CISA Exam Terminology List:
ENGLISH Meaning
Abend
Acceptance Testing
Access Control
Access Control Table
Access Method
Access Path
Access Rights
Address
Address Space
Addressing
Administrative Controls
Alpha
American Standard Code for Information
Interchange (ASCII)
Analogue, analog
Anonymous File Transfer Protocol (FTP)
Anti-Virus Software
Application Control
Application Layer
Application Program
Application Programmer
Application Programming
Application Tracing and Mapping
Arithmetic-logic Unit (ALU)
Artificial Intelligence (AI)
ASCII (American Standard Code for
Information Interchange)
Assembler
Assembling
Assembly Language
Asymmetric Key (Public Key)
Asynchronous Transfer Mode (ATM)
Asynchronous Transmission
Attenuation
Attribute Sampling
Audit Evidence
Audit Objective
Audit Program
Audit Risk
Audit Trail
Authentication
Authorization
Automated Teller Machine (ATM)
Backup
Bandwidth
Bar Code
Base Case
Baseband
Bastion Host
Batch Control
Batch Processing
BAUD
Baud Rate
Benchmark
Binary Code
Biometric Locks
Biometrics
Black Box Testing
Bridge
Broadband
Browser
Browser caches
Buffer
Buffer (to)
Buffer Capacity
Bus
Bus Topology
Business Continuity Plan
Business Impact Analysis (BIA)
Business Process Re-engineering (BPR)
Business Resumption Plan
Business Risk
Bypass Label Processing (BLP)
Capacity Stress Testing
Card Key
Card Swipes
Central Processing Unit (CPU)
Centralized Data Processing
Certification Authority
Challenge/Response Token
Change Control log
Check Digit
Check Digit Verification (self-checking
digit)
Checkpoint Restart Procedures
Ciphertext
Circuit-switched Network
Circular Routing
Client/Server
Cluster Controller
Coaxial Cable
Cold Site
Communications Controller
Comparison Program
Compensating Control
Compiler
Compiling
Completeness Check
Compliance Testing
Compliance Tests
Comprehensive Audit
Computer Aided Software Engineering
(CASE)
Computer Assisted Audit Technique
(CAAT)
Computer Fraud
Computer Sequence Checking
Computer Virus
Concentrator
Console Log
Contingency Plan
Continuous Auditing Approach
Control Group
Control Risk
Control Section
Cookies
Core Dumps
Corporate Governance
Corrective Control
Critical Path Method (CPM)
CRT (Cathode Ray Tube)
Cyclic redundancy checks
DASD (see Direct Access Storage
Device)
Data Communications
Data Custodian
Data Dictionary
Data Diddling
Data Encryption Standard (DES)
Data Leakage
Data Mirroring
Data Oriented Systems Development
Data Owner
Data Repository
Data Security
Data Structure
Database
Database Administrator (DBA)
Database Management Systems (DBMS)
Database Replication
Database Specifications
DBMS (see Database Management
System)
Decentralization
Decision Support Systems (DSS)
Decryption
Decryption Key
Degauss
Demilitarized Zone
Demodulation
Detection Risk
Detective Control
Dial-back
Dial-In Access Controls
Dial-up Network
Digital Signature
Direct Access Storage Device (DASD)
Disaster Recovery Plan
Discovery Sampling
Diskless Workstations
Distributed Data Processing Network
Domain name server
Down Time Report
Download
Downloading
Dry-pipe Fire Extinguisher System
Dumb Terminal
Dumping
Duplex Routing
Eavesdropping
Echo Checks
eCommerce
EDI (see Electronic Data Interchange)
Edit Controls
Editing
Electronic Cash
Electronic Data Interchange (EDI)
Electronic Funds Transfer (EFT)
E-mail
Embedded Audit Modules
Encapsulation
Encapsulation (objects)
Encryption
Encryption Key
End User Computing
End-user
Ethernet
Exception Reports
Executable Code
Executive Information System
Expected Error Occurrence
Expert Systems
Exposure
Extended Binary-Coded Decimal
Interchange Code (EBCDIC)
Fault-tolerant
Feasibility Study
Fiber Optic Cable
Fiber Optics
Field
File
File Layout
File Server
File Transfer Protocol (FTP)
Financial Audit
Firewall
Firmware
Format Checking
Fourth Generation Language
Frame-relay
Fraud Risk
Full Duplex
Function Point Analysis
GANTT Chart
Gateway
General Computer Controls
Generalized Audit Software
Hacker
Hacking
Half Duplex
Handprint Scanner
Hardware
Hash Totals
Hexadecimal
Hierarchical Database
Host
Hot-site
Image Processing
Incremental Testing
Independence
Indexed Sequential Access Method
(ISAM)
Indexed Sequential File
Inference Engine
Information Engineering
Information Processing Facility (IPF)
Inherent Risk
Inheritance (objects)
Initial Program Load (IPL)
Input Controls
Integrated Service Digital Network
(ISDN)
Integrated Test Facility (ITF)
Integrity
Intelligent Terminal
Interface
Interface Testing
Internal Control
Internal Storage
Internet
Internet Packet (IP) Spoofing
Internet Service Provider (ISP)
Interval Sampling
IPL (see Initial Program Load)
Irregularities
IT governance
JCL (see Job Control Language)
Job Control Language (JCL)
Judgement Sampling
Judgmental Sample
Leased Lines
Librarian
Limit Check
Line of Sight
Link Editor (Linkage Editor)
Local Area Network (LAN)
Log
Logic bombs
Logical Access
Logical Access Controls
Logoff
Logon
Machine Language
Magnetic Card Reader
Magnetic Ink Character Recognition
(MICR)
Management Information System (MIS)
Mapping
Masking
Master File
Materiality
Memory Dump
Message Switching
Meta-tags
Metering Software
Microwave Transmission
Middleware
Modem (Modulator-Demodulator)
Modulation
Monetary Unit Sampling
Multiplexing
Multiplexor
Multiprocessing
Multiprogramming
Network
Network Administrator
Network Hubs
Network Protocol
Network Topology
Node
Noise
Non-repudiation
Normalization
Numeric Check
Object Code
Objectivity
Object-oriented
Off-line Files
Off-site Storage
On-Line
Online Data Processing
Open Systems
Operating System
Operational Audit
Operational Control
Operator Console
Optical Character Recognition (OCR)
Optical Scanner
Output Analyzer
Outsourcing
Packet
Packet Switching
Parallel Simulation
Parallel Testing
Parity Check
Partitioned File
Passive Assault
Password
Performance Testing
Peripherals
PERT (see Program Evaluation Review
Technique)
Piggy-backing
PIN (Personal Identification Number)
Plaintext
Point Of Sales Systems (POS)
Polymorphism (objects)
Port
Posting
Preventive Control
Private Key Cryptosystems
Privileged Mode
Probability Proportional to Size
Production Programs
Production Software
Professional Competence
Program Abends
Program Evaluation Review Technique
(PERT)
Program Flowcharts
Program Narratives
Project Management
Protocol
Protocol Converter
Prototyping
Proxy Server
Public Key Cryptosystem
Public switched network (PSN)
Quality Assurance
Queue
Random Access Memory (RAM)
Range Check
Real-Time
Real-time Processing
Reasonable Assurance
Reasonableness Check
Reciprocal Agreement
Reconciliation
Record
Record, Screen and Report Layouts
Recovery Testing
Redundancy Check
Re-engineering
Regression Testing
Remote Job Entry (RJE)
Remote Log-On
Repository
Request for Proposal (RFP)
Requirements Definition
Reverse Engineering
Ring Topology
Risk
Risk Analysis
Rounding Down
Router
RS-232 Interface
RSA
Run Instructions
Run Time Exit
Run-to-run Totals
Salami Technique
Scanning
Scheduling
Scratch Tapes
Screening Routers
Security Administrator
Security Software
Security Testing
Segregation of Duties
Separation of Duties
Sequence Check
Sequential File
Service Bureau
Single sign-on process
Smart Card
Sniffing
Sockets
Software
Source Code
Source Code Compare Programs
Source Documents
Split Data Systems
Spoofing
Spoofing Program
Spool (Simultaneous Peripheral
Operations Online)
Spooling Program
Standing Data
Star Topology
Statistical Sampling (SP)
Steering Committee
Stop or Go Sampling
Structured Programming
Structured Query Language (SQL)
Substantive Test
Substantive Testing
Surge-Suppression
Symmetric Key Encryption
Synchronous
Synchronous Data Link
Synchronous Transmission
System Exit
System Flowcharts
System Initialization log
System Narratives
System Software
System Testing
Systems Analyst
Systems Development Life Cycle
(SDLC)
Systems Programmer
Table Look-ups
Tape library
Tape Management System (TMS)
TCP-IP Protocol
Telecommunications
Telecommunications Network
Teleprocessing
Terminal
Test Data
Test Generators
Test Programs
Third Party Reviews
Throughput
Time Bomb
Token
Token Ring Topology
Topology
Transaction
Transaction Log
Trap Door
Trojan Horse
Trunks
Twisted Pair Cable
Twisted Pairs
Uninterruptible Power Supply (UPS)
Unit Testing
Uploading
User Service Levels
Utility Programs
Vaccine
Validity Check
Value Added Network (VAN)
Variable Sampling
Variables Estimation
Verification
Virtual Memory
Virtual Private Networks
Virus
Voice Mail
VSAM (Virtual Storage Access Method)
White Box Testing
Wide Area Network (WAN)
Wiretapping
Worm Program
X.25 Interface
NEW TERMS CISA 2002
Balanced scorecard
Deadman door
Digital certificate
eXtensible Markup Language
Filter
Frame Relay assemble/disassembly
(FRAD) device
Intranet
Intrusion
Knowledge Management
Logical access right
Metadata
Packet assembly/disassembly (PAD)
device
Performance measurement
Redundant array of independent disks
(RAID)
Referential integrity
Scope creep
"Thin client architecture"
Throughput index
