The FREE Cybersecurity Glossary by Thor Pedersen!

Context-aware access control: A security approach that evaluates the context of a user's access request — such as location, time, and device security state — before granting or denying permission. This dynamic form of access control can adjust the level of access based on situational factors, enhancing security by adapting to potential risk changes.

Contingency key: This is a cryptographic key used for emergency purposes when normal operations are disrupted. The contingency key may be used to regain access to an encrypted system or data if the original key is lost, compromised, or unavailable. It should be securely stored and managed due to its high importance for business continuity and crisis management.

Contingency Planning: The process of developing preparedness for potential emergencies or unexpected situations that can disrupt normal operations. It involves identifying critical functions, assessing risks, and establishing procedures to ensure business continuity and recovery. Contingency plans aim to minimize impact and guide rapid and effective responses to incidents such as natural disasters, cyber-attacks, or equipment failures.

Continuity: The unbroken and consistent existence or operation of something over a period of time. In a security context, it usually relates to business continuity, which emphasizes maintaining essential functions during and after a disaster has occurred. The goal is to ensure the organization's ability to perform its mission, regardless of the disruptive circumstances or events.

Continuity Of Operations (COOP): A set of protocols and planning efforts to ensure that an organization's essential functions can continue during and after a disaster or disruption. COOP planning involves identifying vital services and procedures that must be maintained, creating strategies for recovery, and regularly testing and updating the plan to ensure effectiveness in a variety of emergency scenarios.

Continuous auditing approach: A systematic and ongoing process of evaluating and monitoring an organization's financial and operational activities. This approach allows for regular and frequent assessments of internal controls, processes, and risks. Examples of continuous auditing include real-time monitoring of financial transactions, regular audits of key business processes, and ongoing risk assessments.