Glossary

Term	Definition
CASB	Cloud Access Security Broker — enforces security policy between users and cloud services.
CISA ZTMM	Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model.
DLP	Data Loss Prevention — tooling that detects and blocks unauthorized data exfiltration.
EDR	Endpoint Detection and Response.
IdP	Identity Provider — issues and manages digital identities (e.g., Entra ID, Okta).
MDM	Mobile Device Management.
MFA	Multi-Factor Authentication.
PDP	Policy Decision Point — evaluates access requests against policy and context.
PEP	Policy Enforcement Point — enforces the PDP’s decision at the resource.
RASP	Runtime Application Self-Protection.
SASE	Secure Access Service Edge — converges networking and security into a cloud-delivered service.
SIEM	Security Information and Event Management.
SOAR	Security Orchestration, Automation and Response.
TPM	Trusted Platform Module — hardware root of trust used for device attestation.
UEBA	User and Entity Behavior Analytics.
ZT	Zero Trust.
ZTA	Zero Trust Architecture.
ZTNA	Zero Trust Network Access.

Missing a term? See CONTRIBUTING.md.