Security needs a shared vocabulary.

A controlled communication space for one operational objective, rather than a generic group chat.

The controlled exchange of situation, decisions and assignments during a security or operational incident.

A pre-defined alternative communication path for failure or compromise of the primary channel.

A structured record separating expectation, observation, impact, reproducibility and decision.

A session whose use is additionally bound to cryptographic material held by a specific device.

A phishing-resistant sign-in based on asymmetric cryptography and WebAuthn/FIDO principles.

The principle of granting only the minimum rights needed for a purpose and duration.

An architectural approach that does not grant implicit trust based on network location or ownership.

A security-relevant state change in which trust is re-established, constrained or revoked.

Encryption designed so content is available in plaintext only at authorised endpoints.

The property that later key compromise does not expose earlier session keys.

A protocol's ability to recover a secure state after compromise.

A comparison value derived from identity keys for independent verification of a peer.

The controlled replacement of cryptographic keys based on time, event or risk.

The deliberate reduction of collection, precision, linkability and retention of contextual data.

A web application using installable, standalone and partly offline-capable app properties.

A browser standard for server-initiated notifications to registered web applications.