The FREE Cybersecurity Glossary by Thor Pedersen!

Managed Security Services Providers (MSSPs): Specialized companies that provide outsourced monitoring and management of security systems and devices. Services often include managed firewalls, intrusion detection, virtual private networks, vulnerability scanning, and anti-viral services, among others. MSSPs offer their expertise and dedicated resources to help organizations secure their information systems, manage risk, and meet compliance demands.

Management: The set of activities involved in planning, organizing, and controlling resources to achieve objectives. This includes defining policies, overseeing their implementation, setting goals, allocating resources, and managing personnel. Good management practices are essential for maintaining a robust and effective organizational structure.

Management Controls: The security controls, procedures, and practices that focus on the management of risk and the management of information system security. They involve risk assessment, security planning, system and services acquisition, and security program management. Management controls are designed to ensure that information systems are adequately protected and that risk management strategies are in place and functioning properly.

Management Information System (MIS): A Management Information System (MIS) is an integrated, user-machine system that provides management with critical information on a regular basis to support operational, tactical, and strategic decision-making processes. MIS encompasses a variety of components, including databases, software applications, hardware, and procedures, designed to compile and analyze data and deliver it as manageable information.

Mandatory Access Control (MAC): A type of access control where the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. In MAC, access rights are determined by the system based on regulations and not the users. It is commonly used in organizations that require a high level of security, such as military institutions.

Mandatory Reporting: A requirement, often established by law, regulation, or industry guidelines, which obligates individuals or organizations to report certain types of incidents or data breaches to relevant authorities within a specified timeframe. In cybersecurity, mandatory reporting typically involves notifying government bodies, regulatory agencies, affected individuals, or other stakeholders about security incidents that could potentially lead to the exposure of sensitive, confidential, or personally identifiable information. The goal of mandatory reporting is to ensure timely and transparent communication about breaches, enabling prompt response and mitigation efforts to protect affected parties and prevent future occurrences.