KMBL/App Security Technology Risk/ Goregaon

AppSec (Application Security) Key Terms:

1. Secure Coding: Writing software with security best practices to prevent vulnerabilities.
2. Vulnerability: Weaknesses in an application that could be exploited.
3. SAST (Static Application Security Testing): Code analysis to find vulnerabilities without executing the program.
4. DAST (Dynamic Application Security Testing): Security testing of running applications to find vulnerabilities.
5. Penetration Testing: Simulated cyberattack to identify security gaps.
6. Threat Modeling: Identifying potential threats to applications and mitigating them.
7. OWASP (Open Web Application Security Project): A foundation that provides tools, guidelines, and best practices for AppSec.
8. Cross-Site Scripting (XSS): A common web vulnerability allowing attackers to inject malicious scripts.
9. SQL Injection: A type of attack where malicious SQL statements are executed.
10. Identity and Access Management (IAM): Controlling who has access to applications.
11. Application Firewalls (WAF): Firewalls that protect applications by filtering traffic.
12. DevSecOps: Integration of security practices into the DevOps pipeline.
13. Zero Trust: Security model that assumes no user or system is trusted by default.
14. Patch Management: Regular updating of software to fix security flaws.
15. API Security: Protecting the APIs that applications use to communicate with each other.

Technology Risk Key Terms:

1. Cybersecurity: The practice of protecting systems, networks, and programs from digital attacks.
2. Data Breach: Unauthorized access to sensitive or confidential information.
3. Third-Party Risk: Risks introduced by external vendors, partners, or service providers.
4. Business Continuity: Ensuring critical business operations continue during disruptions.
5. Disaster Recovery: Process of restoring systems after a failure or cyberattack.
6. Operational Risk: Risk of loss due to failed processes, systems, or external events.
7. Compliance: Adhering to regulations (e.g., GDPR, HIPAA) to avoid legal or financial penalties.
8. Incident Response: The process of managing a security breach or attack.
9. Encryption: Protecting data by converting it into a secure code.
10. Cloud Security: Measures taken to secure cloud computing environments.
11. Risk Assessment: The process of identifying, analyzing, and prioritizing risks.
12. Phishing: Fraudulent attempt to obtain sensitive information, often via email.
13. Malware: Malicious software designed to harm, exploit, or steal data.
14. Ransomware: A type of malware that encrypts data and demands a ransom for decryption.
15. Zero-Day Vulnerability: An unknown vulnerability that is exploited before a patch is available.
16. Backup and Recovery: Systems to ensure data can be restored in case of an attack or failure.

Application Security (AppSec) & Technology Risk Specialist role:

Job Title: Application Security (AppSec) & Technology Risk Specialist