Vulnerability assessment Formal description and evaluation of vulnerabilities of an information system. W A backup site that contains the IT infrastructure (hardware-wise, sometimes Warm site application), but not the data. Web risk assessment Process for ensuring websites are in compliance with applicable policies. Permits the active or passive transfer of information between separated points without physical connection. Active information transfer may entail a transmit and/or receive Wireless technology emanation of energy, whereas passive information transfer entails a receive-only capability. Currently wireless technologies use IR, acoustic, RF, and optical but, as technology evolves, wireless could include other methods of transmission. Estimate of the effort or time needed by a potential perpetrator, with specified Work factor expertise and resources, to overcome a protective measure. Worm See malicious code. Fundamental operation in an information system that results only in the flow of Write information from a subject to an object. (See access type.) Write access Permission to write to an object in an information system. Z To fill unused storage locations in an information system with the representation of the Zero fill character denoting “0.” Zeroize To remove or eliminate the key from a cryptoequipmentor fill device.
Vulnerability assessment Formal description and evaluation of vulnerabilities of an information system. W Warm site A backup site that contains the IT infrastructure (hardware-wise, sometimes application), but not the data. Web risk assessment Process for ensuring websites are in compliance with applicable policies. Wireless technology Permits the active or passive transfer of information between separated points without physical connection. Active information transfer may entail a transmit and/or receive emanation of energy, whereas passive information transfer entails a receive-only capability. Currently wireless technologies use IR, acoustic, RF, and optical but, as technology evolves, wireless could include other methods of transmission. Work factor Estimate of the effort or time needed by a potential perpetrator, with specified expertise and resources, to overcome a protective measure. Worm See malicious code. Write Fundamental operation in an information system that results only in the flow of information from a subject to an object. (See access type.) Write access Permission to write to an object in an information system. Z Zero fill To fill unused storage locations in an information system with the representation of the character denoting “0.” Zeroize To remove or eliminate the key from a cryptoequipmentor fill device.
CISSP_Glossary_v1.1.docx