The FREE Cybersecurity Glossary by Thor Pedersen!

Depreciation: The accounting method of allocating the cost of a tangible asset over its useful life. It reflects the usage, wear and tear, or obsolescence of the asset. Depreciation helps companies earn revenue from an asset while expensing part of its cost each year the asset is in use. This process affects the value of the asset on the balance sheet and reduces taxable income on the income statement. Common methods include straight-line and accelerated depreciation.

Deprovisioning: The process of removing an individual's access rights or permissions from an organization's systems and networks, often as a result of the individual leaving the company or changing roles. It is a critical part of identity and access management (IAM) to ensure security and compliance by preventing unauthorized access to sensitive information.

Detection Risk: In auditing, detection risk is the chance that the auditor's procedures will fail to detect a material misstatement in a company's financial statements. From a cybersecurity perspective, detection risk involves the likelihood that an organization's monitoring systems will not catch an ongoing security breach or malicious activity. Both concepts emphasize the importance of robust testing and monitoring systems to minimize the risk of oversight.

Detective Controls: Security measures that are designed to identify and detect unwanted or unauthorized activity within systems and networks. Examples include intrusion detection systems (IDS), log monitoring, security audits, and surveillance cameras. These controls serve to alert an organization to security incidents as they occur or shortly thereafter, enabling a timely response to potential threats.

Deterministic decryption: A decryption process where the same ciphertext will always decrypt to the same plaintext using a specific set of rules or algorithms. It is commonly used in security applications where speed and efficiency are crucial.

Deterrent: Measures taken to discourage or dissuade unwanted actions or behaviors, especially related to malicious activities. By imposing severe consequences or risks, deterrents aim to make the cost of carrying out harmful actions, such as unauthorized access or data breaches, outweigh any potential benefits. Examples include security awareness training to deter internal staff from unsafe practices or legal penalties for external actors to discourage hacking activities.