The Apache Software Foundation was formed in 1999 and is one of the most active organisations in developing, maintaining and distributing Open Source software. Apache distributions include: Apache HTTP Server: A widely-used web server software that serves web content over the internet. Apache Hadoop: A framework that allows for the distributed processing of large data sets across clusters of computers. Apache Spark: An open-source unified analytics engine for large-scale data processing, with built-in modules for streaming, SQL, machine learning, and graph processing. Apache Tomcat: An open-source implementation of the Java Servlet, JavaServer Pages, and Java Expression Language technologies. Apache Kafka: A distributed event streaming platform capable of handling trillions of events a day. Apache Cassandra: A highly scalable, high-performance distributed NoSQL database designed to handle large amounts of data across many commodity servers. Apache ActiveMQ: A highly scalable and reliable message broker. Further reading List of Apache Software Foundation projects - Wikipedia

Prudential Standard 234 Information Security

Source [Prudential Standard 234 Operational Risk Management (PDF)](https://www.apra.gov.au/sites/default/files/2023-07/Prudential%20Standard%20CPS%20230%20Operational%20Risk%20Management%20-%20clean.pdf

Attack Surface Management (ASM) is the continuous process of identifying, monitoring, and reducing an organisation’s external and internal attack surfaces to minimise cybersecurity risk. ASM involves discovering and assessing all digital assets, including known and unknown internet-facing systems, cloud environments, third-party dependencies, and shadow IT. Attack Surface Management benefits from advances in AI and machine learning and is being used increasingly by organisations as part of their third party risk management strategy. ...

Further reading What Is Attestation? Definition, How It Works, History, and Example - Investopedia Attestation, in Confidential Computing - Microsoft Learn Attestation vs direct reporting - ICAEW

The audit universe is the comprehensive list of all the potential audit areas within an organisation. It serves as a foundational tool for planning and prioritising internal audit activities. Components within the Audit universe may be called Auditable areas, units or entities, depending on the lens the auditor is taking. Further reading Developing a Risk-based Internal Audit Plan - IIA Practice Guide Related pages Risk universe

Auditboard is a cloud-based platform that streamlines audit, risk, and compliance management for enterprises. Further reading Auditboard website Audit and Beyond: The Unbelievably True Story of AuditBoard Related pages Leading GRC vendors

The Australian Prudential Regulation Authority (APRA) is Australia’s financial services industry regulator: APRA is Australia’s prudential supervisor, responsible for ensuring that our financial system is stable, competitive and efficient. Further reading APRA website

An availability zone (AZ) is a distinct location within a cloud provider’s infrastructure, designed to be isolated from failures in other zones. Each availability zone is implemented using one or more data centres, equipped with largely independent power, cooling, and networking to ensure high availability and fault tolerance between zones. Further reading Availability zone (Wikipedia)

AZ-900 is an entry level Microsoft certification to understand the Microsoft Azure cloud platform. It is made up of three learning paths: Part 1: Describe cloud concepts Part 2: Describe Azure architecture and services Part 3: Describe Azure management and governance The course is also suitable for non-technical staff, such as executives and sales teams, and for experienced engineers and architects who need to gain new knowledge of the Azure platform and its features. ...

Azure Event Hubs is a scalable, distributed streaming platform and ingestion service within the Azure cloud platform. Further reading Azure Event Hubs - Microsoft Learn Apache Kafka

An AKS cluster is a managed Kubernetes service provided by Microsoft Azure. Further reading What is Azure Kubernetes Service (AKS)? - Microsoft Learn Related pages Kubernetes

Backpropagation is a supervised learning algorithm used for training artificial neural networks by minimising the error rate through gradient descent. Further reading Definition of backpropagation - Brilliant.org Backpropagation - Wikipedia

Data portability refers to the right granted to individuals to access and transfer their personal data between services, as enshrined in modern data protection laws such as the GDPR. Advocates argue that data portability enhances consumer choice and fosters competition by making it easier to switch providers, thus reducing service provider lock-in. Just as number portability empowered consumers to switch mobile providers without losing their phone number, data portability allows users to move their digital history, preferences, and identity between digital services. However these benefits come with significant risks. Poorly implemented systems and weak controls could allow fraudsters to impersonate users and extract sensitive data. Cybercriminals may spoof new extraction requests or intercept poorly secured transfers, turning a consumer-friendly right into a new attack vector. ...

The Bank of England is the United Kingdom’s central bank, responsible for maintaining monetary stability, regulating financial institutions, in support of the overall UK economy. Further reading Wikipedia - Bank of England Related Prudential Regulation Authority (PRA) Financial Conduct Authority (FCA)