The FREE Cybersecurity Glossary by Thor Pedersen!

Credential Service Provider (CSP): An entity that issues digital credentials for the purpose of authenticating users to a network or service. A CSP validates the identity of individuals or entities and then issues credentials such as usernames, passwords, tokens, certificates, or biometric data, enabling them to prove their identity electronically. CSPs play a key role in establishing trust within digital environments by ensuring that the parties in a transaction are who they claim to be.

Crime Prevention Through Environmental Design (CPTED): A multi-disciplinary approach to deter criminal behavior through environmental design. It posits that the proper design and effective use of a physical environment can reduce the incidence and fear of crime, thereby improving the quality of life. This concept can be extended to digital environments as well, where careful design can prevent unauthorized access and deter cybercrimes.

Criteria: In the context of system evaluation, criteria refer to the benchmarks or standards used to assess the efficiency and effectiveness of security measures within a system. They serve as the basis for forming judgments and making decisions regarding the state of security controls and their ability to mitigate potential threats.

Critical Functions: The fundamental tasks or processes of a system or organization that, if interrupted or failed, would significantly impact operational continuity, assets, and human safety. The protection and continual operation of critical functions is a primary focus of security strategies.

Critical Infrastructures: The physical and virtual systems and assets that are so vital to society that their incapacitation or destruction would have a debilitating impact on security, economic security, public health, or safety. This could include utilities like electricity and water, financial services, and communication networks, all of which need robust protection mechanisms to prevent interruption.

Criticality: The state or quality of being critical or essential to the success of an organization's security program. It is used to identify the most important areas to focus on in order to prevent or mitigate potential security breaches. Examples of critical security areas include sensitive data storage and access, network security, and access control.