Platform Pricing GRC Hub

Sign in Start now

GRC Hub/GRC Glossary

GRC Glossary

Technical and regulatory definitions across GRC standards

All types A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Machine Learning Governance

Policies and processes for managing machine learning models.

Major Nonconformity

Serious noncompliance that may have significant consequences.

Malware Analysis

Study of malicious software to uncover how it works and how to mitigate it.

Malware Detection

Identification of malicious code or behaviors in systems and networks.

Managed Detection and Response (MDR)

Outsourced service that monitors and responds to threats on behalf of the organization.

Managed Information Security

Security approach where specialized services manage controls and monitoring.

Management Audit

Review of the effectiveness and governance of the organization’s leadership.

Management Oversight

Review and control of operations by management.

Management Response

Formal management response to findings and recommendations.

Management Review

Periodic review by management of performance, risks, and controls.

Management System

Set of processes and resources to manage risks, quality, and compliance.

Mandatory Control

Control that must exist and operate as a legal or regulatory requirement.

Mandatory Requirement

Requirement that must be met by legal or regulatory mandate.

Manual Control

Control executed through human intervention and direct review.

Market Risk

Risk of losses from fluctuations in prices, rates, or market conditions.

Master Data Management (MDM)

Practices for keeping unique, consistent versions of key data.

Material Weakness

Control weakness that could result in a material misstatement or significant issue.

Maximum Acceptable Outage (MAO)

Maximum duration of an acceptable outage before critical impacts occur.

Maximum Tolerable Downtime (MTD)

Maximum period a function can be inactive without causing serious harm.

Metadata Management

Practices to collect, govern, and reuse information about data.

Minimum Control Set

Minimum compulsory level of controls to cover essential risks.

Minor Nonconformity

Minor noncompliance that does not substantially affect the system.

MITRE ATT&CK Framework

Knowledge base of cyber adversary behaviors and techniques.

MITRE D3FEND

Catalog of defensive countermeasures and techniques for cyber environments.

Mobile Security

Protection of mobile devices and apps against specific threats.

Model Risk

Risk due to errors or incorrect assumptions in models.

Model Risk Management

Practices to mitigate risks from predictive models and algorithms.

Monetary Unit Sampling

Sampling technique based on the probability of each monetary unit.

Monte Carlo Simulation

Statistical simulation technique applied to risk analysis.

Multi-Factor Authentication (MFA)

Security method that requires more than one form of identity proof.

Multi-Year Audit Plan

Long-term sequence of audit engagements.