The FREE Cybersecurity Glossary by Thor Pedersen!

Disaster Recovery Plan (DRP) desk checking: A validation process where the disaster recovery plan is reviewed in a non-disruptive environment to identify any issues, omissions, or areas of improvement. It includes going through the plan in detail to understand the procedures, responsibilities, and resources necessary for successful disaster recovery. The aim is to ensure that the plan is accurate, comprehensive, and effective before an actual disaster situation occurs.

Disaster tolerance: The ability of an organization to maintain its operations and continue to provide services in the face of a disaster or disruptive event. It often involves measures such as redundant systems, fail-over mechanisms, and geographically dispersed resources that can ensure continued operation even when some parts of the infrastructure are affected.

Disclosure: The action of making new or secret information known. In a legal context, disclosure can involve the release of evidence or information during the discovery phase of a trial. In the business and financial world, it refers to the act of providing important information to the public, such as a company revealing financial statements or a data breach being reported to customers. Disclosure is a critical concept in regulatory compliance, where laws often require the release of information to protect the public interest and maintain transparency.

Disclosure Controls and Procedures: Policies and procedures implemented by an organization to ensure that important information, particularly financial information, is accurately and timely reported to those who need to know this information. These controls are established to ensure that data is appropriately processed and disclosed to maintain its integrity and confidentiality and to meet compliance and governance requirements. One example could be ensuring compliance with regulations like Sarbanes-Oxley (SOX) for financial reporting.

Discovery sampling: A method used in statistics, auditing, and research to select a representative subset from a larger population, facilitating the estimation of overall population characteristics. It allows for inferences about the whole by examining a portion, commonly applied in selecting transaction samples for testing, records for review, or customers for surveys.