Acronyms, in plain language

CSP

Content Security Policy

Browser rules that limit where a page may load or run scripts and other content.

CVE

Common Vulnerabilities and Exposures

A shared identifier for a publicly disclosed security vulnerability, used to track the same flaw across tools.

DDoS

Distributed Denial of Service

An attack that uses many sources to overwhelm a website or service with traffic.

DKIM

DomainKeys Identified Mail

Adds a verifiable signature to email so the receiving server can check its sending domain and integrity.

DMARC

Domain-based Message Authentication, Reporting and Conformance

Tells receiving mail servers how to handle messages that fail the domain’s email checks, and enables reports.

EDR

Endpoint Detection and Response

Software that watches laptops and servers for suspicious behaviour and helps isolate an affected device.

MDR

Managed Detection and Response

A service in which a security team monitors alerts, investigates threats and helps respond.

MFA

Multi-Factor Authentication

Requires more than one kind of proof to sign in, such as a password plus confirmation on your phone.

OWASP

Open Worldwide Application Security Project

A nonprofit foundation that publishes practical resources about software security, including the Top 10 risk list.

SIEM

Security Information and Event Management

Collects security logs from different systems so people can search them and connect related events.

SOAR

Security Orchestration, Automation and Response

Links security tools and automates repeatable response steps, such as opening a case or blocking an address.

SOC

Security Operations Centre

The team and working environment used to monitor security alerts and coordinate incident response.

SPF

Sender Policy Framework

A domain setting that identifies which mail servers are allowed to send email for that domain.

SSO

Single Sign-On

Lets you sign in once with a company account and then use several connected applications.

WAF

Web Application Firewall

A filter that checks requests to your website and blocks suspicious ones before they reach the application.

XDR

Extended Detection and Response

Connects alerts from devices, email, accounts and networks so an investigation can follow the same attack across them.

XSS

Cross-Site Scripting

A website flaw that can let an attacker run unwanted script in a visitor’s browser.

API

Application Programming Interface

An agreed way for one application to request data or actions from another application.

CDN

Content Delivery Network

A network that can keep copies of website content nearer to visitors to deliver it faster.

DNS

Domain Name System

Connects a name such as alt-f1.be to the address of the service a visitor needs to reach.

HTTP

Hypertext Transfer Protocol

The rules browsers and web servers use to exchange requests and responses.

HTTPS

Hypertext Transfer Protocol Secure

The encrypted form of the web connection used between your browser and a website, protected with TLS.

IP

Internet Protocol

The network addressing system used to route data; an IP address identifies a network connection.

SIP

Session Initiation Protocol

A protocol used to set up and manage internet-based voice and video calls.

TLS

Transport Layer Security

Encrypts a connection between systems, such as a browser and a website.

USB

Universal Serial Bus

A common connection for devices and removable drives; a USB stick is a small removable storage device.

VPN

Virtual Private Network

An encrypted connection used, for example, to reach a company network while working remotely.

CI/CD

Continuous Integration / Continuous Delivery or Deployment

Automated checks and repeatable release steps for software. CD may mean delivery or deployment, depending on the workflow.

CMDB

Configuration Management Database

An inventory that records systems, their owners and how they depend on one another.

CRM

Customer Relationship Management

Software used to organise customer contacts, sales activity and follow-up.

ERP

Enterprise Resource Planning

Software that connects business processes such as purchasing, stock, accounting and production.

ICT

Information and Communication Technology

IT and communication systems, including the technology used to exchange information.

IT

Information Technology

The computers, software, networks and related services an organisation uses.

ITIL

Information Technology Infrastructure Library

The original name behind the ITIL service-management framework, used to organise support, incidents and changes.

ITSM

IT Service Management

How an organisation runs IT as a service: support requests, incidents, changes and responsibilities.

S3

Simple Storage Service

The name comes from Amazon’s object-storage service. S3-compatible storage uses a compatible API and can be run by another provider. Often used for backups and files.

SBOM

Software Bill of Materials

An inventory of the components in a piece of software, useful when checking which systems contain a vulnerable component.

SLA

Service Level Agreement

The written service commitments agreed with a provider, such as availability or response arrangements.

SQL

Structured Query Language

A language used to read and change data in many databases. A SQL injection tries to misuse those commands through an application.

AI

Artificial Intelligence

Software that performs tasks such as recognising patterns, generating text or helping classify information.

Also written: IA

LLM

Large Language Model

An AI model trained to work with language, for example to draft, summarise or answer questions.

RAG

Retrieval-Augmented Generation

An approach that retrieves relevant documents and supplies them to an AI model when it drafts an answer.

CCB

Centre for Cybersecurity Belgium

Belgium’s national cybersecurity authority.

CLOUD Act

Clarifying Lawful Overseas Use of Data Act

A US law concerning access to electronic evidence. A provider’s legal obligations cannot be determined from the storage country alone.

CRA

Cyber Resilience Act

EU cybersecurity rules for products with digital elements, including certain software and connected devices.

DORA

Digital Operational Resilience Act

EU rules on digital operational resilience in the financial sector.

DPO

Data Protection Officer

The data-protection officer who advises and monitors an organisation’s data-protection compliance.

EU

European Union

The European Union; UE is the French abbreviation. EEA is a different geographic scope and should not be treated as the same term.

Also written: UE

GDPR

General Data Protection Regulation

The EU regulation on personal-data protection. RGPD is the French name and AVG the Dutch name.

Also written: RGPD, AVG

IEC

International Electrotechnical Commission

The international organisation for electrotechnical standards; it publishes some standards jointly with ISO.

ISO

International Organization for Standardization

The international standards organisation. ISO is its universal short name, rather than initials translated from one language.

NIS2

Network and Information Systems Directive 2

An EU cybersecurity directive with requirements for organisations covered by its scope.

Also written: NIS 2

SEPA

Single Euro Payments Area

The shared framework for euro bank payments, including transfers and direct debits.

SME

Small and Medium-sized Enterprise

A business-size category. ALT-F1 works with both these businesses and larger organisations.

Also written: PME, KMO