Information Security

Access Rights & Permissions Matrix

A structured record mapping roles, systems, and access levels to enforce least privilege and support access audits.

Data Breach Notification Log

A chronological record of confirmed breaches, notification decisions, and disclosure timelines used to demonstrate regulatory compliance.

Data Classification Register

An inventory of data assets tagged by sensitivity tier to drive proportionate access, handling, and protection controls.

Data Loss Prevention (DLP) Incident Log

A record of detected policy violations and potential data exfiltration events used to track containment and repeat offenders.

Document Retention & Disposal Tracker

A schedule mapping record types to required retention periods and disposal methods to limit unnecessary data exposure.

Security KPI Dashboard

A curated set of recurring metrics that translate security program activity into indicators leadership and auditors can track over time.

Asymmetric-Key Cryptography

A trust-based dual-key cryptographic system built on a mathematically linked public key and private key pair.

Combined Security Model: Digital Signature + Digital Envelope

An integrated model combining digital signatures and digital envelopes to secure authentication, integrity, and confidentiality across the …

Database Encryption Techniques (API, Plug-in, TDE)

A comparison of the three core database encryption architectures — API, Plug-in, and TDE — used to protect sensitive data at rest.

Diffie-Hellman Key Exchange

The algorithm that solved the key distribution problem by deriving a shared secret over a public channel using the discrete logarithm …

Digital Envelope

The hybrid mechanism that secures encryption-key transmission by encrypting a session key with the recipient's public key.

Digital Signature

The core mechanism for integrity and non-repudiation, in which a sender encrypts a document hash with their private key.

Hash Function

The one-way function that fingerprints data by converting an arbitrary-length message into a fixed-length digest.

Homomorphic Encryption

A cryptographic scheme that enables direct computation on encrypted data without ever decrypting it.

Hybrid Cryptography

An integrated cryptographic scheme that combines the speed of symmetric-key encryption with the secure key exchange of asymmetric-key …

PKI (Public Key Infrastructure)

The hierarchical chain of trust that certifies the identity, issuance, storage, distribution, and revocation of public keys.

Post-Quantum Cryptography (PQC)

Next-generation cryptographic algorithms designed around mathematical problems that remain hard even for quantum computers.

Quantum Security

An overview of PQC, QKD, and lattice-based cryptography, the technologies that defend against the quantum computing threat.

RSA Encryption

The number-theory-based trust scheme built on the fact that multiplying two primes is easy but factoring the product back out is hard.

Sign-then-Encrypt

A scheme that signs the plaintext first, then encrypts the entire package to secure both authentication and confidentiality.

Symmetric-Key Cryptography

The core mechanism for high-speed data protection, built on a single secret key shared by sender and receiver.

CIA Triad

The three core elements of information security — confidentiality, integrity, and availability — and how they trade off against each other.

Endpoint Security

The host-based security strategy that detects, blocks, and responds to threats once they reach an end-user device, at the front line beyond …

Systematic Server Defense Strategy

A layered defense strategy that hardens servers and applies secure-OS access control to protect confidentiality, integrity, and …