Wiretapping is a passive attack that eavesdrops on communication. It is only legal with prior consent or a warrant.

The OWASP Top 10 is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications.

Security control volatility is a term used to refer to the likelihood of change in security control. This is an important concept to consider, as it can impact the effectiveness of a security control over time. Resources that provide further information on security control volatility include the National Institute of Standards and Technology (NIST) Security Control Volatility Framework and the International Organization for Standardization (ISO) 27000 series of standards.

Role based access control (RBAC) is an alternative to traditional discretionary (DAC) and mandatory access control (MAC) policies. The principle motivation behind RBAC is the desire to specify and enforce enterprise-specific security policies in a way that maps naturally to an organization's structure. Traditionally, managing security has required mapping an organization's security policy to a relatively low-level set of controls, typically access control lists.