The FREE Cybersecurity Glossary by Thor Pedersen!

Clean Desk Policy: A corporate directive that specifies how employees should leave their working space when they aren't there. This policy aims to protect sensitive information by ensuring that all papers, sticky notes, flash drives, and other information storage devices are properly stored away and secured when not in immediate use. It also includes shutting down computers or locking them when left unattended. Such a policy reduces the risk of sensitive data being exposed to unauthorized personnel or visitors.

Cleanroom Methodology: A rigorous software development process aimed at producing defect-free software by applying engineering principles of process control and quality assurance. It emphasizes formal specification, incremental development, and statistical quality control to iteratively refine the software.

Clearance: The authorization given to an individual, allowing them to access certain classified information or areas. This process involves a thorough assessment of the individual's background, including past conduct, trustworthiness, and loyalty to their nation. The clearance level required depends on the sensitivity of the information that the individual needs to access.

Clearance Level: This denotes the degree to which an individual may access classified data or secure areas. There are several levels of clearance, which can vary depending on the organization or country but generally include levels such as Confidential, Secret, and Top Secret. The higher the clearance level, the more sensitive the information the individual can access. To receive a specific clearance level, an individual must undergo a background investigation to assess their trustworthiness and reliability.

Cleartext: Data that is transmitted or stored unencrypted and thus can be easily read and understood without any need for decryption. While it facilitates ease of use and interoperability, it poses significant security risks as it can be easily intercepted and read by unauthorized individuals, potentially leading to data leakage, privacy violations, or other security incidents.

Client: A computer or device that accesses a server or network to request and receive information or services. Clients are typically connected to a server or network through a client-server architecture, where the client sends a request to the server, and the server responds with the requested information or service.