CISSP Practice

The sub-component that provides the capability to customize the component for various users. The interface profile can specify the business rules and workflow that are to be executed when the component is initialized or it can be tailored to suit different deployment architectures and business rules. The profile can specify the architectural pattern that complements the service component.

Inter-file analysis

Analysis of code residing in different files that have procedural, data, or other interdependencies.

Internal border gateway protocol (IBGP)

A border gateway protocol operation communicating routing information within an autonomous system.

Internal control

A process within an organization designed to provide reasonable assurance regarding the achievement of the following primary objectives (1) the reliability and integrity of information, (2) compliance with policies, plans, procedures, laws, regulations, and contracts, (3) the safeguarding of assets, (4) the economical and efficient use of resources, and (5) the accomplishment of established objectives and goals for operations and programs.

Internal network

A network where (1) the establishment, maintenance, and provisioning of security controls are under the direct control of organizational employees or contractors or (2) cryptographic encapsulation or similar security technology implemented between organization-controlled endpoints provides the same effect. An internal network is typically organization-owned, yet may be organization-controlled, while not being organization-owned.

Internal security audit

A security audit conducted by personnel responsible to the management of the organization being audited.

Internal security controls

Hardware, firmware, and software features within an information system that restrict access to resources (hardware, software, and data) only to authorized subjects (persons, programs, processes, or devices). Examples of internal security controls are encryption, digital signatures, digital certificates, and split knowledge. The security controls can be classified as (1) supporting, preventive, detective, corrective, and recovery controls, (2) management, technical, operational, and compensating controls, and (3) common controls, system-specific, and hybrid controls.

Internal testing (security)

It is similar to external (security) testing except that the testers are on the organization’s internal network behind the security perimeter.

Internet

The Internet is the single, interconnected, worldwide system of commercial, governmental educational, and other computer networks that share (1) the protocol suites and (2) the name and address spaces. The Internet is a decentralized, global network of computers (Internet hosts), linked by the use of common communications protocols (TCP/IP). The Internet allows users worldwide to exchange messages, data, and images. It is worldwide “network of networks” that uses the TCP/IP protocol suite for communications.

Internet-based EDI

Web EDI that operates on the Internet, and is widely accessible to most companies, including small-to-medium enterprises.

Internet control message protocol (ICMP)

A message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP is used by a device, often a router, to report and acquire a wide-range of communications-related information.

Internet key exchange (IKE) protocol

Protocol used to negotiate, create, and manage security associations (SAs).

Internet message access protocol (IMAP)

A mailbox access protocol defined by IETF RFC 3501. IMAP is one of the most commonly used mailbox access protocols, and offers a much wider command set than post office protocol (POP). It is a method of communication used to read electronic messages stored in a remote server.

Internet protocol (IP)

The network-layer protocol in the TCP/IP stack used in the Internet. The IP is a connectionless protocol that fits well with the connectionless Ethernet protocol. However, the IP does not fit well with the connection-oriented ATM network.

Internet protocol (IP) address

An IP address is a unique number for a computer that is used to determine where messages transmitted on the Internet should be delivered. The IP address is analogous to a house number for ordinary postal mail.

Internet Protocol security (IPsec)