Review queue
Every entry was drafted by an AI and stays marked as a draft until a person has checked it. To approve one, open it on GitHub and change draft: true to draft: false.
0 / 435 reviewed
Compliance & regulation · 43
- AuditEdit on GitHub
- Centre for Cyber Security (CFCS)Edit on GitHub
- CER DirectiveEdit on GitHub
- CertificationEdit on GitHub
- Compliance and risk coordinatorEdit on GitHub
- Compliance roadmapEdit on GitHub
- Continuous improvement (PDCA)Edit on GitHub
- Cyber Resilience Act (CRA)Edit on GitHub
- D-mærketEdit on GitHub
- Danish NIS2 Act (NIS2-loven)Edit on GitHub
- Data controllerEdit on GitHub
- Data ethicsEdit on GitHub
- Data processing agreement (DPA)Edit on GitHub
- Data processorEdit on GitHub
- Data protection impact assessment (DPIA)Edit on GitHub
- DORAEdit on GitHub
- Essential and important entities (NIS2)Edit on GitHub
- EU directiveEdit on GitHub
- EU regulationEdit on GitHub
- Gap analysisEdit on GitHub
- GDPREdit on GitHub
- Governance, risk and compliance (GRC)Edit on GitHub
- Grey rolesEdit on GitHub
- Information security coordinatorEdit on GitHub
- Information security management system (ISMS)Edit on GitHub
- ISO 27000 seriesEdit on GitHub
- ISO 27001Edit on GitHub
- ISO 27001 Annex AEdit on GitHub
- ISO 27002Edit on GitHub
- Management responsibilityEdit on GitHub
- NIS1 DirectiveEdit on GitHub
- NIS2 DirectiveEdit on GitHub
- NIS2 minimum requirementsEdit on GitHub
- NIST Cybersecurity Framework (CSF)Edit on GitHub
- Personal dataEdit on GitHub
- Privacy by designEdit on GitHub
- Security frameworkEdit on GitHub
- Security maturityEdit on GitHub
- Security metrics (KPIs)Edit on GitHub
- Self-assessmentEdit on GitHub
- Statement of Applicability (SoA)Edit on GitHub
- Supervisory authorityEdit on GitHub
- Supplier managementEdit on GitHub
Fundamentals · 38
- AssetEdit on GitHub
- AvailabilityEdit on GitHub
- CIA triadEdit on GitHub
- ComplianceEdit on GitHub
- ConfidentialityEdit on GitHub
- Credential stuffingEdit on GitHub
- Cyber and information securityEdit on GitHub
- Data classificationEdit on GitHub
- Defence in depthEdit on GitHub
- Denial of service (DoS/DDoS)Edit on GitHub
- ExploitEdit on GitHub
- GovernanceEdit on GitHub
- Human errorEdit on GitHub
- Human factorEdit on GitHub
- ImpactEdit on GitHub
- Insider threatEdit on GitHub
- IntegrityEdit on GitHub
- IT operationsEdit on GitHub
- Lateral movementEdit on GitHub
- Legacy systemEdit on GitHub
- LikelihoodEdit on GitHub
- MalwareEdit on GitHub
- Man-in-the-middle attackEdit on GitHub
- Non-repudiationEdit on GitHub
- Perimeter securityEdit on GitHub
- Physical securityEdit on GitHub
- Privilege escalationEdit on GitHub
- RiskEdit on GitHub
- Security by designEdit on GitHub
- Security controlEdit on GitHub
- Security incidentEdit on GitHub
- Security policyEdit on GitHub
- Session hijackingEdit on GitHub
- Supply chain attackEdit on GitHub
- ThreatEdit on GitHub
- Threat actorEdit on GitHub
- VulnerabilityEdit on GitHub
- Zero-day vulnerabilityEdit on GitHub
Machine learning basics · 29
- Activation functionEdit on GitHub
- Artificial intelligence (AI)Edit on GitHub
- Bias-variance trade-offEdit on GitHub
- ClassificationEdit on GitHub
- ClusteringEdit on GitHub
- Decision treeEdit on GitHub
- Deep learningEdit on GitHub
- Dimensionality reductionEdit on GitHub
- FeatureEdit on GitHub
- Feature engineeringEdit on GitHub
- Generative AIEdit on GitHub
- Gradient boostingEdit on GitHub
- InferenceEdit on GitHub
- k-means clusteringEdit on GitHub
- LabelEdit on GitHub
- Linear regressionEdit on GitHub
- Logistic regressionEdit on GitHub
- Machine learningEdit on GitHub
- Model trainingEdit on GitHub
- Neural networkEdit on GitHub
- OverfittingEdit on GitHub
- Random forestEdit on GitHub
- RegressionEdit on GitHub
- Reinforcement learningEdit on GitHub
- Self-supervised learningEdit on GitHub
- Supervised learningEdit on GitHub
- Training dataEdit on GitHub
- Transfer learningEdit on GitHub
- Unsupervised learningEdit on GitHub
Controls & technical basics · 25
- Access managementEdit on GitHub
- Asset inventoryEdit on GitHub
- Authentication factorEdit on GitHub
- BackupEdit on GitHub
- Change managementEdit on GitHub
- CIS ControlsEdit on GitHub
- EndpointEdit on GitHub
- Endpoint detection and response (EDR)Edit on GitHub
- HardeningEdit on GitHub
- Intrusion detection system (IDS)Edit on GitHub
- Intrusion prevention system (IPS)Edit on GitHub
- Multi-factor authenticationEdit on GitHub
- One-time password (OTP)Edit on GitHub
- Organisational controlEdit on GitHub
- Patch managementEdit on GitHub
- Penetration testEdit on GitHub
- People controlEdit on GitHub
- Security monitoringEdit on GitHub
- Security operations centre (SOC)Edit on GitHub
- SIEMEdit on GitHub
- Technical controlEdit on GitHub
- Two-factor authenticationEdit on GitHub
- Vulnerability assessmentEdit on GitHub
- Vulnerability scanningEdit on GitHub
- Zero TrustEdit on GitHub
Identity & access · 21
- Access controlEdit on GitHub
- AuthenticationEdit on GitHub
- AuthorizationEdit on GitHub
- Conditional accessEdit on GitHub
- CredentialEdit on GitHub
- Digital identityEdit on GitHub
- Identity federationEdit on GitHub
- Identity providerEdit on GitHub
- OAuthEdit on GitHub
- OpenID Connect (OIDC)Edit on GitHub
- PasskeyEdit on GitHub
- PasswordEdit on GitHub
- Principle of least privilegeEdit on GitHub
- Privileged access management (PAM)Edit on GitHub
- Privileged accountEdit on GitHub
- Role-based access control (RBAC)Edit on GitHub
- SAMLEdit on GitHub
- Service accountEdit on GitHub
- SessionEdit on GitHub
- Single sign-on (SSO)Edit on GitHub
- User accountEdit on GitHub
Risk management · 20
- Business impact analysis (BIA)Edit on GitHub
- Critical assetsEdit on GitHub
- CVE and CVSSEdit on GitHub
- Qualitative risk analysisEdit on GitHub
- Quantitative risk analysisEdit on GitHub
- Residual riskEdit on GitHub
- Risk acceptanceEdit on GitHub
- Risk appetiteEdit on GitHub
- Risk assessmentEdit on GitHub
- Risk avoidanceEdit on GitHub
- Risk heat mapEdit on GitHub
- Risk identificationEdit on GitHub
- Risk managementEdit on GitHub
- Risk mitigationEdit on GitHub
- Risk monitoringEdit on GitHub
- Risk profileEdit on GitHub
- Risk transferEdit on GitHub
- Risk treatmentEdit on GitHub
- Threat intelligenceEdit on GitHub
- Threat landscapeEdit on GitHub
AI risk & governance · 18
- Adversarial exampleEdit on GitHub
- AI alignmentEdit on GitHub
- AI biasEdit on GitHub
- AI governanceEdit on GitHub
- AI red teamingEdit on GitHub
- AI supply chain attackEdit on GitHub
- Data poisoningEdit on GitHub
- DeepfakeEdit on GitHub
- EU AI ActEdit on GitHub
- Excessive agencyEdit on GitHub
- ExplainabilityEdit on GitHub
- General-purpose AI model (GPAI)Edit on GitHub
- GuardrailsEdit on GitHub
- JailbreakEdit on GitHub
- Model cardEdit on GitHub
- Prompt injectionEdit on GitHub
- Sensitive information disclosureEdit on GitHub
- Shadow AIEdit on GitHub
Training & optimisation · 17
- BackpropagationEdit on GitHub
- Batch sizeEdit on GitHub
- Data labelingEdit on GitHub
- EpochEdit on GitHub
- Gradient descentEdit on GitHub
- HyperparameterEdit on GitHub
- Instruction tuningEdit on GitHub
- Learning rateEdit on GitHub
- Loss functionEdit on GitHub
- Low-rank adaptation (LoRA)Edit on GitHub
- Model parameterEdit on GitHub
- Model weightsEdit on GitHub
- PretrainingEdit on GitHub
- RegularizationEdit on GitHub
- Reinforcement learning from human feedback (RLHF)Edit on GitHub
- Synthetic dataEdit on GitHub
- UnderfittingEdit on GitHub
Networking · 17
- ClientEdit on GitHub
- DNSEdit on GitHub
- EncryptionEdit on GitHub
- FirewallEdit on GitHub
- HTTPSEdit on GitHub
- InternetEdit on GitHub
- IP addressEdit on GitHub
- NetworkEdit on GitHub
- Network segmentationEdit on GitHub
- PacketEdit on GitHub
- PortEdit on GitHub
- ProtocolEdit on GitHub
- RouterEdit on GitHub
- ServerEdit on GitHub
- TCP/IPEdit on GitHub
- TLSEdit on GitHub
- VPNEdit on GitHub
People, culture & awareness · 17
- Awareness maturityEdit on GitHub
- Awareness officerEdit on GitHub
- Awareness programmeEdit on GitHub
- Business email compromise (CEO fraud)Edit on GitHub
- Human firewallEdit on GitHub
- NudgingEdit on GitHub
- PhishingEdit on GitHub
- Phishing simulationEdit on GitHub
- PretextingEdit on GitHub
- RansomwareEdit on GitHub
- Security awarenessEdit on GitHub
- Security cultureEdit on GitHub
- Shadow ITEdit on GitHub
- SmishingEdit on GitHub
- Social engineeringEdit on GitHub
- Spear phishingEdit on GitHub
- VishingEdit on GitHub
Language models · 14
- AI agentEdit on GitHub
- Context windowEdit on GitHub
- EmbeddingEdit on GitHub
- Fine-tuningEdit on GitHub
- HallucinationEdit on GitHub
- Knowledge cutoffEdit on GitHub
- Large language model (LLM)Edit on GitHub
- Next-token predictionEdit on GitHub
- PromptEdit on GitHub
- Reasoning modelEdit on GitHub
- Retrieval-augmented generation (RAG)Edit on GitHub
- TokenEdit on GitHub
- TokenizerEdit on GitHub
- TransformerEdit on GitHub
Evaluation & metrics · 12
- AccuracyEdit on GitHub
- BenchmarkEdit on GitHub
- Confusion matrixEdit on GitHub
- Cross-validationEdit on GitHub
- Data driftEdit on GitHub
- F1 scoreEdit on GitHub
- LLM-as-a-judgeEdit on GitHub
- Model evaluation (evals)Edit on GitHub
- PrecisionEdit on GitHub
- RecallEdit on GitHub
- Test setEdit on GitHub
- Validation setEdit on GitHub
Application security · 12
- API securityEdit on GitHub
- Attack surfaceEdit on GitHub
- Cross-site request forgery (CSRF)Edit on GitHub
- Cross-site scripting (XSS)Edit on GitHub
- CSRF tokenEdit on GitHub
- Input validationEdit on GitHub
- OWASP Top 10Edit on GitHub
- Secure development lifecycle (SDL)Edit on GitHub
- SQL injectionEdit on GitHub
- STRIDEEdit on GitHub
- Threat modellingEdit on GitHub
- Web application firewall (WAF)Edit on GitHub
Incidents & continuity · 12
- Business continuity plan (BCP)Edit on GitHub
- Communication planEdit on GitHub
- Contingency planEdit on GitHub
- Crisis managementEdit on GitHub
- Data breachEdit on GitHub
- Disaster recovery plan (DRP)Edit on GitHub
- Escalation procedureEdit on GitHub
- Incident reportingEdit on GitHub
- Incident responseEdit on GitHub
- Lessons learnedEdit on GitHub
- Recovery objectives (RTO/RPO)Edit on GitHub
- Table-top exerciseEdit on GitHub
AI-assisted coding · 10
- Agent instructions fileEdit on GitHub
- AI code reviewEdit on GitHub
- AI coding assistantEdit on GitHub
- AI pair programmingEdit on GitHub
- Code completionEdit on GitHub
- Coding agentEdit on GitHub
- Fill-in-the-middle (FIM)Edit on GitHub
- SlopsquattingEdit on GitHub
- Spec-driven developmentEdit on GitHub
- Vibe codingEdit on GitHub
Agents & tools · 10
- Agent memoryEdit on GitHub
- Agent sandboxEdit on GitHub
- Agent2Agent protocol (A2A)Edit on GitHub
- Agentic workflowEdit on GitHub
- Computer useEdit on GitHub
- Human-in-the-loop (HITL)Edit on GitHub
- MCP serverEdit on GitHub
- Model Context Protocol (MCP)Edit on GitHub
- Multi-agent systemEdit on GitHub
- Tool callingEdit on GitHub
Model architectures · 10
- Attention mechanismEdit on GitHub
- Convolutional neural network (CNN)Edit on GitHub
- DecoderEdit on GitHub
- Diffusion modelEdit on GitHub
- EncoderEdit on GitHub
- Foundation modelEdit on GitHub
- Mixture of experts (MoE)Edit on GitHub
- Multimodal modelEdit on GitHub
- Open-weight modelEdit on GitHub
- Small language model (SLM)Edit on GitHub
Prompting & generation · 10
Retrieval & search · 10
AI hardware & serving · 10
- Graphics processing unit (GPU)Edit on GitHub
- Knowledge distillationEdit on GitHub
- KV cacheEdit on GitHub
- LatencyEdit on GitHub
- Model servingEdit on GitHub
- Prompt cachingEdit on GitHub
- QuantizationEdit on GitHub
- Tensor processing unit (TPU)Edit on GitHub
- ThroughputEdit on GitHub
- Time to first token (TTFT)Edit on GitHub
Web & data · 10
Operating systems · 10
Cryptography · 10
- Certificate authority (CA)Edit on GitHub
- Cryptographic keyEdit on GitHub
- Digital certificateEdit on GitHub
- Digital signatureEdit on GitHub
- End-to-end encryptionEdit on GitHub
- HashingEdit on GitHub
- Key managementEdit on GitHub
- Public key infrastructure (PKI)Edit on GitHub
- Public-key cryptographyEdit on GitHub
- Symmetric encryptionEdit on GitHub
Observability · 10
Software delivery · 10
- CI/CDEdit on GitHub
- Code signingEdit on GitHub
- DevSecOpsEdit on GitHub
- GitOpsEdit on GitHub
- Infrastructure as code (IaC)Edit on GitHub
- PipelineEdit on GitHub
- Software bill of materials (SBOM)Edit on GitHub
- Software composition analysis (SCA)Edit on GitHub
- Software supply chainEdit on GitHub
- Version controlEdit on GitHub
Cloud · 10
- Cloud computingEdit on GitHub
- Cloud IAMEdit on GitHub
- Cloud misconfigurationEdit on GitHub
- HypervisorEdit on GitHub
- Infrastructure as a service (IaaS)Edit on GitHub
- Platform as a service (PaaS)Edit on GitHub
- Secrets managementEdit on GitHub
- Shared responsibility modelEdit on GitHub
- Software as a service (SaaS)Edit on GitHub
- Virtual machineEdit on GitHub