Glossary terms starting with Q
11 compliance, governance, risk and security terms, each with a short definition. Open a term for its full definition and the requirement text of the standards that name it.
Terms
- Qualified Security AssessorCompliance and Regulatory
- An organization certified by the PCI Security Standards Council to perform PCI DSS compliance assessments of merchants and service providers.Used in: PCI DSS v4.0, ISO 27001:2022, NIST Cybersecurity Framework 2.0
- Qualified Security Assessor (QSA)Audit
- An individual certified by the PCI Security Standards Council to perform PCI DSS assessments. QSAs are authorised to evaluate and attest to an organisation's compliance with the PCI DSS requirements.Used in: PCI DSS v4.0
- Qualitative Risk AnalysisRisk Management
- A risk assessment approach that uses descriptive scales such as high, medium, and low to evaluate and prioritize risks based on expert judgment.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022
- Quality AuditAudit and Assurance
- An examination of a quality management system to verify it meets defined standards and effectively controls processes and outputs.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0
- Quality ManagementGovernance
- A systematic approach to ensuring that an organization's products and services consistently meet customer requirements and regulatory standards.Used in: COBIT 2019, ISO 27001:2022, NIST Cybersecurity Framework 2.0
- Quality Management SystemGovernance
- A formalized system that documents processes, procedures, and responsibilities for achieving quality policies and objectives.Used in: COBIT 2019, ISO 27001:2022, NIST Cybersecurity Framework 2.0
- Quantitative Risk AnalysisRisk Management
- A risk analysis approach that assigns numerical values to the probability and impact of risks to calculate expected loss and support cost-benefit decisions.Used in: NIST Cybersecurity Framework 2.0, ISO 27001:2022
- Quantum Computing RiskAI and Technology
- The potential threat that quantum computers pose to current cryptographic algorithms, requiring migration to quantum-resistant encryption methods.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5
- Quantum Key DistributionInformation Security
- A method of secure communication that uses quantum mechanics principles to create and distribute cryptographic keys that cannot be intercepted without detection.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5
- Quantum ResistanceInformation Security
- The property of cryptographic algorithms that remain secure against attacks by both classical and quantum computers.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5
- Quid Pro QuoInformation Security
- A social engineering attack where the attacker offers a service or benefit in exchange for information or access from the victim.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8