The road less traveled by

雖然走進資安領域，不在原本的規劃裏，但既然被機緣牽進這村徑，總要好好逛遍這山林，庶幾不負這不可言、不可測的緣法。既然要逛逛這原未涉足的土地，那就得認真閱讀此處的風土誌，要認懂這裡的地圖，就得認得這裡的方言俚語，於是得再服一碗字母湯。

• ACL - Access Control List
• APWG - Anti-phishing Working Group
• BASEL - Basel Accords
• BSI - British Standards Institution
• CA - Continuous Auditing
• CA - Certificate Authority
• CC - Common Criteria
• CCM - Continuous Control Monitoring
• CCM-AC - CCM for Application Configuration
• CCM-MD - CCM for Master Data
• CCM-T - CCM for Transaction
• CEH - Certified Ethical Hacker
• CERT - Community Emergency Response Team
• CM - Continuous Monitoring
• CME - Common Malware Enumeration
• COBIT - Control Objectives for Information and related Technology
• DAD - Database Access Descriptors
• DAM - Database Activity Monitoring
• DMZ - Demilitarized Zone
• DLP - Data Loss Prevention
• DOS - Denial of Service
• DDoS - Distributed DOS
• FERPA - Federal Educational Rights and Privacy Act
• FGAC- Fine-Grained Access Control
• GLBA - Gramm–Leach–Bliley Act
• GPG - GNU Privacy Guard
• GRC - Governance, Risk and Control
• GTAG - Global Technology Audit Guide
• HIPAA -Health Insurance Portability and Accountability Act
• IDS - Intrusion Detection  System
• IPS - Intrusion Prevention System
• IIA - The Institute of Internal Auditors
• ISACA - Information Systems Audit and Control Association
• ISMS - Information Security Management System
• ITIL - Information Technology Infrastructure  Library
• KRI - Key Risk Indicator
• MLS - Multi Level Security
• NIST - National Institute of Standards and Technolog
• PCI-DSS - Payment Card Industry Data Security Standard
• PII - Personally Identifiable Information
• SOAP - Simple Object Access Protocol
• SOX - Sarbanes-Oxley Act
• SSH - Secure Shell
• SSO - Single Sign-On
• VPD - Virtual Private Database
• XSS - Cross Site Scripting