This lexicon comprises a set of approximately 50 core terms related to cyber security and cyber resilience in the financial sector. It is intended to support the work of the FSB, standard-setting bodies, authorities and private sector participants, e.g. financial institutions and international standards organisations, to address financial sector cyber resilience. The lexicon includes the following terms:

  • Access Control
  • Accountability
  • Advanced Persistent Threat (APT)
  • Asset
  • Authenticity
  • Availability
  • Campaign
  • Compromise
  • Confidentiality
  • Course of Action (CoA)
  • Cyber
  • Cyber Advisory
  • Cyber Alert
  • Cyber Event
  • Cyber Incident
  • Cyber Incident Response Plan
  • Cyber Resilience
  • Cyber Risk
  • Cyber Security
  • Cyber Threat
  • Data Breach
  • Defence-in-Depth
  • Denial of Service (DoS)
  • Detect (function)
  • Distributed Denial of Service (DDoS)
  • Exploit
  • Identify (function)
  • Identity and Access Management (IAM)
  • Incident Response Team (IRT)
  • Indicators of Compromise (IoCs)
  • Information Sharing
  • Information System
  • Integrity
  • Malware
  • Multi-Factor Authentication
  • Non-repudiation
  • Patch Management
  • Penetration Testing
  • Protect (function)
  • Recover (function)
  • Reliability
  • Respond (function)
  • Situational Awareness
  • Social Engineering
  • Tactics, Techniques and Procedures (TTPs)
  • Threat Actor
  • Threat Assessment
  • Threat Intelligence
  • Threat-Led Penetration Testing (TLPT)
  • Threat Vector
  • Traffic Light Protocol (TLP)
  • Verification
  • Vulnerability
  • Vulnerability Assessment