standards and requirements, thus helping avoid unnecessary modifications and maintaining system […]

Contention-Based Protocols

Contention-Based Protocols: Network protocols that allow multiple devices to access the network medium in a manner where conflicts could occur. If two or more devices try to transmit data at the same time, a collision can occur, causing the data to become corrupt. Protocols like CSMA/CD (Carrier Sense Multiple Access/Collision Detection) used in Ethernet networks […]

Configuration item (CI)

Configuration item (CI): A component of a system that is subject to configuration management. This could be a piece of hardware, a software module, a network configuration, or any other part of a system that requires monitoring and management for changes. CIs are individually identifiable and manageable, and their status is maintained and updated throughout […]

Context

Context: In terms of security, context refers to the understanding of the surrounding factors, environment, and circumstances that are relevant to a decision, action, or event. Context can involve various data points such as user behavior, network activity, or system configurations, which, when analyzed collectively, can provide more accurate insights or trigger alerts if anomalies […]

Configuration Management Database (CMDB)

Configuration Management Database (CMDB): A database that holds information about the components of an information system and the relationships between those components. Used in IT service management, a CMDB helps organizations understand the relationships between these components and track their configuration. It is a fundamental part of the ITIL framework for managing IT services.

Context-aware access control

Context-aware access control: A security approach that evaluates the context of a user’s access request — such as location, time, and device security state — before granting or denying permission. This dynamic form of access control can adjust the level of access based on situational factors, enhancing security by adapting to potential risk changes.