Glossary terms starting with N

Terms

NATInformation Security

Network Address Translation, a method of remapping IP addresses to enable multiple devices to share a single public IP address, providing a layer of obscurity.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

NERC CIPCompliance and Regulatory

North American Electric Reliability Corporation Critical Infrastructure Protection standards that establish cybersecurity requirements for the bulk electric system.Used in: NIST SP 800-53 Rev 5, ISO 27001:2022, NIST Cybersecurity Framework 2.0

NISTCompliance and Regulatory

The National Institute of Standards and Technology, a US agency that develops cybersecurity standards, guidelines, and frameworks used globally.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev 5

NIST 800-171Compliance and Regulatory

NIST Special Publication providing requirements for protecting Controlled Unclassified Information in non-federal systems and organizations.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev 5

NIST AI Risk Management FrameworkAI & Technology

A voluntary framework published by NIST that provides guidance for managing risks associated with AI systems. The AI RMF is organised around four core functions: Govern, Map, Measure, and Manage.Used in: NIST Cybersecurity Framework 2.0, EU AI Act

NIST CSF (Cybersecurity Framework)Information Security

A voluntary framework by the US National Institute of Standards and Technology. Version 2.0 includes six functions: Govern, Identify, Protect, Detect, Respond, and Recover.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022, CIS Controls v8

NIST Cybersecurity FrameworkCompliance

A voluntary framework published by the National Institute of Standards and Technology that provides a common language for understanding, managing, and expressing cybersecurity risk. The current version (CSF 2.0) includes six functions: Govern, Identify, Protect, Detect, Respond, and Recover.Used in: NIST Cybersecurity Framework 2.0

NIST Privacy FrameworkPrivacy

A voluntary tool developed by NIST to help organisations identify and manage privacy risk through an approach that is flexible and outcome-based. The Privacy Framework complements the NIST Cybersecurity Framework.Used in: NIST Cybersecurity Framework 2.0, GDPR, ISO 27001:2022

NIST Risk Management FrameworkRisk Management

A structured process for integrating security and risk management activities into the system development lifecycle. The RMF provides a disciplined approach through six steps: Categorise, Select, Implement, Assess, Authorise, and Monitor.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022

NIST SP 800-171Compliance

A NIST publication that provides recommended security requirements for protecting Controlled Unclassified Information (CUI) in non-federal systems and organisations. Compliance with 800-171 is required for US defence contractors.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0

NIST SP 800-53Information Security

A comprehensive catalog of security and privacy controls for federal information systems published by NIST, widely adopted across public and private sectors.Used in: GDPR, ISO 27001:2022

NYDFS Cybersecurity RegulationCompliance

New York State Department of Financial Services regulation (23 NYCRR 500) that establishes cybersecurity requirements for financial services companies. It requires risk assessments, CISOs, penetration testing, and incident response plans.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022, CIS Controls v8

National Vulnerability DatabaseInformation Security

A U.S. government repository of standards-based vulnerability management data, including CVE identifiers, severity scores, and remediation guidance.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

Natural Language ProcessingAI and Technology

AI technology that enables computers to understand, interpret, and generate human language, powering applications like chatbots and text analysis.Used in: EU AI Act

Natural Language Processing (NLP)AI & Technology

A branch of artificial intelligence that deals with the interaction between computers and humans using natural language. NLP enables machines to understand, interpret, and generate human language.Used in: EU AI Act

Need to KnowInformation Security

A security principle that restricts access to information to only those individuals who require it to perform their specific job duties.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Net RiskRisk Management

The remaining level of risk after controls and mitigation measures have been applied, also known as residual risk.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022

NetFlowInformation Security

A network protocol for collecting metadata about IP traffic flows passing through network devices, used for security monitoring and traffic analysis.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

Network Access ControlInformation Security

Security solutions that enforce policies to control which devices and users can access a network, based on identity, device health, and compliance status.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, HIPAA Security Rule

Network Access Control (NAC)Information Security

A security approach that enforces policy compliance on devices before granting them access to the network. NAC verifies that connecting devices meet security requirements such as current patches and active anti-malware.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, NIST Cybersecurity Framework 2.0

Network ArchitectureInformation Security

The design and structure of a computer network including topology, protocols, and components, with security considerations integrated throughout.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network BaselineInformation Security

A documented profile of normal network behavior including traffic patterns, bandwidth usage, and protocol distribution used to detect anomalies.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network Detection and ResponseInformation Security

Security solutions that monitor network traffic patterns to detect suspicious activity, investigate threats, and automate response actions across the network.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network EncryptionInformation Security

The application of cryptographic techniques to protect data as it travels across network connections from interception and tampering.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5

Network ForensicsInformation Security

The capture, recording, and analysis of network traffic to detect intrusions, investigate incidents, and gather evidence of malicious network activity.Used in: NIST SP 800-53 Rev 5, CIS Controls v8

Network MonitoringInformation Security

The continuous observation of network performance and security using tools that track traffic, detect anomalies, and alert on potential threats.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

Network Penetration TestingInformation Security

Authorized security testing focused on network infrastructure to identify vulnerabilities in network devices, services, and configurations.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, NIST Cybersecurity Framework 2.0

Network PolicyInformation Security

Rules and guidelines governing the configuration, use, and security of an organization's network infrastructure and resources.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network Security ArchitectureInformation Security

The design of network security controls and their placement within the network topology to protect data and systems from threats.Used in: NIST SP 800-53 Rev 5, CIS Controls v8

Network SegmentationInformation Security

The practice of dividing a computer network into smaller subnetworks to improve security and performance. Segmentation limits the blast radius of security incidents and restricts access to sensitive resources.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network TapInformation Security

A hardware device that provides access to network traffic for monitoring, analysis, and security purposes without disrupting normal network operations.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

Network Traffic AnalysisInformation Security

The process of intercepting, recording, and analyzing network communication patterns to identify security threats, performance issues, and anomalous behavior.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network Traffic Analysis (NTA)Information Security

A method of monitoring network availability and activity to identify anomalies, including security threats and operational issues. NTA uses machine learning and behavioural analysis to detect threats that evade traditional security tools.Used in: EU AI Act, NIST Cybersecurity Framework 2.0, CIS Controls v8

Network and Information Security DirectiveCompliance and Regulatory

EU directive (NIS2) establishing cybersecurity requirements and incident reporting obligations for essential and important service providers.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022

Neurodiversity in SecurityInformation Security

The consideration of diverse cognitive perspectives in security team composition and security awareness programs to improve organizational defense.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Next-Generation FirewallInformation Security

An advanced firewall that combines traditional packet filtering with application awareness, intrusion prevention, deep packet inspection, and threat intelligence.Used in: NIST SP 800-53 Rev 5, CIS Controls v8

Non-ComplianceCompliance and Regulatory

The failure to adhere to applicable laws, regulations, standards, or organizational policies, potentially resulting in penalties or enforcement actions.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev 5

Non-RepudiationInformation Security

A security property that ensures a party cannot deny having performed an action, such as sending a message or authorising a transaction. Non-repudiation is typically achieved through digital signatures and audit trails.Used in: ISO 27001:2022, PCI DSS v4.0

NonconformityInformation Security

A failure to fulfil a requirement. In ISO management systems, nonconformities found during audits must be addressed through corrective actions to eliminate the root cause.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Nonconformity ReportAudit and Assurance

A formal document that describes a finding of non-compliance with a requirement, including evidence and the affected requirement.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0

North-South TrafficInformation Security

Network traffic that flows between an organization's internal network and external networks such as the internet, crossing the network perimeter.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Notice and ChoicePrivacy and Data Protection

A privacy framework where organizations provide clear notice about data practices and give individuals meaningful choices about how their data is used.Used in: GDPR, ISO 27001:2022

Nuclear SecurityInformation Security

Regulatory requirements and security measures for protecting nuclear facilities, materials, and information from theft, sabotage, and cyber threats.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8