CISA: Certified Information Systems Auditor

Dual-control temporary emergency access accounts require participation by two authorized individuals before emergency access can be used. This enforces authorization in advance and prevents one administrator from independently making an unapproved emergency change.

Encryption on a mobile device protects sensitive data at rest by rendering it unreadable to an unauthorized person who obtains the lost device. This directly mitigates disclosure of the device’s stored corporate data.

A data-classification policy establishes the classification framework: its levels, criteria, responsibilities, and required handling rules. Data process mapping and the categorization or prioritization of data are implementation activities that follow from that governing policy.

A digital signature applies a hash function to create a message digest and encrypts or signs that digest using the sender’s private key. This supports integrity verification and signer authentication.

A bare-metal (Type 1) hypervisor runs directly on the underlying hardware, so it does not require a host operating system. It can still host guest operating systems and their applications in virtual machines.