The FREE Cybersecurity Glossary by Thor Pedersen!

GAAP (Generally Accepted Accounting Principles): Pertains to a common set of accounting rules and standards for financial reporting that public companies in the United States must follow. These principles are designed to ensure consistency, reliability, and comparability of financial statements. In the context of IT and cybersecurity firms, GAAP guides the recording and reporting of financial transactions, including the capitalization and expense recognition of software development costs, purchase of IT equipment, and investments in cybersecurity infrastructure.

GAAS (Generally Accepted Auditing Standards): A set of systematic guidelines auditors use when assessing companies' financial statements, ensuring the accuracy, consistency, and reliability of auditors' actions and reports. In IT and cybersecurity, GAAS principles guide the auditing of IT systems and controls, emphasizing data integrity, security, and the effectiveness of IT governance practices.

Gamification: The use of game design elements and mechanics in non-game contexts to increase user engagement and motivation. It is used in various industries, including information security, to make tasks and activities more enjoyable and rewarding for users. Examples include using points, badges, and leaderboards to incentivize users to follow security best practices or using game-like challenges to educate users about security threats.

Gate: In security, a gate is a point of entry that controls access to a system or area. Gates vary from simple structures like turnstiles to advanced biometric systems. Their classification includes residential (Class I), commercial (Class II), industrial (Class III), and high security (Class IV), reflecting the level of access control and security as per ASTM standards.

Gateway: A node in a network that serves as an access point to another network, often enabling networks using different protocols to communicate with each other. It essentially acts as a mediator, translating data between different networking protocols to ensure smooth data transfer. In security, gateways often include functions like firewalls, intrusion detection systems, or filtering to protect against potential threats and maintain the integrity and security of data passing through.

General computer control: The infrastructure controls in a computer system, including network security, access controls, and data backup procedures, among others. These controls are not specific to individual applications within the system but, instead, provide a secure foundation that supports all applications. They help ensure the integrity, reliability, and security of data and systems by safeguarding the IT environment and enabling the effective operation of application controls.