Editing Security (section)

==Recurring concepts==
Certain concepts recur throughout different fields of security:
* [[Access control]] – the selective restriction of access to a place or other resource.
* [[Assurance services|Assurance]] – an expression of confidence that a security measure will perform as expected.
* [[Authorization]] – the function of specifying access rights/privileges to resources related to information security and computer security in general and to access control in particular.
* [[Cipher]] – an algorithm that defines a set of steps to encrypt or decrypt information so that it is incomprehensible.
* [[Countermeasure]] – a means of preventing an act or system from having its intended effect.
* [[Defense in depth]] – a school of thought holding that a wider range of security measures will enhance security.
* [[Exploit (computer security)|Exploit]] (noun) – a means of capitalizing on a vulnerability in a security system (usually a cyber-security system).
* [[Identity management]] – enables the right individuals to access the right resources at the right times and for the right reasons.
* [[Password]] – secret data, typically a string of characters, usually used to confirm a user's identity.
* [[Resilience (organizational)|Resilience]] – the degree to which a person, community, nation or system is able to resist adverse external forces.
* [[Risk]] – a possible event which could lead to damage, harm, or loss.
* [[Security management]] – identification of an organization's assets (including people, buildings, machines, systems and information assets), followed by the development, documentation, and implementation of policies and procedures for protecting these assets.
* [[Security seal]]
* [[Threat]] – a potential source of harm.
* [[Vulnerability]] – the degree to which something may be changed (usually in an unwanted manner) by external forces.