The FREE Cybersecurity Glossary by Thor Pedersen!

Cookie: A small piece of data sent from a website and stored on the user's computer by the web browser while the user is browsing. Cookies are designed to be a reliable mechanism for websites to remember stateful information or to record the user's browsing activity. They can also be used for remembering pieces of information that the user previously entered into form fields, such as names, addresses, passwords, and credit card numbers.

Copyright: Copyright is a legal right granted to the creators of original works, covering creative, literary, and intellectual productions. It provides exclusive rights to use and distribute the work for a specified period, typically the creator’s life plus a set number of years. For works made for hire, the duration is generally 95 to 120 years from creation. Once expired, the work enters the public domain.

Corporate Governance: The system of rules, practices, and processes by which a company is directed and controlled. It involves balancing the interests of a company's many stakeholders, such as shareholders, management, customers, suppliers, financiers, government, and the community. Good corporate governance ensures accountability, fairness, and transparency in a company's relationship with all its stakeholders. It provides the framework within which the objectives of the company are set, and the means of attaining those objectives and monitoring performance are determined.

Corporate security officer: An executive role within an organization responsible for overseeing all aspects of security, including physical security, personal security, and digital security. This role often involves creating and implementing security strategies, managing security personnel, coordinating with other executives and stakeholders, and responding to security incidents.

Corrective Control: A type of internal control mechanism designed to rectify and mitigate the impact of identified problems or incidents after they occur. Corrective controls include activities and procedures that are implemented to address and correct the undesirable outcomes of an event, such as restoring systems to their normal state after a security breach, repairing damages, and updating processes to prevent future occurrences. These controls are reactive by nature, focusing on response and recovery.

Correlation: The relationship between two or more variables, such as the relationship between a security incident and a potential vulnerability. It is used in security analysis to identify patterns and connections between different data sets. Examples include using correlation to link network traffic to a specific user or to identify a trend in phishing attacks.