Word Notes

The deployment of rules to the security stack across all data islands, cloud, SaaS applications, data centers, and mobile devices designed to manifest an organization's cybersecurity first principle strategies of zero trust, intrusion kill chain prevention, resilience, and risk forecasting. 

CyberWire Glossary link: https://thecyberwire.com/glossary/policy-orchestration

Audio reference link: “The Value of Using Security Policy Orchestration and Automation,” by David Monahan, uploaded by EMAResearch, 3 April, 2018

Learn more about your ad choices. Visit megaphone.fm/adchoices

A process of hiding the complexity of a system by providing an interface that eases its manipulation.

CyberWire Glossary link: https://thecyberwire.com/glossary/abstraction-layer

Audio reference link: “What Is Abstraction in Computer Science,” by Codexpanse, YouTube, 29 October 2018.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A set of services for managing identity and access management, or IAM across all of an organization's data islands.

CyberWire Glossary link: https://thecyberwire.com/glossary/identity-fabric

Audio reference link: “Leadership Compass Identity Fabrics - Analyst Chat 126,” by KuppingerCole, YouTube, 30 May 2022.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A cybersecurity first principle strategy focused on disrupting known adversary activity at one of several phases of an attack sequence.

CyberWire Glossary link: https://thecyberwire.com/glossary/intrusion-kill-chain

Audio reference link: "Cybersecurity Days: A Network Defender's Future," by Rick Howard, Integrated Cyber Conference, Integrated Adaptive Cyber Defense (IACD), YouTube, 26 October 2018.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A subset of security orchestration, the management of identities across an organization's set of digital islands. 

CyberWire Glossary link: https://thecyberwire.com/glossary/identity-orchestration

Learn more about your ad choices. Visit megaphone.fm/adchoices

A cyber threat intelligence analysis model that defines relationship pairs between four core components in the shape of a diamond of adversary playbook activity across the intrusion kill chain: the adversary, their capability, the infrastructure used or attacked, and the victim.

CyberWire Glossary link: https://thecyberwire.com/glossary/diamond-model

Audio reference link: “Diamond Presentation v2 0: Diamond Model for Intrusion Analysis – Applied to Star Wars’ Battles,” Andy Pendergrast and Wade Baker, ThreatConnect, YouTube, 4 February 2020.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A knowledge base of adversary tactics, techniques, and procedures established and maintained by the MITRE Corporation. 

CyberWire Glossary link: https://thecyberwire.com/glossary/mitre-attck

Audio reference link: “Attack Frameworks - SY0-601 CompTIA Security+ : 4.2,” Professor Messer, YouTube, 29 April 2021.

Learn more about your ad choices. Visit megaphone.fm/adchoices

The set of people, process, technology, and cultural norms that integrates software development and IT operations into a system-of-systems.

CyberWire Glossary link: https://thecyberwire.com/glossary/devops

Audio reference link: "10+ Deploys Per Day: Dev and Ops Cooperation at Flickr," by John Allspaw and Paul Hammond, Velocity 09, 25 July 2009.

Learn more about your ad choices. Visit megaphone.fm/adchoices

A software development model that relies on a series of sequential steps that flow into each other, like a series of waterfalls. 

CyberWire Glossary link: https://thecyberwire.com/glossary/waterfall-software-development

Audio reference link: “Creating Video Games - Agile Software Development,” by Sara Verrilli, MIT OpenCourseWare, YouTube, 10 December 2015

Learn more about your ad choices. Visit megaphone.fm/adchoices

A software development philosophy that emphasizes incremental delivery, team collaboration, continual planning, and continual learning 

CyberWire Glossary link: https://thecyberwire.com/glossary/agile-software-development

Audio reference link: "Velocity 09: John Allspaw and Paul Hammond, "10+ Deploys Pe," John Allspaw and Paul Hammond, 2009 Velocity Conference, YouTube, 25 June 2009.

Learn more about your ad choices. Visit megaphone.fm/adchoices