Security Privacy Compliance
Kind: category
Record: lexicon-category:security-privacy-compliance
Canonical: Lexicon
The Security Privacy Compliance category holds 119 lexicon terms.
Listed in Term categories, after Schema / Canonical Data / Semantics and before Codebase / System Architecture Styles.
Terms
- Ad-Hoc Permission Checks
- Ambient-Credential Trust
- Anonymous Sensitive Access
- Assumption-Driven Security
- Authenticated-Equals-Authorized
- Broad Admin Access
- Hardcoded Rules
- Hardcoded Secrets
- Immortal Client-Trusted Session
- Insecure Defaults
- Manual-Only Review
- Plaintext Sensitive Storage
- Plaintext Transport
- Point-in-Time Audit Only
- Raw Output Rendering
- Security as Afterthought
- Single Control Reliance
- String-Concatenated SQL
- Trusted Internal Network Assumption
- Trusting External Input
- Unbounded Autonomy
- Uncontrolled Change
- Unnecessary Public Surface
- Unrestricted Access
- Assets
- Attribute Definitions
- Authenticated Principal
- Authorization Policy
- Consent/Policy
- Context-Aware Encoding
- Continuous Authorization
- Controls
- Data Minimization
- Defined Policy
- Evidence Automation
- Identity Proof
- Key Management
- Layered Controls
- Machine-Readable Policies
- Minimal Exposure
- Minimal Permissions
- Mitigation
- Policy Engine
- Query Parameter Binding
- Request Origin Verification
- Review
- Risk Identification
- Role Definitions
- Rotation Policy
- Secret Store
- Threat Scenarios
- TLS/mTLS
- Trust Boundaries
- Strong Identity
- Validation Rules
- Automated Control
- Bounded Session Lifetime
- Coarse-Grained Permission Management
- Compromise Containment
- Confidentiality
- Confidentiality of Stored Data
- Context-Aware Authorization
- Control Selection
- Data Protection
- Fine-Grained Access Control
- Forged-Request Rejection
- Identity-Aware Authorization
- Injection Prevention
- Injection-Safe Data Access
- Integrity
- Ongoing Assurance
- Perimeterless Security
- Priority-Based Controls
- Privacy Compliance
- Proactive Risk Reduction
- Reduced Blast Radius
- Reduced Exploitability
- Reduced Misconfiguration Risk
- Regulatory Alignment
- Resource Protection
- Revocable Access
- Safe Credential Handling
- Safe Rendering
- Secure Communication
- Secure Configuration
- Zero Trust
- Analytics/Personalization
- Certificate Management
- Client Complexity
- Developer Ergonomics
- Dynamic Query Flexibility
- Ease of Initial Use
- Feature Exposure
- Formatting Flexibility
- Input Flexibility
- Key Operations
- Latency/Complexity
- Operational Convenience
- Pipeline Complexity
- Policy Maintenance
- Role Explosion
- Speed
- Team Velocity
- Usability
- User Convenience
- Remove Secret from Code
- Secret Rotation
- Least-Privilege Credential
- Centralize Policy
- Server-Side Enforcement
- Penetration Testing
- Authorization Tests
- Field Redaction
- Purpose Binding
- Retention Policy
- Repository Secret Scan
- Default Deny
- Sandboxing
- Network Segmentation
Layer
Linked from
Security Privacy Compliance
Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or contract that carries the same name where one exists, and the layer its category belongs to. A tag category also gives each term an example, which is the file the tag places or the rename from a refused word onto a covering tag.
Ad-Hoc Permission Checks
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Ambient-Credential Trust
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Analytics/Personalization
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Anonymous Sensitive Access
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Assets
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
Assumption-Driven Security
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Attribute Definitions
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
Authenticated Principal
- Kind: model
- Category: Security Privacy Compliance
- Layer: Security Core
Authenticated-Equals-Authorized
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Authorization Policy
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Authorization Tests
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Automated Control
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Bounded Session Lifetime
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Broad Admin Access
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Centralize Policy
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Certificate Management
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Client Complexity
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Coarse-Grained Permission Management
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Compromise Containment
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Confidentiality
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Confidentiality of Stored Data
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Consent/Policy
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Context-Aware Authorization
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Context-Aware Encoding
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Continuous Authorization
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Control Selection
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Controls
- Kind: mechanism
- Category: Security Privacy Compliance
- Layer: Security Core
Data Minimization
- Kind: principle
- Category: Security Privacy Compliance
- Layer: Security Core
Data Protection
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Default Deny
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Defined Policy
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Developer Ergonomics
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Dynamic Query Flexibility
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Ease of Initial Use
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Evidence Automation
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Feature Exposure
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Field Redaction
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Fine-Grained Access Control
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Forged-Request Rejection
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Formatting Flexibility
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Hardcoded Rules
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Hardcoded Secrets
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Identity Proof
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
Identity-Aware Authorization
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Immortal Client-Trusted Session
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Injection Prevention
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Injection-Safe Data Access
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Input Flexibility
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Insecure Defaults
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Integrity
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Key Management
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Key Operations
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Latency/Complexity
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Layered Controls
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Least-Privilege Credential
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Machine-Readable Policies
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
Manual-Only Review
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Minimal Exposure
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Minimal Permissions
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Mitigation
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Network Segmentation
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Ongoing Assurance
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Operational Convenience
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Penetration Testing
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Perimeterless Security
- Kind: approach
- Category: Security Privacy Compliance
- Layer: Security Core
Pipeline Complexity
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Plaintext Sensitive Storage
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Plaintext Transport
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Point-in-Time Audit Only
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Policy Engine
- Kind: mechanism
- Category: Security Privacy Compliance
- Layer: Security Core
Policy Maintenance
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Priority-Based Controls
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Privacy Compliance
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Proactive Risk Reduction
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Purpose Binding
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Query Parameter Binding
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Raw Output Rendering
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Reduced Blast Radius
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Reduced Exploitability
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Reduced Misconfiguration Risk
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Regulatory Alignment
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Remove Secret from Code
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Repository Secret Scan
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Request Origin Verification
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Resource Protection
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Retention Policy
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Review
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Revocable Access
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Risk Identification
- Kind: activity
- Category: Security Privacy Compliance
- Layer: Security Core
Role Definitions
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
Role Explosion
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Rotation Policy
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Safe Credential Handling
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Safe Rendering
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Sandboxing
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Secret Rotation
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Secret Store
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
Secure Communication
- Kind: capability
- Category: Security Privacy Compliance
- Layer: Security Core
Secure Configuration
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Security as Afterthought
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Server-Side Enforcement
- Kind: technique
- Category: Security Privacy Compliance
- Layer: Security Core
Single Control Reliance
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Speed
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
String-Concatenated SQL
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Strong Identity
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Team Velocity
- Kind: metric
- Category: Security Privacy Compliance
- Layer: Security Core
Threat Scenarios
- Kind: artifact
- Category: Security Privacy Compliance
- Layer: Security Core
TLS/mTLS
- Kind: mechanism
- Category: Security Privacy Compliance
- Layer: Security Core
Trust Boundaries
- Kind: model
- Category: Security Privacy Compliance
- Layer: Security Core
Trusted Internal Network Assumption
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Trusting External Input
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Unbounded Autonomy
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Uncontrolled Change
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Unnecessary Public Surface
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Unrestricted Access
- Kind: anti-pattern
- Category: Security Privacy Compliance
- Layer: Security Core
Usability
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
User Convenience
- Kind: quality-attribute
- Category: Security Privacy Compliance
- Layer: Security Core
Validation Rules
- Kind: constraint
- Category: Security Privacy Compliance
- Layer: Security Core
Zero Trust
- Kind: approach
- Category: Security Privacy Compliance
- Layer: Security Core