ISACA Glossary of Terms English-Spanish
Total Page:16
File Type:pdf, Size:1020Kb
ISACA® Glossary of Terms English-Spanish Third edition (2015) ACKNOWLEDGMENTS The ISACA® Glossary of Terms has been translated into Spanish (terms only) by a professional translation vendor and reviewed by many volunteers. The verified and approved translation of this glossary will help reduce the time, cost, and inconsistencies of ISACA Spanish translations. All of the ISACA members who participated in the review of the three editions of the translated glossary deserve our thanks and gratitude. Expert Translation Reviewers Alfonso Javier Mateluna Concha, CISA, CISM, CRISC, Chile Arnoldo Altamirano, CISA, Costa Rica Daniel Morales, CISA, Costa Rica Edson Marcelo Vittoriano Piuzzi, Sr., CISM, Chile Fabiola Paulina Moyón Constante, CISA, Ecuador Freddy Grey, CISA, CISM, Chile Jorge Serrano, CISA, CGEIT, CRISC, Chile Juan Davila Ramirez, CISA, CISM, Peru Larry Llirán, CISA, CISM, Puerto Rico Lolita E. Vargas-DeLeon, CISA, CIA, CPA, MIBA, Puerto Rico Luis A. Capua, CISM, CRISC, Argentina Luis Diego León, CISA, Costa Rica Luis Enrique Sánchez Crespo, Spain Marcelo Hector Gonzalez, CISA, CRISC, Argentina Marco Gámez, CISA, CRISC, Costa Rica Maria Patricia Prandini, CISA, CRISC, Argentina Pablo Caneo, CISA, CGEIT, CRISC, Chile Pablo Fernández, CISA, CRISC, Costa Rica Reyna Ramirez Montes, Mexico Salomon Rico, CISA, CISM, CGEIT, Mexico Sergio Molanphy, CISM, CRISC, Chile Victor Adalmer Vasquez Mejia, CISA, CISM, CRISC, Colombia FEEDBACK Please contact the ISACA Translation Manager at [email protected] for any comments or suggested changes. Abend A Accountability The ability to map a given activity or event back to the responsible party SPANISH: Responsabilidad de rendición de cuentas Abend An abnormal end to a computer job; termination of a task prior to its completion because of an error Accountability of governance Governance condition that cannot be resolved by recovery facilities ensures that enterprise objectives are achieved by while the task is executing evaluating stakeholder needs, conditions and options; SPANISH: Terminación anormal setting direction through prioritization and decision making; and monitoring performance, compliance and Acceptable interruption window The maximum progress against plans. In most enterprises, governance is period of time that a system can be unavailable before the responsibility of the board of directors under the compromising the achievement of the enterprise's leadership of the chairperson. Scope Note: COBIT 5 business objectives Perspective SPANISH: Ventana de interrupción aceptable SPANISH: Rendición de cuentas por Gobierno Acceptable use policy A policy that establishes an Accountable party The individual, group or entity agreement between users and the enterprise and defines that is ultimately responsible for a subject matter, process for all parties' the ranges of use that are approved before or scope Scope Note: Within the IT Assurance gaining access to a network or the Internet Framework (ITAF), the term "management" is equivalent SPANISH: Política de uso aceptable to "accountable party." SPANISH: Parte responsable Access control The processes, rules and deployment mechanisms that control access to information systems, Acknowledgment (ACK) A flag set in a packet to resources and physical access to premises indicate to the sender that the previous packet sent was SPANISH: Control de acceso accepted correctly by the receiver without errors, or that the receiver is now ready to accept a transmission SPANISH: Reconocimiento (ACK) Access control list (ACL) An internal computerized table of access rules regarding the levels of computer access permitted to logon IDs and computer Active recovery site (Mirrored) A recovery terminals Scope Note: Also referred to as access control strategy that involves two active sites, each capable of tables taking over the other's workload in the event of a disaster SPANISH: Lista de control de acceso (ACL) Scope Note: Each site will have enough idle processing power to restore data from the other site and to accommodate the excess workload in the event of a Access control table An internal computerized disaster. table of access rules regarding the levels of computer SPANISH: Sitio de recuperación activo (espejado) access permitted to logon IDs and computer terminals SPANISH: Tabla de control de acceso Active response A response in which the system either automatically, or in concert with the user, blocks or Access method The technique used for selecting otherwise affects the progress of a detected attack Scope records in a file, one at a time, for processing, retrieval or Note: Takes one of three forms: amending the storage. environment, collecting more information or striking The access method is related to, but distinct from, the file back against the user organization, which determines how the records are SPANISH: Respuesta activa stored. SPANISH: Método de acceso Activity The main actions taken to operate the COBIT process Access path The logical route that an end user takes SPANISH: Actividad to access computerized information Scope Note: Typically includes a route through the operating system, telecommunications software, selected application Address Within computer storage, the code used to software and the access control system designate the location of a specific piece of data SPANISH: Ruta de acceso SPANISH: Dirección Access rights The permission or privileges granted Address space The number of distinct locations that to users, programs or workstations to create, change, may be referred to with the machine address Scope Note: delete or view data and files within a system, as defined For most binary machines, it is equal to 2n, where n is the by rules established by data owners and the information number of bits in the machine address. security policy SPANISH: Espacio de dirección SPANISH: Derechos de acceso Addressing The method used to identify the location Access server Provides centralized access control of a participant in a network Scope Note: Ideally, for managing remote access dial-up services specifies where the participant is located rather than who SPANISH: Servidor de acceso they are (name) or how to get there (routing) SPANISH: Direccionamiento © 2015 ISACA All rights reserved. 2 ISACA® Glossary of Terms – Spanish 3rd Edition Adjusting period Adjusting period The calendar can contain "real" Alignment A state where the enablers of governance accounting periods and/or adjusting accounting periods. and management of enterprise IT support the goals and The "real" accounting periods must not overlap and strategies of the enterprise Scope Note: COBIT 5 cannot have any gaps between them. Adjusting Perspective accounting periods can overlap with other accounting SPANISH: Alineación periods. Scope Note: For example, a period called DEC-93 can be defined that includes 01-DEC-1993 Allocation entry A recurring journal entry used to through 31-DEC-1993. An adjusting period called allocate revenues or costs Scope Note: For example, an DEC31-93 can also be defined that includes only one day: allocation entry could be defined to allocate costs to each 31-DEC-1993 through 31-DEC-1993. department based on head count. SPANISH: Período de ajuste SPANISH: Entrada de asignación Administrative control The rules, procedures and Alpha The use of alphabetic characters or an alphabetic practices dealing with operational effectiveness, character string efficiency and adherence to regulations and management SPANISH: Alfa policies SPANISH: Control administrativo Alternate facilities Locations and infrastructures from which emergency or backup processes are executed, Advanced Encryption Standard (AES) A when the main premises are unavailable or destroyed public algorithm that supports keys from 128 bits to 256 Scope Note: Includes other buildings, offices or data bits in size processing centers SPANISH: Estándar de Encriptación Avanzada (AES) SPANISH: Instalaciones alternativas Advanced persistent threat (APT) An adversary Alternate process Automatic or manual process that possesses sophisticated levels of expertise and designed and established to continue critical business significant resources which allow it to create processes from point-of-failure to return-to-normal opportunities to achieve its objectives using multiple SPANISH: Proceso alternativo attack vectors (NIST SP800-61) Scope Note: The APT: 1. pursues its objectives repeatedly over an extended period of time Alternative routing A service that allows the option 2. adapts to defenders’ efforts to resist it of having an alternate route to complete a call when the 3. is determined to maintain the level of interaction marked destination is not available Scope Note: In needed to execute its objectives signaling, alternative routing is the process of allocating SPANISH: Amenaza persistente avanzada (APT, por sus substitute routes for a given signaling traffic stream in siglas en inglés) case of failure(s) affecting the normal signaling links or routes of that traffic stream. SPANISH: Enrutamiento alternativo Adversary A threat agent SPANISH: Adversario American Standard Code for Information Adware A software package that automatically plays, Interchange See ASCII displays or downloads advertising material to a computer SPANISH: Código Estadounidense Estándar para el after the software is installed on it or while the Intercambio de Información application is being used Scope Note: In most cases, this is done without any notification to the user or without the Amortization The process of cost allocation