Glossary terms starting with Z

Terms

Zero Knowledge ProofInformation Security

A cryptographic method that allows one party to prove they know a value without revealing the value itself, useful for privacy-preserving authentication.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, GDPR

Zero TrustInformation Security

A security model that assumes no user, device, or network should be trusted by default, even those inside the corporate perimeter. Requires continuous verification for every access request.Used in: NIST Cybersecurity Framework 2.0, NIST SP 800-53 Rev 5

Zero Trust ArchitectureInformation Security

A security model that requires strict identity verification for every person and device trying to access resources, regardless of network location.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, NIST Cybersecurity Framework 2.0

Zero Trust Network AccessInformation Security

A security approach that provides secure remote access to applications based on defined access control policies without placing users on the network.Used in: ISO 27001:2022, NIST SP 800-53 Rev 5, NIST Cybersecurity Framework 2.0

Zero-Day DiscoveryInformation Security

The identification of a previously unknown software vulnerability that has not been publicly disclosed and for which no patch exists.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

Zero-Day ExploitInformation Security

An attack that targets a previously unknown software vulnerability for which no patch or fix is available, making it particularly dangerous and difficult to defend against.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8

Zero-Day VulnerabilityInformation Security

A software security flaw that is unknown to the vendor and for which no patch or fix is available. Zero-day vulnerabilities are particularly dangerous because they can be exploited before the vendor has an opportunity to address them.Used in: NIST Cybersecurity Framework 2.0, CIS Controls v8, ISO 27001:2022