Glossary terms starting with U

Terms

URL FilteringInformation Security

A security control that blocks or allows access to websites based on their URL classification, preventing users from visiting malicious or policy-violating sites.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Unified Compliance FrameworkCompliance and Regulatory

An approach that maps and consolidates requirements from multiple compliance standards into a single integrated control set.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev 5

Unified Compliance Framework (UCF)Compliance

A comprehensive database that maps and harmonises controls across thousands of regulations and standards worldwide. The UCF enables organisations to identify common controls and reduce compliance duplication.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0

Unified Threat ManagementInformation Security

An integrated security appliance that combines multiple security functions including firewall, antivirus, intrusion prevention, and content filtering in a single platform.Used in: NIST SP 800-53 Rev 5, CIS Controls v8, NIST Cybersecurity Framework 2.0

Unified Threat Management (UTM)Information Security

A comprehensive security solution that consolidates multiple security functions into a single appliance, including firewall, intrusion detection/prevention, anti-malware, content filtering, and VPN capabilities.Used in: NIST SP 800-53 Rev 5, CIS Controls v8, NIST Cybersecurity Framework 2.0

Uninterruptible Power SupplyInformation Security

A device that provides emergency power to equipment when the main power source fails, allowing orderly shutdown or continued operation.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

Universal Second FactorInformation Security

A hardware-based authentication standard using physical security keys that provide strong two-factor authentication resistant to phishing attacks.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, NIST Cybersecurity Framework 2.0

Use CaseInformation Security

A specific security monitoring scenario that defines the events, conditions, and response actions for detecting a particular type of threat or violation.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

User Access ReviewInformation Security

A periodic examination of user access rights across systems to verify that permissions are appropriate and no unauthorized access exists.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5

User Behaviour Analytics (UBA)Information Security

Security technology that uses machine learning and statistical analysis to detect anomalous user behaviour that may indicate insider threats, compromised accounts, or other security risks.Used in: EU AI Act, ISO 27001:2022, NIST Cybersecurity Framework 2.0

User DeprovisioningInformation Security

The process of revoking all access rights and disabling accounts when a user leaves the organization or no longer requires access.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

User ProvisioningInformation Security

The process of creating, managing, and deactivating user accounts and access rights across IT systems according to organizational policies and role requirements.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, CIS Controls v8

User and Entity Behavior AnalyticsInformation Security

Security solutions that use machine learning to establish baseline behavior patterns for users and entities, detecting anomalies that may indicate threats.Used in: EU AI Act, ISO 27001:2022, NIST Cybersecurity Framework 2.0

Utilities ComplianceCompliance and Regulatory

Regulatory requirements for utility companies including cybersecurity standards, environmental regulations, and service reliability mandates.Used in: ISO 27001:2022, NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev 5