GLOSSARY OF TERMS

Activity Based Costing
This method allows to determine the actual cost of products and services offered by the organization on the basis of costs associated with every activity related to production of a given product or service.

BPA /Business Process Analysis/
Combination of tools and methodology to reduce costs, add value to the product, reduce production time and minimize risks associated with a business process.

CRM /Customer Relationship Management/
Management of customer relations throughout the cycle: marketing, sales, contract execution, services and support.

ERP /Enterprise Resource Planning/
An integrated system operating with a common data base and functional tools to cover all apsects of company management.

ISO 9001:2000
A standard setting the requirements before quality management systems related to the ability of an organization to deliver products satisfying clients needs and meeting the legal requirements with the ultimate goal of increasing customer satisfaction levels.

ISO 17799:2000
A standard setting the requirement before information security management systems related to the ability of an organization to prove its capacity to manage and protect information, meeting the client needs, the requirements of the organization and the legal requirements in order to assure the maximum protection for critical information areas.

Business Process
An activity or a set of interconnected and interacting activities which uses resources to transform the input into output may be defined as a process.

Information security
The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality,integrity, and availability.

Information system:
A discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.

Business process modelling
A graphic representation of business processes which reflects all the activities, their interconnections and interrelations, the input and output elements as well as resources associated with each activity.

Process approach
A systematic identification and management of processes within an organization and their interrelations.

Information security system
A segment of the overall management system, adopting the risk approach regarding the creation, functioning, monitoring, support and improvement of information security.

Information types:
A specific category of information (e.g., privacy, medical, proprietary, financial, investigative, contractor sensitive, security management), defined by an organization, or in some instances, by a specific law, Executive Order, directive, policy, or regulation.