Glossary English

The process of duplicating and storing data from an organisation’s information systems in a secure location to protect data loss, corruption, theft or damage. This practice ensures that data can be restored to its original state after a security incident, hardware failure, accidental deletion, or a natural disaster.

The process of destroying data stored on hard disks and other forms of electronic media so that it is completely unreadable and cannot be accessed or used for unauthorised purposes (also referred to as data disposal or shredding). Security information management requires sensitive information to be clearly separated from routine information in case the destruction of data needs to be done quickly.

The individual(s) or group responsible for making strategic decisions and who are accountable for the success or failure of any actions. During a crisis the DMA is tasked with ensuring the crisis management team (CMT) is enabled to manage the incident effectively. They approve the incident management strategy but are not involved in the day-to-day management of the crisis.

Mass gathering of people for a political or social purpose that is non-violent. This includes protests, marches, sit-ins, picketing etc.

The process of holding a person/people against their will by an individual or group. While there may be no intention to cause harm, there is also no clear timeline or pre-condition for their release. Reasons for detention can range from a perceived crime or offence, documentation problems, unhappiness with an organisation or its programmes, to concerns for the ‘security’ of the detainees. A detention may become an arrest when formal charges are made by the detaining authority.

A security strategy that involves reducing or removing threats by posing a counter-threat that will deter or influence aggressors. Examples include armed protection, diplomatic/political leverage, temporary suspension of activities or programme closure as a security strategy.

Measures, strategies, and processes that aim to mitigate risks related to the use of digital technologies and an individual’s and/or organisation’s digital presence.

The process of revealing information. A disclosure is usually made with a degree of confidentiality. It refers to how a person learns about an event/experience. Disclosure is often a process rather than a single/specific event.

The unfair or prejudicial treatment of individuals or groups based on protected characteristics such as ‘race’, ethnicity, gender, age, sexual orientation, disability, religion, or other personal attributes. It involves actions, policies, or practices that result in unequal opportunities or outcomes for certain groups, often perpetuating social inequality or exclusion.

False or inaccurate information that is shared with the explicit intent to mislead or cause harm.

Refers to strategies and practices aimed at creating a workplace where diverse perspectives are valued, equitable opportunities are provided, and all individuals feel included and respected. It often entails establishing organisational policies, structures, systems and programmes that promote more diversity, equity and inclusion.

An organisation’s responsibility to minimise the harm they may be doing inadvertently as a result of their organisational activities.

Organisations that work in both humanitarian and development programming. This may also include multi-mandated organisations working on human rights, advocacy, peacebuilding, conflict resolution etc.

Duty of care is the moral and, in many cases, legal obligation of an employer to provide a reasonable standard of care towards its personnel, and to mitigate, or otherwise address all foreseeable risks that may harm or injure its employees, those acting on its behalf, or for whom it has a level of responsibility. Legal obligations will vary according to the jurisdiction of existing legislation and duty of care is not limited to contractual relations such as those between an employer and employee. The degree of responsibility an organisation has towards an individual can also be determined by the extent to which the organisation controls the working environment or activities. Duty of care obligations often extend to those acting on behalf of the organisation, including staff, volunteers, consultants, visitors, dependents, and in some cases affected populations.