Using this glossary
Search the Resources collection for any term, or use the on-page contents to jump to its definition. These are general explanations, not promises that every related capability is included in your plan. Terms that sound similar can have different security or operational meanings.
IT Operations
The ongoing work of running, maintaining and supporting an organisation’s technology and its operational processes.
Digital Operations
Coordinated processes supported by digital systems, information and actions; broader than simply digitising a form.
Workplace Operations
The processes connecting people, equipment, applications, purchasing and responsibilities in a working environment.
SaaS
Software as a service: an application delivered as a hosted service, commonly with a subscription.
SaaS Management
Managing application ownership, subscriptions, assignments, access and lifecycle decisions.
Shadow IT
Technology used outside the organisation’s established approval or management processes; not necessarily malicious.
Identity Provider
A service that maintains identities and authenticates users for other services, subject to configured trust.
Authentication
Establishing who or what is requesting access using an accepted identity mechanism.
Authorisation
Deciding whether an authenticated identity may access a record or perform an action.
Single Sign-On
Using an identity provider to sign in to multiple relying applications; not proof of identical access everywhere.
Multi-Factor Authentication
Authentication requiring factors from distinct categories, such as knowledge and possession, rather than two passwords.
Privileged Access
Elevated permissions enabling sensitive administration; should be restricted, justified and reviewed.
Endpoint
A device such as a laptop or phone interacting with an organisation’s systems.
Endpoint Management
Managing device configuration, inventory, policies and supported lifecycle actions.
MDM
Mobile device management: administration of enrolled devices through supported management mechanisms.
UEM
Unified endpoint management: a management approach across multiple endpoint types; coverage still varies by platform.
IT Asset Management
Managing technology assets, ownership, assignments, costs and lifecycle from acquisition to disposal.
CMDB
A configuration management database recording configuration items and relationships; completeness requires maintenance.
HRIS
A human resources information system holding employment-related records and processes.
API
A defined interface through which software requests data or actions; access is governed by its permissions and contract.
Integration
A configured data or action connection between systems; read support does not imply write support.
Tenant
A customer or workspace boundary used to scope identities, records and authorisation in a shared service.
Multi-Tenancy
Serving multiple tenants within a shared service while enforcing appropriate separation; not automatically an MSP console.
Role-Based Access Control
Granting permissions through defined roles; effective checks must also protect server-side data and actions.
Row-Level Security
Database policies restricting which rows a caller may read or change under its identity and permissions.
Audit Trail
A chronological record of relevant actors, events and changes for accountability and review; coverage must be checked.
Immutable Evidence
Evidence protected against specified subsequent mutations. It does not guarantee original accuracy or make every export unalterable.
WORM Storage
Write once, read many: storage or record protections preventing specified rewriting. Scope and retention limitations matter.
HMAC
A keyed message authentication code used to check integrity and authenticity between parties sharing a secret; not a public-key signature.
GDPR
The EU General Data Protection Regulation governing applicable personal-data processing and responsibilities.
ISO 27001
A standard for information security management systems; software use alone does not establish certification.
SOC 2
An independent attestation report on controls relevant to selected Trust Services Criteria; not the same as ISO certification.
Data Retention
Rules governing how long categories of information are retained, including legal, operational and evidence requirements.
Joiner-Mover-Leaver
Lifecycle processes for joining, role changes and leaving, spanning access, equipment and ownership.
Licence Reconciliation
Comparing purchased entitlements, assignments and reliable usage information; an unused assignment is not an automatic refund.
Data Provenance
Information about a record’s source, transformations and observation time, supporting interpretation and traceability.
Operational Graph
A relationship-oriented representation of operational entities and context. Displayed links require trustworthy source data.