Terminology

  • ARF - Academic Research Fleet
  • ARF’s designated risk acceptor(s) - TBD
  • ARF incident response teams - TBD
  • ARF Network - A general term for any ARF Vessel or Institutional Owned / Operated Network segments.
  • CISO - Chief Information Security Officer
  • CIWG - The US ARF Cyberinfrastructure Working Group provides fleetwide oversight for - Cyberinfrastructure and Cybersecurity related issues.
  • Cyber Security Plan - A formal set of documentation, policies and procedures focused on delivering defined desired outcomes in regards to all aspects of cybersecurity.
  • Cyber Security Policy - A set of policy documents which define permitted, prohibited and required activities in regards to cybersecurity.
  • Cyber Security Program - Those activities which take place to implement a Cybersecurity Plan.
  • Cyber Security Strategy - TBD
  • IP - Intellectual Property
  • IP - Internet Protocol
  • IT - Information Technology
  • NSF - National Science Foundation
  • OmniSOC - is a security operations center (SOC) that provides trusted and actionable intelligence to higher education institutions.
  • OT - Operational Technology; A subset of IT dedicated to integrated feedback and control systems typically operated and maintained by the crew onboard research vessels. OT systems may or may not be connected to internal networks or the Internet. (Necessary for the safe operation of a vessel, Permanently installed on the vessel)
  • Red Phone IR Service - Is a short-duration burst-capacity of skilled cybersecurity staff available to aid in Incident Response once per year for one incident up to 25 person/hours at no additional charge, and may be leveraged thereafter on a fee-per-hour basis.
  • ResearchSOC - The NSF-funded ResearchSOC helps make scientific computing resilient to cyberattacks and capable of supporting trustworthy, productive research through operational cybersecurity services, training, and information sharing necessary to a community as unique and variable as research and education (R&E).
  • SatNAG - Satellite Network Advisory Group, a team of technical SMEs who consult on technical decision making for the ARF, initially focused specifically on Satellite Network Communications.
  • SIEM - Security Information and Event Management: Proactive, automated, security event monitoring and reporting.
  • SME - Subject Matter Expert
  • SOC - Security Operations Center
  • vCISO - Virtual CISO - partial-FTE CISO who acts as organizational CISO
  • Virtual Security Team - full operational security team made up of partial-FTE engineers and/or analysts
  • VIS - Vulnerability Identification Service