Systematic evaluation and examination of data Computer-based calculation exposed through logical or physical means, can be extremely specialized services A collection of data containers and maintenance types Set of abilities or services that can be used directly by the developer Combining or incorporating processes and information from multiple entities Subset of artificial intelligence that deals with voice, image, and language processing Internet of Things, services that support distributed internet connected devices Services support the management and application development for mobile devices Network related services Directing and maintaining runtime processing of people, resources, and processes General services to provide integrity, availability, and confidentiality Services to maintain, accessed, and back up data A database where the main elements being managed are tables/rows and ways those objects are connected A database where the main element being managed is a collection of paired data items A database where the main element being managed is document oriented Ability to hold and distribute transactional data to increase performance or reduce backend processing Movement of data from one management platform, environment, or technology to another Compute processing provided using software Specialized form of virtualization that allows for ease of deployment and scaling Automated coordination of multiple tasks potentially across domains or platforms Functional level processing is implemented without direct ties to platform, or hardware Performing a series of collected operation as a group A database where the main element being managed is a object, whether binary or in some other format To logically or physically map a copy of data in its current state Storage optimized for physical or virtual compute devices (hard drives) Moving data to a less frequently accessed position, or medium Large dataset transfer or handling, may use specialized hardware or media Storage used for restoration of business services after a disaster event Network or network subset based on configuration or software2 Domain Name Services, a directory and system for locating resources by name or address Content Delivery Network, large scale distribution or global distribution of video, files, or static web content Infrastructure service to distribute processing across resources, may also be used to provide availability of resources A communication path set aside for a single purpose or by single users Virtual Private Network, cryptographically secured communication between two points over a public network4 A large source of data collection from many sources Large scale and parallel application of data processing and analytics Systematic evaluation and examination of data Analyzing results through sight, using diagrams, pictures, or graphics Highly scalable searching using artificial intelligence/machine learning to provide better results A subset of artificial Intelligence that deals with learning through repetition or exposure Determining context, language, and interpretation of vocal requests using artificial intelligence or machine learning Services to interpret speech process it using compute resources Identifying or interpreting images through the use of a subset of artificial intelligence The ability to extend computing service to the device High volume event collection and processing from a large number of distributed devices Specific development processes for IoT devices Observing the qualities of key resources and taking actions on those qualities if necessary Managed installation or transfer of data or a system The determination and statement of how well directives are being followed. Inventory and determination of operational settings applied to hardware or software Tools and services for rapid creation of mobile applications Methodologies and tools to test implementation for functional and non-functional requirements Directing configuration and use of mobile devices Systematic evaluation and examination of data Positive identification of the claim that an entity is who they state they are. Determining if an entity has the requesting right to an action for a resource; if they have permission. Protection processes and technologies for data at rest, data in transit, and data being processed. Set of services to provide integrity, and confidentiality to data Database that may contain identities, or users and related Undefined Detection and prevention of traffic flow based on packets info, protocol, address, and rules Undefined E-mail services that can be readily used by developers Communication and event handling tools that can be integrated with applications and systems Connecting multiple steps or processes together to complete a larger unit of work Registration, deployment, scaling, and security for APIs Methodologies and tools to test implementation for functional and non-functional requirements Process that drive creating and testing solutions for eventual deployment Undefined Information security protection and assurance. Security that defines and protects an area and the entry to that area Detection and prevention of traffic flow based on packets info, protocol, address, and rules Virtual Private Network, cryptographically secured communication between two points over a public network4 Network Access Control, rules based authentication and authorization for devices on a network An agent or function that sits in front of an entity and represents it adding functionality to the represented entity Analysis of files, or containers whether at rest or in motion for presence of malicious intent. Inspecting content to determine if an executable has malicious intent directly or indirectly by modifying local systems. Inspecting content, and sites to determine if they promote or contain unwanted or unsolicited e-mails or requests. Protection processes and technologies for data at rest, data in transit, and data being processed. Data Loss and Prevention (or protection), system or process to monitor and protect unauthorized data from the protected areas Whitelisting or blacklisting resources, or limiting resources based on rules Determine or identify the occurrence of a cybersecurity event Network Intrusion Protection and Prevention Host-based intrusion detection and/or protection system Analyzing behavior and patterns to determine if any action or events falls outside of what is normally expected. A centralized system for determining and reacting to security events Tracking and maintaining data over a period of time, event tracking Wireless Intrusion Detection, malicious intent detection for wireless communication People, processes, and technology to identify, detect, and respond to exposure or potential exposure Processes and technologies to detect, remedy, or prevent exposure to being harmed Inventory and check for proper software and hardware including configuration. Process of controlled information collection criminal evidence Hardware, software, and device management including configuration, control, and inventory Gathering and applying information to reduce or prevent security events Updating software or operating systems to remove vulnerabilities or reduce their likelihood Identity and Access Capability Life-cycle maintenance of identities and permissions. Authorizations or permissions assigned to an entity Electronic record representing an entity that is used for authentication and authorization Creating accounts, authorizations, assigning permissions and resources based on workflows and rules The definition, creation, and maintenance of security models, groups, roles, and other access control constructs. Database that may contain identities, or users and related Keeping the changes the same for entities across multiple IAM repositories Runtime aspects of authentication, federation, and authorization. Determining if an entity has the requesting right to an action for a resource; if they have permission. Positive identification of the claim that an entity is who they state they are. Use a trust between parties to provide authentication and authorization The ability to determine assurance levels or risk levels at runtime then adjust to levels. Single Sign On, session based authentication that can span multiple systems without further interaction from the user Process of directing and controlling IAM services Process of controlled information collection criminal evidence in the IAM space Management of people and processes that have higher than normal permissions Determining if the permissions granted to an entity are valid and follow directives such as Least Privilege. Determining and monitoring usage of cloud services along with the associated access control. General methods to protect data integrity or confidentiality. Set of services to provide integrity, and confidentiality to data Public Key Infrastructure Service to provide a method for authenticity and integrity for messages or digital documents Protection of digital materials using cryptographic controls Cryptographic secret management including symmetric and asymmetric keys The determination and statement of how well directives are being followed. Keeping data, mainly an individuals, from unauthorized access Business Continuity and Disaster Recovery. Process of directing and controlling security services The program, processes, or technologies that provide the required level of security related confidence. A malicious or suspicious event Horizontal education that is sometimes mandatory A directive driving behavior supported by management, can be administrative or technical Creating a plan for individual areas or departments to meet overall goals or objectives Identity and Access Management Information Security Model using Archi and Archimate This model is currently the property of Ron Parker scmunk@secretchipmunk.com @scmunk 2018