Glossar

IT-Begriffe sind oft komplex, vielschichtig und nicht immer selbsterklärend.

Weitere Infos

Unser IT-Glossar schafft Klarheit

Wir erklären zentrale Begriffe aus den Bereichen Enterprise Service Management (ESM), Wissensmanagement, IT-Finanzmanagement (ITFM) sowie IT-Infrastruktur – von Security über Data bis Endpoint Management. Verständlich, kompakt und praxisnah – für IT-Entscheider, Service Manager und IT-Teams, die einen schnellen und verlässlichen Überblick suchen.

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

3

3-2-1-Regel

A

Availability Management

Adversary Intelligence

Attack Surface Management

AI in Cybersecurity

Agentic SOC

Always-Hot Storage

Adaptive Authentication (Risk-Based Authentication)

Audit-Ready Recovery

Account Takeover (ATO)

Authentication (Authentifizierung)

Authorization (Autorisierung)

Access Control (Zugriffskontrolle)

Access Management

Archive (Archivierung)

All-Flash Storage

Air Gap

Anwendungskonsistentes Backup

API Access Management

Access Policies

Active Directory (AD)

Asset Management

Allokationsschlüssel (Verteilungsschlüssel)

Allokationsregel

Abschreibung

Amortisierte Kosten (periodengerechte Kosten)

Access Review (Rezertifizierung)

Attribute-Based Access Control (ABAC)

AI Agent Identity

Automated Deprovisioning

B

Breach Prevention

Backup as a Service (BaaS)

Backup Isolation

Bulk Restore

Backup Integrity

Backup Monitoring

Backup Retention

Backup Anomaly Detection

Business Email Compromise (BEC)

Backup API Integration

Backup Scalability

Browser Isolation

Block Storage

Backup Repository

Backup-Orchestrierung

Bedrohungsintelligenz

Bill of IT (IT-Leistungsabrechnung)

C

Continual Service Improvement (CSI)

Change Management (Änderungsmanagement)

Change Advisory Board (CAB)

Chatbot

Configuration Management Database (CMDB)

Cloud Detection and Response (CDR)

Cyber Threat Landscape

Cloud Security

Cyber Resilience

Cyber Risk Management

Chargeback

Cloud Backup

Cyber Recovery

Clean Restore

Cloud Access Security Broker (CASB)

Cryptographic Data Integrity

Cross-Application Backup

Configuration Backup

Continuous Threat Exposure Management (CTEM)

Customer Identity and Access Management (CIAM)

Cloud Identity

Compliance Automation

Compliance & Security

Containerisierung

Cybersecurity

CapEx und OpEx

Continuous Access Evaluation (CAE)

D

Data Protection

Digital Forensics

Data Governance

Datenintegration

Data Sovereignty

Data Residency

Data Loss Prevention (DLP)

DMARC (Domain-based Message Authentication, Reporting and Conformance)

DKIM (DomainKeys Identified Mail)

Device Trust

Digital Identity (Digitale Identität)

Data Security Posture Management (DSPM)

Digital Risk Protection (DRP)

Digital Communications Governance (DCG)

Deduplizierung

Datenreplikation

Disaster Recovery (DR)

Disaster Recovery as a Service (DRaaS)

Data Fabric

Directory Integration

DSGVO (Datenschutz-Grundverordnung)

Datenklassifizierung (Datenklassifikation)

Data Loss

Data Leakage

Dormant Accounts (inaktive Konten)

Direct Internet Access (DIA)

DNS Security

Digital Experience Monitoring (DEM)

E

Eskalationsmanagement

Enterprise Service Management (ESM)

Endpoint Security

Endpoint Detection and Response (EDR)

Extended Detection and Response (XDR)

E-Mail Security

E-Discovery

Endpoint

Entitlement Management

Enterprise Browser

F

First Contact Resolution (FCR)

First-Level-Support (1st Level Support)

Firewall as a Service (FWaaS)

File Storage

Forecast (Prognose)

FIDO2

G

Granular Restore

Global Private Backbone

H

Helpdesk

Hyperscaler Independence

Hybrid Cloud Storage

Hauptbuch (General Ledger)

Hybrid-Verrechnung (Hybrid Chargeback)

I

IT-Service-Management (ITSM)

IT-Asset-Management (ITAM)

ITIL (Information Technology Infrastructure Library)

Incident Management (Störungsmanagement)

ITSM-Software (ITSM-Tool)

IT Operations Management (ITOM)

Identity Security

Incident Response

Insider Threat

IT Cost Management

IT Sicherheit

Identity and Access Management

Identity Governance and Administration (IGA)

Immutable Backup

Identity Backup

Identity Threat Detection and Response (ITDR)

Identity Federation

Identity Lifecycle Management

Identity Provider (IdP)

Identity Platform

Identity Automation

Identity Orchestration

ISO 27001

ISMS (Informationssicherheits-Managementsystem)

Identity Management (IdM)

ITFM (IT Financial Management)

IT-Kostenallokation (Kostenumlage)

Istkosten

IT-Budget

Identity Security Posture Management (ISPM)

Intrusion Prevention System (IPS)

J

Just-in-Time Access (JIT)

Joiner-Mover-Leaver (JML)

K

Künstliche Intelligenz (KI) im ITSM

Key Performance Indicator (KPI)

Known-Good-State Recovery

Kubernetes

Kostenpools (Cost Pools)

Kostenstelle

L

Lookalike Domain

Least Privilege (Prinzip der minimalen Rechte)

Local Internet Breakout

M

Mean Time to Resolution (MTTR)

Managed Detection and Response (MDR)

MITRE ATT&CK

Mean Time to Detect (MTD)

Mean Time to Response (MTR)

MITRE Framework

Merkle Tree

Multi-Faktor-Authentifizierung (MFA)

Metadata Backup

Microsoft 365 Backup

Multi-Tenant Management

Machine Identity (Maschinenidentität)

MPLS (Multiprotocol Label Switching)

Managed SASE

Microsegmentation (Mikrosegmentierung)

N

Next-Gen SIEM

Network Detection and Response (NDR)

Netzwerktransparenz (Network Observability)

NIS2 (NIS-2-Richtlinie)

Non-Human Identity (NHI)

Network Segmentation (Netzwerksegmentierung)

O

OAuth 2.0

OpenID Connect (OIDC)

Object Storage

Object Lock

Offsite-Backup

OT Security

Orphaned Accounts (verwaiste Konten)

P

Prozessautomatisierung (ITSM-Automatisierung)

Problem Management (Problemmanagement)

Projektcontrolling

Point-in-Time Recovery

Passwordless Authentication

Privileged Access Management (PAM)

Pentesting (Penetrationstest)

Plan-Ist-Abweichung (Varianz)

Phishing-Resistant MFA

Passkeys

Point of Presence (PoP)

Q

Quality of Service (QoS)

R

Release Management (Releasemanagement)

Ransomware Protection

Recovery Readiness

Recovery Testing

Recovery Automation

Recovery Point Objective (RPO)

Recovery Time Objective (RTO)

Ransomware Recovery

Resilienz (IT)

Resource Towers (TBM)

Role-Based Access Control (RBAC)

S

Self-Service-Portal

Service Owner

Service Request Management

Second-Level-Support (2nd Level Support)

Service Desk

Servicekatalog (Service Catalog)

Service Level Management (SLM)

Security Operations Center (SOC)

SaaS Security

Security Orchestration, Automation and Response (SOAR)

Service Level Agreement (SLA)

Security Analytics

Security Automation

SOC Modernisierung (SOC Modernization)

Security Posture

Shared Responsibility Model

SaaS Data Protection

Security Service Edge (SSE)

Secure Web Gateway (SWG)

Storage as a Service (STaaS)

SaaS Backup

SaaS Data Ownership

Single Sign-On (SSO)

Security Awareness Training

SPF (Sender Policy Framework)

SaaS Recovery

SAML (Security Assertion Markup Language)

Social Login

Secure Access

Sandboxing (Attachment Sandboxing)

Supervision (Kommunikationsüberwachung)

Social Media Compliance

Snapshot

Storage-Virtualisierung

SIEM (Security Information and Event Management)

Schutzbedarfsanalyse

Security Operations (SecOps)

Servicekosten

Showback (Kostenrückmeldung)

Shared Costs (geteilte Kosten)

Shared Services

Segregation of Duties (SoD)

Service Account (Dienstkonto)

Step-Up Authentication

Secure Access Service Edge (SASE)

Software-Defined WAN (SD-WAN)

Single-Pass Architecture

T

Ticketing-System (Ticketsystem)

Threat Intelligence

Threat Hunting

Threat Actor

Threat Detection and Response

Total Cost of Ownership (TCO)

TBM (Technology Business Management)

TBM-Taxonomie

Transfer Pricing (Verrechnungspreise)

TLS Inspection

U

User Provisioning

URL Protection

Unified Storage

Universal Logout

V

Vulnerability Management

Vertragsmanagement

Vendor Independence

Vendor Email Compromise (VEC)

Verrechnungssatz (Rate Card)

W

Workaround (Umgehungslösung)

Wissensmanagement (Knowledge Management)

Wissensdatenbank (Knowledge Base)

WORM (Write Once, Read Many)

Workforce Identity

WebAuthn (Web Authentication API)

X

XIoT Security

Z

Zero Trust Security

Zero-Day Exploit

Zero Trust Architektur

Zero Trust Network Access (ZTNA)

Zuordnungsmetadaten (Tags & Labels)

Zero Standing Privileges (ZSP)