Glossary of IT Terms


Below is a partial list of the glossary items listed in our book.

(Note this is copyrighted material, so if you use some of it for your presentation, please either acknowledge us or pay us back by having your company buy a copy of our book!)

"360" Reviews A performance review in which employees receive feedback from not only their direct supervisor, but from other individuals as well, including peers and subordinates.
7-Layer OSI model Open System Interconnect; an abstract model that describes procedures for transferring data in a network environment.
ACD Automatic Call Distribution; software that can route calls to technicians based on menu prompts and can provide detailed reports about activity.
ACT Model A method of managing a crisis; (A)cknowledge and name the trauma, (C)ommunicate both competence and caring, and provide (T)ransition.
Adaptive switching Data forwarding method that automatically switches between store-and-forward, cut-through forward, and fragment-free forwarding methods.
Advanced Encryption Standard AES; the standard for encryption adopted by the U. S. Government. AES can use key sizes of 128, 192, or 256 bits. AES replaced DES (Digital Encryption Standard).
Adware Software that installs itself on a workstation for the purpose of displaying ads to the user. Adware is generally unwanted and often installed without the knowledge of the user. It is considered to be malware.
AES Advanced Encryption Standard; the standard for encryption adopted by the U. S. Government. AES can use key sizes of 128, 192, or 256 bits. AES replaced DES (Digital Encryption Standard).
AGMA Alliance for Gray Market and Counterfeit Abatement.
ANSI/EIA American National Standards Institute/Electronic Industries Alliance. Standards coordinating organization.
APNIC Asia Pacific Information Centre; Internet registry for Asia Pacific.
ARIN American Registry for Internet Numbers; Internet registry for North America.
Asset management Processes and techniques employed to minimize TCO (total cost of ownership).
ATA The type of drive most often used in desktop and laptops; uses a 16-bit parallel interface. (Also known as IDE.)
ATM Asynchronous Transfer Mode; a high speed networking technology.
Automatic Call Distribution ACD; software that can route calls to technicians based on menu prompts and can provide you with detailed reports about activity.
B2B Business-to-Business e-commerce marketing direction.
B2C Business-to-Customer e-commerce marketing direction.
Backbone The high-capacity portion of the network that carries/transfers data collected from other portions of the network that interconnect with it.
Basel II International agreement that sets out the details for adopting more risk-sensitive minimum capital requirements for banking organizations.
BCC Blind Carbon Copy; allows you to send a copy of an e-mail (or letter) to individuals without informing the other addresses of the message that you're doing so.
BCP Business Continuity Planning; a methodology used to create a plan for how an organization will resume partially or completely interrupted critical function(s) within a predetermined time after a disaster or disruption. BCP differentiates from disaster recovery in that DR is primarily associated with resources and facilities, while BCP is primarily associated with processes.
Black List A list of originators (e-mail and IP addresses) whose messages should always be considered spam.
Bluetooth Wireless technology standard used for transmitting data between devices in close proximity.
BTUs British Thermal Units; heating and cooling measurement.
Burstable lines A connection of a particular bandwidth that allows periodic "bursts" of higher throughput.
Business Continuity Planning BCP; a methodology used to create a plan for how an organization will resume partially or completely interrupted critical function(s) within a predetermined time after a disaster or disruption.
BCP differentiates from disaster recovery in that DR is primarily associated with resources and facilities, while BCP is primarily associated with processes.
C Programming language that was very popular (it was used to write many of the Unix operating systems) but has now been supplanted in many areas by C++ and Java.
CIA Confidentiality, Integrity, and Availability; tenets of information security.
C++ Programming language that gained popularity with the advent of object-oriented programming. It's a successor of the C programming language and still widely used.
Call tracking A software application designed specifically for managing large volumes of calls at call centers.
Capital expenditure A financial expenditure for an asset: an item that will have a useful life of several years such as a piece of hardware. Many companies consider software to be a capital expenditure.
CardBus Standard for expansion cards used in laptops.
CAT Short for "category;" ANSI/EIA (American National Standards Institute/ Electronic Industries Alliance) specifications for twisted pair wiring used in local area networks.
CBT Computer-Based Training; software-based (stand-alone or on the Web) education that trains the user in a particular product set.
CERT Research and development center at Carnegie Mellon University (funded
U.S. Department of Defense and the Department of Homeland Security) that coordinates communication among security information experts.
Certified Netware Engineer Certification for Novell Netware product.
Change Request CR; change management notification for a change in current process/environment.
Chief Security Officer CSO; individual at a corporation in charge of defining and implementing security policies.
Chiller In an air conditioning system, the piece of equipment that produces the chilled water which is then circulated.
CIFS Common Internet File System; protocol for sharing data and files between different platforms.
CIR Committed Information Rate; metric used by frame-relay carriers as a guarantee that data below this level will be delivered.
CISSP Certified Information Systems Security Professional; security certification.
CLERP-9 Australian legislation similar to U.S. version Sarbanes-Oxley.
Client/server An application architecture that has two pieces of software associated with it: one that runs on the server and does the vast majority
of the processing, and another piece that the user (or client) accesses that serves as the user-interface.
CMMI Capability Maturity Model Integration; a methodology for process improvement.
CNE Novell Certified Netware Engineer.
COBIT Control Objectives for Information and related Technology; a set of documents developed by the Information Systems Audit and Control Association and the IT Governance Institute that provide guidance for computer security. Much of COBIT is available at no cost.
Compressed OSI Model Alternative of the 7-layer OSI-model in which some of the layers are combined.
Computer-Based Training CBT; software-based (stand-alone or on the Web) education that trains the user in a particular product set.
COSO Committee of Sponsoring Organizations; "is a private sector organization dedicated to improving the quality of financial reporting through business ethics, effective internal controls, and corporate governance."
CR Change Request; change management notification for change in current process/environment.
CSO Chief Security Officer; individual at a corporation in charge of defining and implementing security policies.
Cut-through forward Data forwarding method used by networking equipment in which the switch forwards the data before the whole frame has been received.
DAP Directory Access Protocol; defines the standards for accessing X.500 directories. (See X.500 directories.)
DARPA Defense Advanced Research Projects Agency; federal agency originally responsible for the network that became the Internet.
DAS Direct Attached Storage; the term used for storage that is part of a server, or directly attached to it.
Database Management System DBMS; sophisticated software system that controls the databases.
DBMS Database Management System; sophisticated software system that controls the databases.
Defense Advanced Research Projects Agency DARPA; federal agency originally responsible for the network that became the Internet.
DHCP Dynamic Host Configuration Protocol; used for assigning IP addresses.
Digital Certificates A method of providing other systems (or users) a level of trust that the public key claimed to belong to a user (or organization) does indeed belong to that user.
Directory Services A system application and database, for tracking and administering resources (users, devices, etc.), that is used by all other applications. Frequently used for IDs and passwords in single sign on applications.
Disaster Recovery DR; the ability of an infrastructure to resume operations after a disaster. Disaster Recovery differentiates from Business Continuity Planning in that Disaster Recovery is primarily associated with resources and facilities, while BCP is primarily associated with processes.
DMZ Demilitarized Zone; Used to host devices that are accessible via the Internet, but are still protected by the firewall.
DNS Domain Name Servers; translates alphanumeric resources names to IP addresses.
DR Disaster Recovery; the ability of an infrastructure to resume operations after a disaster. Disaster Recovery differentiates from Business Continuity Planning in that Disaster Recovery is primarily associated with resources and facilities, while BCP is primarily associated with processes.
DSL Digital Subscriber Link; high-speed Internet connectivity for homes and small businesses over standard copper phone lines.
E-commerce A term to describe the many activities involved in buying and selling over the Internet.
ECR Emergency Change Request; change request processed outside the normal channels and procedures of change management because of time constraints, or urgent requirements.
Emergency Change Request ECR; change request processed outside the normal channels and procedures of change management because of time constraints, or urgent requirements.
Enterprise Resource Planning ERP; set of applications and systems that a company uses to manage its resources across the entire enterprise.
EPO switch Emergency Power Off; a switch found in data centers to be used when an emergency situation requires that all electrical power be immediately shut down.
EPS Emergency Power Supply; usually a diesel-powered generator, usually outside the building, oftentimes on the roof.
ERP Enterprise Resource Planning; set of applications and systems that a company uses to manage its resources across the entire enterprise.
Ethernet 10, 100 (a.k.a. fast Ethernet), 1,000 (a.k.a. gigabit) is the most popular LAN topology.
Expense item A financial expenditure for something whose value is gone in a short period of time, typically less than a year. Also used for items that have a longer life, but are relatively inexpensive (below a threshold set by Accounting).
Extranet An extranet site is similar to an Internet site except that it's specifically designed for use by the company partners (suppliers, customers, etc.)
FACTA Fair and Accurate Credit Transactions Act; a consumer rights bill that became fully effective June 1st, 2005, and is an extension of the Fair Credit Reporting Act (FCRA). The rule says that in regard to consumer information (such as name, social security number, address, etc.) you must "take reasonable measures to protect against unauthorized access or use of the information."
FASB Financial Accounting Standards Board; organization for establishing standards of financial accounting and reporting.
FCRA Fair Credit Reporting Act; extended by FACTA.
FDDI Fiber Distributed Data Interface; the protocol for transmitting data on fiber-optic cable.
Fibre Channel The most common connection method for storage area networks.
Firewall A device that is used to control access between two networks. Typically used when connecting a private network to the Internet as a way of protecting and securing the internal network from threats, hackers, etc. Also used when connecting two private networks (e.g., supplies, partners, etc.)
FireWire Apple's IEEE standard for connecting devices.
Fiscal year Twelve-month period used for budgeting. Frequently, the fiscal year that a budget tracks isn't the January-December calendar year. The year that the budget tracks can be any 12-month period, although it generally begins on January 1, April 1, July 1, or October 1.
Fractional T-1 Refers to using one, or more, of the 24 channels available in a T-1 circuit. While this reduces bandwidth, there is also a cost savings.
Fragment free Data forwarding method for networking hardware where the switch stores only the first 64 bytes of the frame before forwarding the frame.
Frame relay A cost-effective method of connecting distant points in a WAN using packet switching technology with packets of variable sizes.
FTP File Transfer Protocol; an application protocol that transfers files from the source where they were created to a server that makes them accessible to users on the Internet.
GnuPG Open source computer program that provides encryption and authentication.
Gramm-Leach-Bliley Act An act passed by Congress that has provisions to protect consumers' personal financial information held by financial institutions.
Gray Market Brand name items sold outside of the producer's official distribution channels. Gray market goods are usually not backed by the manufacturer's warranty.
HBA Host-Bus Adapters; used for connecting servers to storage area networks.
HIPAA Health Insurance Portability and Accountability Act; regulations passed by Congress promoting the privacy and security of medical records.
HRIS Human Resources Information System; HR software.
HSM Hierarchical Storage Management; a data storage solution that moves data to secondary and tertiary storage media based on access frequency and/ or age.
HTTP Hyper Text Transfer Protocol; transfers displayable Web pages.
Hub/concentrator A generic term for a device that interconnects several nodes on a network.
HVAC Heating, Ventilation, and Air-Conditioning.
ICANN Internet Corporation for Assigned Names and Numbers; an internationally organized, non-profit corporation that has responsibility for IP address space allocation, domain name system management, and root server system management functions.
IDE The type of drive most often used in desktop and laptops; uses a 16-bit parallel interface (also known as ATA).
IDF Intermediate Distribution Frame/Facility; essentially a network wiring closet.
IDS Intrusion Detection Systems; security hardware/software that identifies suspicious traffic (i.e., potential security threats) based on patterns of activity.
IEEE Institute of Electrical and Electronics Engineers; a key standards-setting body.
IKE Internet Key Exchange; a method for automating the provisioning of authenticated keys for IPsec.
ILM Information Lifecycle Management; storage methodology that reflects the fact that the value and use of data and information change over time. Incorporates software and hardware to move data to different storage media to make the most effective use of resources.
IMAP4 Internet Message Access Protocol; an e-mail standard for accessing e-mail messages on a server without having to download them to a workstation.
Information Lifecycle Management ILM; storage methodology that reflects the fact that the value and use of data and information change over time. Incorporates software and hardware to move data to different storage media to make the most effective use of resources.
Intermediate Distribution Frame/Facility IDF; essentially a network wiring closet.
Internet Corporation for Assigned Names and Numbers ICANN; an internationally organized, non-profit corporation that has responsibility for IP address space allocation, domain name system management, and root server system management functions.
Internet Key Exchange IKE; a method for automating the provisioning of authenticated keys for IPsec.
Internet Protocol suite IP suite; a set of communications protocols that define how devices connect to the Internet.
Interoperability The ability for two (or more) components of technology to interface and work together.
Intranet A private Web site available only to those within a company or organization.
Intrusion Detection Systems IDS; security software that identifies suspicious traffic (i.e., security threats) based on patterns of activity.
Intrusion Prevention System IPS; security software that not only detects malicious activity (like an IDS), but also takes action to halt it.
IPng IP Next Generation; alternate name for version 6 of IP addressing.
IPS Intrusion Prevention System; security software that not only detects malicious activity (like an IDS), but also takes action to halt it.
IPsec Internet Protocol Security; a protocol for ensuring data security with IP connectivity; includes encryption and authentication technologies.
IPv6 Version 6 of IP addressing, also known as IPng (IP Next Generation) iSCSI IP SCSI; within storage networks, uses IP networking to connect servers to SCSI devices.
ISDN Integrated Service Digital Network; a way of transmitting digital signals over standard telephone company copper lines.
ISO 17799 An internationally recognized information security standard.
ISO 9000 A standard; framework for quality management throughout the processes of producing and delivering products and services.
ISP Internet Service Provider; a company that provides connectivity to the Internet.
ITIL IT Infrastructure Library; a set of guidelines for developing and managing IT operations and services.
Java Popular programming language for developing software; used to create many of the applications that run on Web sites.
JBOD Just a Bunch of Disks; a term used to differentiate lower level storage solutions from higher level ones like SAN (Storage Area Network) and NAS (Network Attached Storage).
Kerberos Password security scheme.
Kernel The core components of an operating system.
Key loggers Small applications that reside on a computer to record key strokes, usually installed without the knowledge or consent of the user, and considered to be malware and spyware.
L2TP Layer 2 Tunneling Protocol; a tunneling protocol (developed by Cisco and Microsoft) used in virtual private networks (VPNs).
LACNIC Latin American and Caribbean Internet Addresses Registry.
LAN Local Area Network; a network of computers that are physically connected within a single site (or campus) without the use of telecomm lines.
LDAP Lightweight Direct Access Protocol; a subset of the X.500 and DAP standards for directory services.
Leased line Dedicated circuit (a.k.a. private line, point-to-point-circuit) provided by the telecommunications carriers that connects two locations.
M&M security model Security model designed to make a system "hard on the outside and soft in the middle."
MAC address Media Access Control address; a unique identifier for any device connected to a network. MAC addresses are generally created and assigned during manufacturing.
Malware General term for software designed to damage a computer or computer system. Spyware, adware, viruses, etc., are considered forms of malware.
Middleware Software that connects other software.
Milestone A point in a project that represents the completion of an important sequence of key tasks and activities.
MIME Multipurpose Internet Mail Extension; for formatting non-text messages (e.g., graphics, audio, video) so that they can be sent over the Internet.
Multimode A less expensive (compared to singlemode) type of fiber cable that is often used within a building or small campus, since its maximum distance is about 2km.
NAP Network Access Point; in the United States, one of several major Internet connection points that connect all ISPs together.
NAS Network Attached Storage; refers to storage hardware that connects directly to your Ethernet network.
NAT Network Address Translation; a method for allowing all on a LAN to share the same IP address when accessing devices on the Internet.
Object-Oriented Programming OOP; a methodology or a method that defines how you write a software program in a very specific way. Rather than have a series of commands that specify certain actions, objects interact with each other. C++ is an object-oriented programming language; C is not.
OCTAVE Operationally Critical Threat, Asset, and Vulnerability Evaluation; a method of performing a risk analysis developed by CERT.
OFAC Office of Foreign Assets Control; part of the U. S. Department of Treasury that administers and enforces economic sanctions programs primarily against countries and groups of individuals, such as terrorists and narcotics traffickers.
Off shore Outsourcing The process of a domestic company arranging with one or more overseas third parties to provide services that the first company could provide but chose not to.
OOP Object-Oriented Programming; a methodology or a method that defines how you write a software program in a very specific way. Rather than have a series of commands that specify certain actions, objects interact with each other. C++ is an object-oriented programming language; C is not.
Open Relay An SMTP e-mail server that lets third parties send e-mail messages.
Open Source Software OSS; software created by the worldwide user community. Open source software is generally free, can be modified by anyone, and usually doesn't have any single "owner."
OpenPGP Open source computer program that provides encryption and authentication.
OSS Open Source Software; software created by the worldwide user community. Open source software is generally free, can be modified by anyone, and usually doesn't have any single "owner."
Outsource The process of a company arranging with one or more third parties to provide services that the first company could provide but chose not to.
Packet Switching Technology that breaks up a data transmission into small packets. Each packet is then transmitted through the network, often on different paths, to the destination. At the destination, the packets are reassembled.
Passive/active hubs A passive hub (a.k.a. dumb) is a hub device that does nothing more than pass all the data and signals it receives to all the devices connected to it. It's an inexpensive device for interconnecting network nodes. An active hub (a.k.a. intelligent) adds value to its general function of interconnecting network nodes.
Patriot Act U.S. legislation that has a number of requirements for financial institutions in regard to verifying customers' identities and determining whether the customer appears on any list of known or suspected terrorists or terrorist organizations.
PC Cards Standard for expansion cards used in laptops.
PCMCIA standard cards Personal Computer Memory Card International Association; standard for expansion cards used in laptops. Later known as PC Cards and CardBus.
PDA Portable Digital Assistant; handheld electronic device that can be used as a phone, scheduler, e-mail client, etc.
PDCA Plan, Do, Check, Act; continuous improvement cycle originally developed by Walter Shewhart in the 1930s.
PDU Power Distribution Unit; equipment in a data center for distributing power to individual equipment cabinets and devices.
Perl Programming language that uses primarily scripts. It has certain very specific strengths, and Perl programmers tend to be very devoted to their language.
PGP Pretty Good Privacy; a computer program that provides encryption and authentication.
Phishing The process of trying to obtain confidential information (e.g., credit card numbers, passwords, social security numbers, bank account numbers, etc.) by sending e-mails that appear to be from legitimate organizations but are in fact fraudulent.
PII Personal Identifying Information; term used frequently in a number of compliance regulations and legislations to refer to types of protected information.
PIPEDA Personal Information Protection and Electronic Documents Act; a Canadian law that regulates the collection, use, and disclosure of personally identifiable information.
PKI Public Key Infrastructure; enables users to securely exchange data through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority.
PMO Project Management Office; department within an organization that oversees all project activity.
POP-3 Post Office Protocol 3; a protocol for downloading e-mail messages from an e-mail server.
Port replicator A device for easily connecting external peripherals (keyboard, monitor, printer, etc.) to a laptop.
Position Description
A relatively detailed description of a specific job function.
POTS line
Plain old telephone system; a single line analog jack usually found in homes and is typically used for fax machines, modems, etc.
PPTP Point-to-Point Tunneling Protocol; a tunneling protocol used in virtual private networks (VPNs). Has lost favor in recent years to alternatives like L2TP and IPsec.
Pretty Good Privacy PGP; computer program that provides encryption and authentication.
Private side A reference to the internal local area network as it relates to its connection to a firewall.
Production environment The environment that contains the actual production systems, application, and data.
Protocol A set of rules and standards that ease the interconnectivity of
devices of different platforms and from different vendors.
Public side A reference to the Internet as it relates to its connection to a firewall.
QoS Quality of Service; a technology for managing network performance.
RADIUS Remote Authentication Dial-In User Service.
RAID storage Redundant Array of Independent Disks; a method of storing on multiple disks so that data are still available even if one of the disks malfunctions.
RAS Remote Access Servers.
Recover Time Objective RTO; in disaster recovery planning, the expected amount of time between the disaster, and when services are restored.
Recovery Point Objective RPO; in disaster recovery planning, the age, or "freshness," of the data available to be restored in a disaster scenario.
Reintermediation Assembling or reassembling components of the traditional supply chain, such as connecting remote buyers and sellers on eBay.
RFID Radio Frequency Identification; technology used to identify and track items (e.g. inventory, consumer products) using very small components known as tags.
RIPE NCC Réseaux IP Européens Network Coordination Centre; Internet address registry for Europe.
RMON Remote Monitoring; a technology for managing networks.
Rootkits A set of modifications to the operating system that is primarily designed to hide malicious activity.
Router A device that connects two networks.
RPO Recovery Point Objective; in disaster recovery planning, the age, or "freshness," of the data available to be restored in a disaster scenario.
RTO Recovery Time Objective; in disaster recovery planning, the expected amount of time between the disaster, and when services are restored.
Rule of Least Privilege Users should only be granted the least amount of
access to the system, and for the least amount of time necessary, as is authorized and required for their job.
S/MIME Secure Multipurpose Internet Mail Extension; a variation of MIME that supports encrypted messages.
SAN Storage Area Network; a type of network that connects servers to storage devices and provides block-level access, as opposed to file-level access of NAS solutions. (See Network Attached Storage.)
Sarbanes-Oxley Law passed by the United States Congress to regulate the integrity of financial statements.
SATA Serial ATA; type of disk drive.
SB-1386 California state law requiring organizations that maintain personal information about individuals to inform those individuals if the security of their information is compromised.
SBA Small Business Administration; government agency that manages small business definitions, loans, lobbying, etc.
SCAMPI Appraisal process for the CMMI process improvement methodology.
SCSI Small Computer Systems Interface; type of disk drive.
Secure Sockets Layer SSL; a protocol for encrypting information sent via the Internet.
Service Level Agreement