Page 148 - CITP Review

Data governance – An entity’s management of data in terms of availability, relevancy, usability,
integrity, and security.

Data mart – A cogent subset of data warehouse database that is useful to one or more users of
the entity, or its customers or vendors for reporting or analyzing information.

Data mining – A process of examining large data sets for strategic purposes of learning
something previously unknown from the data itself.

Data visualization – The creation and study of the visual representation of data. It helps people
understand data using visual analysis and can be viewed as a modern equivalent of visual
communication.

Data warehouse – A data repository of historical and possibly current data that has been
cleansed, transformed, and loaded into the repository in a standardized format for business
intelligence gathering, data mining, analytics, and other similar purposes.

Database – A closely related collection of data files where the data is shared among users.
Database management system – A DBMS is a system of software for creating, updating, and
querying a database.

Decision support system – A DSS is a system of applications, data, and usually dashboard that
supports managers, often modeling data or problems to facilitate effective decisions.

Deep web – Effectively a secret web to which normal users do not have access. The deep web
consists of a website or any page on the website not indexed by search engines. Users can
access this page only if they become an authorized user with knowledge of the URL, possession
of a username and password, and any other necessary credentials.

Denial of service – An attack that occurs when legitimate users are unable to access information
systems, devices, or other network resources due to the actions of a malicious cyber threat
actor. This attack is accomplished by flooding the targeted host or network with traffic until the
target cannot respond or simply crashes, preventing access for legitimate users.

Detection risk – Detection Risk (DR) is the risk that the auditor will not detect a material
misstatement in the financial statements of the entity being audited.

Disaster recovery plan – A plan that is needed in the event that the entity is the victim of a
catastrophic event such as a fire, flood, tornado, or hurricane where technologies, systems, and
data are completely destroyed, as well as facilities and supplies needed to properly operate and
function.
Distributed denial of service – A denial of service that uses a number of machines in concert to
attack a single target.

Electronic commerce – Electronic business applications or processes that facilitate commercial
transactions. Electronic commerce (e-Commerce) can involve electronic funds transfer, supply
chain management, e-marketing, online marketing, online transaction processing, electronic

© 2019 Association of International Certified Professional Accountants. All rights reserved. Glossary 4