Glossary

109 terms

ADT messages Healthcare

Admission, discharge and transfer

Admission, discharge and transfer messages: the HL7 messages a hospital’s systems send when a patient is admitted, moved or discharged, which keep other clinical and administrative systems up to date.

Comes up in: Hospital Operations & Capacity, Regional Health Systems & Hospitals

AI governance Data & AI

The policies, roles and controls an organization uses to decide which AI systems it builds or buys, how they are tested and monitored, and who is accountable for their outcomes.

Comes up in: Data Trust & Governance Labs, Newsroom, Business Units

ALCOA Healthcare

A set of data integrity principles used in regulated life sciences work: records should be attributable, legible, contemporaneous, original and accurate. Extended versions add further principles such as complete and enduring.

Comes up in: Pharma & Biotech, Life Sciences & Research

AML and BSA Financial services

Anti-money laundering; Bank Secrecy Act

The Bank Secrecy Act is the main US anti-money-laundering law. It requires banks and other financial institutions to keep certain records, file reports such as suspicious activity reports, and run an anti-money-laundering (AML) compliance program.

Comes up in: Finance, Credit Unions & Regional Banks, Regional & Community Banks

APRA CPS 234 Security & privacy

A prudential standard from the Australian Prudential Regulation Authority that requires the banks, insurers and superannuation funds it regulates to maintain information security in line with their threats and vulnerabilities, including controls, testing and incident notification.

Comes up in: Trust Center, Newsroom

ATO and continuous ATO Government

Authority to operate

An authority to operate is the formal decision by a government authorizing official that the security risk of operating an information system is acceptable. A continuous ATO keeps that authorization current through ongoing monitoring rather than periodic reassessment.

Comes up in: Defense & Intelligence, Federal Government, Homeland Security & Justice

BAA Healthcare

Business associate agreement

A business associate agreement: the contract HIPAA requires between a covered entity, such as a hospital or health plan, and a vendor that creates, receives, keeps or transmits protected health information on its behalf.

Comes up in: Trust Center, Solutions Catalog, Suppliers & Vendors

Broker-dealer Financial services

A firm that buys and sells securities for its customers (as a broker) or for its own account (as a dealer). In the US, broker-dealers register with the SEC and are members of FINRA, which together set their supervision and record-keeping obligations.

Comes up in: Finance, Broker-Dealers & Wealth Management, Independent Broker-Dealers

CAD Government

Computer-aided dispatch

Computer-aided dispatch: the system emergency communications centers use to log calls for service, track units and dispatch responders.

Comes up in: Public Safety & Justice, Justice & Public Safety

CCPA Security & privacy

California Consumer Privacy Act

The California Consumer Privacy Act, as amended, which gives California residents rights over the personal information businesses collect about them, such as the rights to know, delete and opt out of its sale or sharing.

Comes up in: Data Trust & Governance Labs

CCWIS Government

Comprehensive Child Welfare Information System

Comprehensive Child Welfare Information System: the federal model for the case management systems states and tribes use to run child welfare programs.

Comes up in: Health & Human Services, State Government

CECL Financial services

Current Expected Credit Losses

An accounting standard from the Financial Accounting Standards Board that requires lenders to estimate the credit losses they expect over the whole life of a loan or other financial asset, rather than waiting until a loss is probable.

Comes up in: Data & AI, Solutions Catalog

CFPB Financial services

Consumer Financial Protection Bureau

The US federal agency that regulates consumer financial products and services, such as mortgages, credit cards and consumer loans, and enforces federal consumer financial protection laws.

Comes up in: Specialty Lenders & FinTech, Finance, Credit Unions

CI/CD Operations & resilience

Continuous integration and continuous delivery

Continuous integration and continuous delivery: automatically building, testing and preparing every code change for release, so software can be shipped frequently and reliably.

Comes up in: Specialty Lenders & FinTech, Defense & Intelligence, Digital & Direct Banking

CJIS Government

Criminal Justice Information Services

The FBI’s Criminal Justice Information Services Security Policy sets the security requirements for agencies and vendors that access, store or transmit criminal justice information.

Comes up in: Government, Homeland Security & Justice, Public Safety & Justice

CMMC Government

Cybersecurity Maturity Model Certification

The Cybersecurity Maturity Model Certification program of the US Department of Defense, which verifies that defense contractors protect federal contract information and controlled unclassified information, largely against NIST SP 800-171.

Comes up in: Defense & Intelligence, Academic Medical Centers & Institutes

CMS Healthcare

Centers for Medicare & Medicaid Services

The Centers for Medicare & Medicaid Services, the US federal agency that runs Medicare and works with states to run Medicaid and the Children’s Health Insurance Program.

Comes up in: Health & Human Services, Physical Therapy & Rehab Networks, Pharma & Biotech

Critical access hospital Healthcare

A Medicare designation for small rural hospitals that meet federal criteria, which are reimbursed on a cost basis to help keep essential services available in rural areas.

Comes up in: Community & Critical Access Hospitals, Regional Health Systems & Hospitals

CRO Healthcare

Contract research organization

A contract research organization: a company that runs parts of clinical research, such as trial management, monitoring or data management, on behalf of pharmaceutical, biotech and medical device sponsors.

Comes up in: Contract Research Organizations, Life Sciences & Research, Healthcare

CUI Government

Controlled unclassified information

Controlled unclassified information: US government information that is not classified but that law, regulation or government-wide policy requires to be safeguarded or disseminated only in controlled ways.

Comes up in: Federal Government, Solutions Catalog, Government

Data lineage Data & AI

A record of where data came from, how it was transformed and where it went, which lets teams trace a figure in a report back to its sources.

Comes up in: Data & AI, Solutions Catalog, Credit Unions

Data processing agreement Security & privacy

DPA

A contract between an organization and a service provider that processes personal data on its behalf, setting out what the provider may do with the data and how it must protect it. The GDPR requires one.

Comes up in: Suppliers & Vendors, Consulting & Advisory Partners

Data residency Security & privacy

Where data is physically stored and processed. Residency requirements, set by law, regulators or contracts, keep certain data within a particular country or region.

Comes up in: Trust Center, Home, Finance

DDIL Government

Disconnected, denied, intermittent or limited-bandwidth: environments, often in defense and emergency response, where systems must keep working without a reliable network connection.

Comes up in: Federal Government, Defense & Intelligence

DevSecOps Operations & resilience

Building security into software development and operations from the start, with automated security checks in the delivery pipeline rather than a review at the end.

Comes up in: Technology & Engineering Graduate Program, Moraph Fusion Center, Federal Government

DLP Security & privacy

Data loss prevention

Data loss prevention: tools and policies that detect and stop sensitive data leaving an organization through email, uploads, removable media or other channels.

Comes up in: Finance, Healthcare, Credit Unions

DoD impact levels (IL5, IL6) Government

Levels in the Department of Defense cloud security requirements that describe how sensitive the data a cloud service may hold is. IL5 covers higher-sensitivity controlled unclassified information and certain national security systems; IL6 covers classified information up to SECRET.

Comes up in: Defense & Intelligence, Trust Center, Solutions Catalog

DORA Financial services

Digital Operational Resilience Act

An EU regulation on digital operational resilience in the financial sector. It sets requirements for ICT risk management, incident reporting, resilience testing and the management of technology third parties, and brings critical ICT providers under EU oversight.

Comes up in: Trust Center, Security, Risk & Compliance, Newsroom

EDC Healthcare

Electronic data capture

Electronic data capture: software for collecting clinical trial data electronically, in place of paper case report forms.

Comes up in: Pharma & Biotech, Life Sciences & Research, Contract Research Organizations

EDR Security & privacy

Endpoint detection and response

Endpoint detection and response: software on laptops, servers and other devices that records activity, detects threats and lets security teams investigate and contain them.

Comes up in: Government, Ambulatory & Specialty Networks

EHR and EMR Healthcare

Electronic health record; electronic medical record

An electronic medical record is the digital version of a patient’s chart within one practice or organization. An electronic health record is designed to share that information across the providers involved in a patient’s care.

Comes up in: Urgent Care & Walk-In Clinics, Regional Health Systems & Hospitals, Community & Critical Access Hospitals

ESIGN and UETA Financial services

Electronic Signatures in Global and National Commerce Act; Uniform Electronic Transactions Act

Two US laws, one federal and one adopted by most states, that give electronic signatures and electronic records the same legal effect as paper ones, subject to conditions such as consumer consent for certain disclosures.

Comes up in: Solutions Catalog

Explainability Data & AI

The ability to describe, in terms people can understand, why a model or automated system produced a particular output.

Comes up in: Data & AI, Trust Center, Data Trust & Governance Labs

FDA 21 CFR Part 11 Healthcare

The US Food and Drug Administration regulation that sets the conditions under which electronic records and electronic signatures are trusted as equivalent to paper records and handwritten signatures.

Comes up in: Healthcare, Pharma & Biotech, Life Sciences & Research

FDIC Financial services

Federal Deposit Insurance Corporation

The Federal Deposit Insurance Corporation insures deposits at US banks and savings institutions and supervises state-chartered banks that are not members of the Federal Reserve System.

Comes up in: Regional & Community Banks, Digital & Direct Banking, Solutions Catalog

FedRAMP Government

Federal Risk and Authorization Management Program

The Federal Risk and Authorization Management Program: the US government’s standard approach to assessing and authorizing cloud services for federal use, with Low, Moderate and High baselines based on NIST SP 800-53.

Comes up in: Solutions Catalog, Government, Federal Government

FERPA Government

Family Educational Rights and Privacy Act

A US law that protects the privacy of student education records and gives parents, and students once they turn 18 or attend a postsecondary school, rights over those records.

Comes up in: Academic Medical Centers & Institutes

FFIEC Financial services

Federal Financial Institutions Examination Council

An interagency council of US financial regulators that sets uniform principles and standards for examining financial institutions. Its IT Examination Handbook is a common reference for how examiners review a bank’s technology.

Comes up in: Credit Unions & Regional Banks, Credit Unions, Regional & Community Banks

FHIR Healthcare

Fast Healthcare Interoperability Resources

Fast Healthcare Interoperability Resources: an HL7 standard for exchanging healthcare data through modern web APIs.

Comes up in: Healthcare, Integrated Delivery Networks, Engineering & Product

FINRA Financial services

Financial Industry Regulatory Authority

The self-regulatory organization for US broker-dealers, overseen by the SEC. Its rules cover areas such as supervision, communications with the public and record keeping.

Comes up in: Broker-Dealers & Wealth Management, Client Delivery & Strategy Graduate Program, Trust Center

FIPS 140 Security & privacy

The US and Canadian government standard for cryptographic modules. Products are tested and validated against it, and many government contracts require FIPS-validated encryption.

Comes up in: Public Safety & Justice, Justice & Public Safety

FISMA Government

Federal Information Security Modernization Act

A US law that requires federal agencies to run information security programs for their systems, including those operated by contractors on their behalf.

Comes up in: Homeland Security & Justice, Federal Government, Civil Agencies

FOIA Government

Freedom of Information Act

The federal law that gives the public the right to request records from US federal agencies, subject to exemptions. States have their own public records laws.

Comes up in: Solutions Catalog, Government, Federal Government

Follow-the-sun Operations & resilience

An operating model in which teams in different time zones hand work over to each other, so systems are monitored and supported around the clock by people working their normal daytime hours.

Comes up in: Operations & Resilience, Trust Center, Newsroom

GDPR and UK GDPR Security & privacy

General Data Protection Regulation

The EU’s General Data Protection Regulation and its UK counterpart, which govern how organizations collect, use and protect personal data about people in the EU and UK, and give those people rights over it.

Comes up in: Trust Center, Life Sciences & Research, Data Trust & Governance Labs

GLBA Financial services

Gramm-Leach-Bliley Act

A US law that requires financial institutions to explain how they share customers’ personal information and to protect it. Its Safeguards Rule requires a written information security program.

Comes up in: Finance, Credit Unions & Regional Banks, Trust Center

GovCloud and GCC High Government

Isolated cloud environments that major providers operate for US government agencies and their contractors, with restrictions on location and personnel suited to regulated workloads such as controlled unclassified information and export-controlled data.

Comes up in: Government, Federal Government, Defense & Intelligence

HIPAA Healthcare

Health Insurance Portability and Accountability Act

A US law whose Privacy, Security and Breach Notification Rules govern how health plans, healthcare providers and their business associates use, disclose and protect individuals’ health information.

Comes up in: Healthcare, Ambulatory & Specialty Networks, Solutions Catalog

HITECH Act Healthcare

Health Information Technology for Economic and Clinical Health Act

A US law that promoted the adoption of electronic health records, extended HIPAA’s security obligations directly to business associates and created federal breach notification requirements for health information.

Comes up in: Healthcare, Integrated Delivery Networks, Regional Health Systems & Hospitals

HITRUST Healthcare

An organization whose HITRUST CSF framework brings together requirements from HIPAA, NIST, ISO and other sources. Organizations can be assessed against it and certified, and many healthcare organizations ask vendors for HITRUST certification.

Comes up in: Trust Center, Healthcare

HL7 Healthcare

Health Level Seven

Health Level Seven International, a standards organization for healthcare data exchange, and the name commonly used for its version 2 messaging standard, which most hospital systems use to exchange information.

Comes up in: Engineering & Product, Newsroom, Solutions Catalog

HMDA Financial services

Home Mortgage Disclosure Act

A US law that requires many mortgage lenders to collect and report loan-level data about the applications they receive, which regulators and the public use to assess lending patterns and fair lending.

Comes up in: Mortgage Servicers & Originators

IAM Security & privacy

Identity and access management

Identity and access management: the processes and technology that control who can sign in to which systems and what they can do there.

Comes up in: Healthcare, Integrated Delivery Networks

ICAM Government

Identity, credential and access management

Identity, credential and access management: the policies and technology a government organization uses to establish who people and devices are and control what they can access.

Comes up in: Federal Government, Defense & Intelligence

IDN Healthcare

Integrated delivery network

An integrated delivery network: a group of hospitals, physician practices and other care settings under common ownership or management that coordinate care across a region.

Comes up in: Integrated Delivery Networks, Healthcare, Regional Health Systems & Hospitals

IRS Publication 1075 Government

The IRS’s security requirements for government agencies, and their contractors, that receive federal tax information.

Comes up in: State Government

ISO/IEC 27001 Security & privacy

The international standard for an information security management system. Organizations can be certified against it by an accredited certification body.

Comes up in: Home, Trust Center, Suppliers & Vendors

ITAR Government

International Traffic in Arms Regulations

The International Traffic in Arms Regulations, which control the export of defense articles, services and related technical data from the US.

Comes up in: Government, Solutions Catalog, Federal Government

KYC and CIP Financial services

Know your customer; Customer Identification Program

A Customer Identification Program sets out how a US bank verifies the identity of someone opening an account. Know your customer (KYC) is the wider practice of understanding who customers are and the risk they present, including customer due diligence.

Comes up in: FinTech & Neobanks, Solutions Catalog, Credit Unions & Regional Banks

LIMS Healthcare

Laboratory information management system

A laboratory information management system: software that tracks samples, tests, results and workflows in a laboratory.

Comes up in: Pharma & Biotech, Life Sciences & Research, Justice & Public Safety

MARS-E Government

Minimum Acceptable Risk Standards for Exchanges: the CMS security and privacy framework for systems that connect to Affordable Care Act health insurance exchanges, including state eligibility systems.

Comes up in: Health & Human Services, State Government

MFA Security & privacy

Multi-factor authentication

Multi-factor authentication: signing in with two or more different kinds of evidence, such as a password and a hardware key or authenticator app, so a stolen password alone is not enough.

Comes up in: Administration & Finance, Solutions Catalog, Local Government

MLOps Data & AI

Machine learning operations

The practices and tools for deploying, monitoring and maintaining machine learning models in production, applying the discipline of software operations to models.

Comes up in: Data Trust & Governance Labs, Contact Us, Moraph Fusion Center

MMIS Healthcare

Medicaid Management Information System

A Medicaid Management Information System: the claims processing and information retrieval system a state uses to run its Medicaid program.

Comes up in: Health & Human Services, State Government

Model risk management Data & AI

Managing the risk that a model is wrong or misused, through sound development, independent validation, monitoring and governance. In US banking it is shaped by the SR 11-7 guidance.

Comes up in: Data & AI, University Relations, Newsroom

NACHA Financial services

The organization that governs the US Automated Clearing House (ACH) network and writes the operating rules that banks and payment originators follow.

Comes up in: FinTech & Neobanks

NCUA Financial services

National Credit Union Administration

The National Credit Union Administration charters and supervises federal credit unions and insures deposits at federally insured credit unions.

Comes up in: Credit Unions, Solutions Catalog, Credit Unions & Regional Banks

NG911 Government

Next Generation 911

Next Generation 911: the move from analog 911 networks to IP-based systems that can carry text, images, video and data to emergency communications centers.

Comes up in: Local Government, Public Safety & Justice

NIST Cybersecurity Framework Security & privacy

NIST CSF

A voluntary framework from the US National Institute of Standards and Technology that organizes cybersecurity outcomes into functions, including identify, protect, detect, respond and recover, and, since version 2.0, govern.

Comes up in: Local Government, Infrastructure & Utilities

NIST SP 800-53 and 800-171 Government

Two National Institute of Standards and Technology publications. SP 800-53 is the catalog of security and privacy controls for federal information systems; SP 800-171 sets requirements for protecting controlled unclassified information in non-federal systems.

Comes up in: Government, Federal Government, Homeland Security & Justice

NOC Operations & resilience

Network operations center

A network operations center: the team and facility that monitor networks and infrastructure, respond to outages and coordinate maintenance.

Comes up in: Global Resilience Operations, Global Resilience Operations Internship, Operations & Resilience

NPI (nonpublic personal information) Financial services

Nonpublic personal information

Under the Gramm-Leach-Bliley Act, personally identifiable financial information that a financial institution collects about its consumers, such as account numbers and balances, which the institution must protect and may share only within the law’s limits.

Comes up in: Finance, Auto & Consumer Finance, Regional & Community Banks

OCC Financial services

Office of the Comptroller of the Currency

The Office of the Comptroller of the Currency charters, regulates and supervises national banks and federal savings associations in the US.

Comes up in: Digital & Direct Banking, Regional & Community Banks, Data & AI

OFAC Financial services

Office of Foreign Assets Control

The US Treasury office that administers and enforces economic and trade sanctions. Financial institutions screen customers and transactions against its sanctions lists.

Comes up in: FinTech & Neobanks

OSCAL Government

Open Security Controls Assessment Language

The Open Security Controls Assessment Language: NIST’s machine-readable formats for control catalogs, system security plans and assessment results, which make security documentation easier to automate.

Comes up in: Federal Government, Defense & Intelligence, Civil Agencies

PCI DSS Financial services

Payment Card Industry Data Security Standard

A security standard, maintained by the PCI Security Standards Council, for organizations that store, process or transmit payment card data.

Comes up in: Ambulatory & Specialty Networks, Administration & Finance, Credit Unions

Penetration test Security & privacy

An authorized, simulated attack on a system, application or network, carried out to find weaknesses before real attackers do.

Comes up in: Trust Center, Pharma & Biotech, Mortgage Servicers & Originators

PHI Healthcare

Protected health information

Protected health information: individually identifiable health information that a HIPAA covered entity or business associate creates, receives, keeps or transmits.

Comes up in: Healthcare, Regional Health Systems & Hospitals, About Us

PII Security & privacy

Personally identifiable information

Personally identifiable information: information that can identify a person, directly or combined with other information.

Comes up in: Solutions Catalog, Finance, State Government

Prior authorization Healthcare

The process by which a health plan requires approval before it will cover a treatment, test or medication, based on the plan’s coverage criteria.

Comes up in: Prepare for Your Interviews, Healthcare, Referral Partners

RBAC Security & privacy

Role-based access control

Role-based access control: granting access according to a person’s role rather than individually, so permissions follow job responsibilities.

Comes up in: Solutions Catalog

REAL ID Government

A US law that sets minimum security standards for state-issued driver’s licenses and identification cards accepted for certain federal purposes, such as boarding domestic flights.

Comes up in: Transportation & DMV

Revenue cycle Healthcare

The administrative and financial process of a healthcare provider, from scheduling and registration through coding, claims, payments and collections.

Comes up in: Multi-Site Physician Groups, Ambulatory & Specialty Networks, Community & Critical Access Hospitals

RIA Financial services

Registered investment adviser

A registered investment adviser: a firm that advises clients on securities for compensation and is registered with the SEC or a state securities regulator. Advisers owe their clients a fiduciary duty.

Comes up in: Registered Investment Advisors, Broker-Dealers & Wealth Management, Independent Broker-Dealers

RTO and RPO Operations & resilience

Recovery time objective; recovery point objective

Two recovery objectives. The recovery time objective is how quickly a system must be restored after a disruption; the recovery point objective is how much recent data, measured in time, the organization can afford to lose.

Comes up in: Trust Center

RWE Healthcare

Real-world evidence

Real-world evidence: clinical evidence about a medical product’s use, benefits or risks drawn from data collected outside traditional clinical trials, such as health records and claims.

Comes up in: Life Sciences & Research, Pharma & Biotech

SBOM Security & privacy

Software bill of materials

A software bill of materials: a machine-readable list of the components and libraries that make up a piece of software, used to track vulnerabilities and licenses.

Comes up in: Defense & Intelligence, Homeland Security & Justice, Trust Center

SCIF Government

Sensitive compartmented information facility

A sensitive compartmented information facility: an accredited secure room or building where classified information of certain kinds can be used and discussed.

Comes up in: Solutions Catalog, Defense & Intelligence

SD-WAN Operations & resilience

Software-defined wide area networking: managing the network connections between an organization’s sites through central software, choosing paths and applying policy across several kinds of connection.

Comes up in: Urgent Care & Walk-In Clinics, Ambulatory & Specialty Networks, Community & Critical Access Hospitals

SDOH Healthcare

Social determinants of health

Social determinants of health: the conditions in which people live, learn, work and age, such as housing, income and access to food, that affect health outcomes.

Comes up in: Integrated Delivery Networks, Health & Human Services

SEC Rule 17a-4 Financial services

The SEC rule that sets how long broker-dealers must keep business records and how electronic records must be preserved, either in a non-rewriteable, non-erasable (WORM) format or with a complete audit trail.

Comes up in: Finance, Independent Broker-Dealers, Trust Center

Section 508 Accessibility

Part of the US Rehabilitation Act that requires federal agencies to make the information and communication technology they develop, buy or use accessible to people with disabilities. Its standards incorporate WCAG.

Comes up in: Civil Agencies, Accessibility Statement, Federal Government

SIEM Security & privacy

Security information and event management

Security information and event management: a system that collects and correlates logs and security events from across an organization so analysts can detect and investigate threats.

Comes up in: Operations & Resilience Graduate Program

SOC (security operations center) Operations & resilience

Security operations center

The team, processes and tools that monitor an organization’s systems for security threats around the clock, and investigate and respond to incidents. Not to be confused with a SOC 2 report.

Comes up in: Operations & Resilience Graduate Program, Security, Risk & Compliance, Finance

SOC 2 Security & privacy

An attestation report, under AICPA standards, on a service organization’s controls relevant to security, availability, processing integrity, confidentiality and privacy. A Type I report covers control design at a point in time; a Type II report also tests whether the controls operated effectively over a period.

Comes up in: Security, Risk & Compliance, Finance, Digital & Direct Banking

Sovereign hosting Security & privacy

Hosting in which data, and the operation of the systems that hold it, stay within a particular jurisdiction and under the control of people and entities subject to its laws.

Comes up in: Trust Center, About Us, Government

SR 11-7 Financial services

Supervisory guidance on model risk management

Supervisory guidance from the Federal Reserve, adopted by the OCC, on model risk management: how banks should develop, validate, use and govern the models behind their decisions.

Comes up in: Data & AI, Trust Center, Speakers & Events

SSO Security & privacy

Single sign-on

Single sign-on: signing in once with one identity to reach many applications, which lets an organization apply one set of access policies.

Comes up in: Solutions Catalog, Healthcare, Registered Investment Advisors

Sub-processor Security & privacy

A third party that a service provider engages to process personal data on behalf of its customer. Data protection laws and contracts usually require sub-processors to be disclosed and bound by equivalent terms.

Comes up in: Suppliers & Vendors, Trust Center, Federal Government

Synthetic data Data & AI

Artificially generated data that preserves useful statistical properties of a real dataset without containing real people’s records, used for testing and research.

Comes up in: University Relations

Tabletop exercise Operations & resilience

A discussion-based rehearsal in which a team walks through a realistic scenario, such as a ransomware attack or an outage, to test its plans and decisions without touching live systems.

Comes up in: Speakers & Events, Mortgage Servicers & Originators, Global Resilience Operations Internship

TAC Operations & resilience

Technical assistance center

A technical assistance center: the support team that takes technical questions and problems from users and resolves or escalates them.

Comes up in: Operations & Resilience Graduate Program, Global Resilience Operations Internship, Global Resilience Operations

TRID Financial services

TILA-RESPA Integrated Disclosure

The US mortgage disclosure rule that combines the Truth in Lending Act and RESPA disclosures into two forms: the Loan Estimate and the Closing Disclosure.

Comes up in: Specialty Lenders & FinTech, Mortgage Servicers & Originators

UDAAP Financial services

Unfair, deceptive or abusive acts or practices

Unfair, deceptive or abusive acts or practices, which US federal law prohibits in consumer financial products and services. The CFPB and other regulators enforce the prohibition.

Comes up in: Auto & Consumer Finance, Specialty Lenders & FinTech

VDI Operations & resilience

Virtual desktop infrastructure

Virtual desktop infrastructure: desktops that run on central servers and are delivered to users’ devices over the network, so data stays in the data center.

Comes up in: Healthcare, Credit Unions, Family Offices & UHNW

Vulnerability disclosure Security & privacy

A published process through which security researchers and others can report security weaknesses to an organization, which commits to receive, investigate and fix them.

Comes up in: Trust Center, Contact Us

WCAG Accessibility

Web Content Accessibility Guidelines

The Web Content Accessibility Guidelines from the W3C, the international standard for making web content accessible to people with disabilities. Conformance is graded at levels A, AA and AAA; level AA is the usual target.

Comes up in: Accessibility Statement

WORM storage Financial services

Write once, read many

Write once, read many: storage that prevents records from being changed or deleted during their retention period. It is one way to meet record-keeping rules such as SEC Rule 17a-4.

Comes up in: Trust Center, Finance, Solutions Catalog

Zero trust Security & privacy

A security model in which no user, device or network location is trusted by default: every request is authenticated, authorized and checked against policy before access is granted.

Comes up in: Security, Risk & Compliance, Family Offices & UHNW, Federal Government

No terms match. Clear the search

Missing a term, or see something we should correct? Tell us.