E
EA - Enterprise Architecture (A model or description framework of a business, which focuses more on the information needs and providers of information at different levels, and less on the structural business organization chart, or simple listing of divisions and departments, business units, and department heads. While EA normally starts with the business unit activities and processes, it also includes the information architecture (information used and how it moves), the information system architecture (how information is captured and provided), data architecture (how information is stored and accessed), and delivery systems architecture (hardware, software, and communications networks).)
EAC - electronic access control (A generic term used to describe proximity authentication devices, such as proximity readers, programmable locks, or biometric systems, which identify and authenticate users before allowing them entrance into physically controlled areas.)
EAL - Evaluation Assurance Level (A component of an evaluation method used in security systems development, which assigns testing levels to various stages of development, with each stage requiring passage of a more rigorous and different type of testing before qualifying for the next level.)
EAP - Extensible Authentication Protocol (A framework or description of authentication methods available to users attempting to access a system remotely, which extends, or adds to, the types of authentication methods possible beyond the two standards - Password Authentication Protocol (PAP) and Challenge Hanshake Authentication Protocol (CHAP) - to include methods such as one-time passwords, token cards, biometrics, and digital certificates.)
EAP-FAST - Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling (A Cisco-proprietary system connection using tunneling - an encrypted link between two systems - which is one of the extended authentication methods available within the EAP framework.)
EAP-TLS - Extensible Authentication Protocol - Transport Layer Security (An EAP method of authentication which relies on digital certificates - digital (electronic) files containing identifying details, such as the individual's identity, the certificate's purpose, and the issuing authority.)
ECC - Elliptic Curve Cryptography (An asymmetric method of cryptography based on problems involving the algebraic structure of elliptic curves over finite fields.)
ECDSA - Elliptical Curve Digital Signature Algorithm (A use of the elliptical curve algorithm to create the hash value (check verification figure) incorporated in digital signatures. The elliptical curve algorithm is an asymmetric method of cryptography based on problems involving the algebraic structure of elliptic curves over finite fields.)
EDNS - Extension Mechanisms for Domain Name System (A variant of the Domain Name System (DNS) which expands the number of DNS flags without changing the original flags, so that it is compatible with the old DNS system.)
EDP - Electronic Data Processing (Computer-based method of processing data in an electronic form, which can involve recording or entering data into a system, editing, retrieval, transmittal, or the reporting of data.)
EDR - endpoint detection and response (A category of endpoint (end-user computing devices, such as laptops, desktops, and mobile devices) security solutions designed to detect anomolous or unusual activity on endpoints and provide alerts for analysis.)
EF - exposure factor (The harm or amount of loss that might be experienced by an asset during a risk event - the risk an asset is exposed to - written as a percentage or probability. For example, the partial (20 percent) damage or total loss (100 percent) of a vehicle in a car accideent.)
EMM - Enterprise Mobile Management (The policies and governance approach an enterprise takes in dealing with mobile devices, employee use of mobile devices in the work environment, and seurity concerns related to mobile devices and mobile technology.)
ENISA - European Network and Information Security Agency (An agency of the European Union (EU) that focuses on cybersecurity issues.)
EOC - emergency operations center (A physical location where people come together, such as a natural disaster or civil unrest, where the coordination of information and resources for continuing operations and recovery takes place.)
EPC - End Point Control (Security controls and management procedures designed to secure endpoint devices or minimize the attack surface (limit the number of endpoint devices) created by endpoint devices. Endpoints include any end-of-network connection that does not pass on information to another device, or does not serve as a "passthrough" device for information on its way to a final destination. Any computer hardware device that can be connected to the Internet or a local area network can be referred to as an endpoint device. Endpoint devices include desktop computers, user workstations, laptop computers, tablets, smartphones, printers, and IP cameras.)
EPP - endpoint protection (Software, software configurations, or other measures designed to protect endpoints, or to prevent system access through endpoint vulnerabilities. Endpoints provide access to the Internet and include servers, desktop computers, laptops, network infrastructure devices, or any device which is not simply passing information on to a final destination.)
EPS - events per second (System attacks or probes, or unusual changes in system activity recorded in terms of occurrences per second.)
e-RA - Electronic Risk Assessment (On-line program tool for determining the e-authentication assurance level requirements for federal agencies by providing step-by-step data entry forms for gathering and evaluating information.)
ERM - Enterprise Rights Management (Security control measure that provides controls over accessing system data by users. ERM is typically used as an employee security measure that can control or limit actions that can be performed on files, such as copy and paste operations, taking screen shots, printing or other actions that might change data or involve unauthorized use.)
ERM - Enterprise Risk Management (The overall management of risk for an organization - includes all areas of risk, not merely those concerned with technology.)
ESDs - emergency shutdown devices (Early industrial process safety systems used through the 1960s - 1970s comprised of electromechanical relay circuits capable of detecting changes in pressure, temperature, or vibration, and with the capability of shutting down a system or activating pumps, motors or valves to counter unsafe conditions.)
ESI - Electronically Stored Information (Information or data stored electronically (on a computer storage system), including e-mails, word processing documents, spreadsheets, web pages, or in computer files.)
ESP - Encapsulating Security Payload (A Internet Protocol Security (IPSec) protocol which encrypts all or part of a data packet prior to transmission.)
ESRM - Enterprise security risk management (The process of identifying and assessing enterprise security risk, reducing it to an accepable level, and ensuring that it remains at that level.)
ET - emerging threats (New methods of attack, the development of advanced technologies capable of carrying out previously difficult attacks, or the entry of new groups of attackers with advanced skills and technology who pose greater challenges for defenders. )