Load low-bandwidth site?
Help

Glossary English

The Global Interagency Security Forum (GISF) developed this Glossary to facilitate a common understanding of terms frequently used in security risk management.

The terms and definitions have been drawn from a range of trusted resources, including GISF’s own publications. They have also been informed by a working group of GISF members.

The GISF Glossary is available in four languages: English, French, Spanish and Arabic. The site has been designed to enable easy navigation between terms in each language, supporting more consistent and accurate communication across language barriers.

The GISF Glossary is reviewed and updated regularly, to reflect new terms and changing definitions within the security risk management sector. If you have a term you would like to add to the Glossary or a suggested amendment, please contact us through our feedback form.

I

improvised explosive device (IED)

A device placed or fabricated in an improvised manner incorporating destructive, lethal, noxious, pyrotechnic, or incendiary chemicals and designed to destroy, incapacitate, harass, or distract. It may incorporate military stores but is normally devised from non-military components.
Show translations

incident analysis

The systematic examination of incidents (such as security breaches, safety accidents, or other disruptive events) to understand their causes, impacts, and implications. The goal of incident analysis is to identify weaknesses in security measures, improve response strategies, and prevent future incidents.
Show translations

incident report

An account of events sent after a security incident that provides details on the situation that has occurred, and the actions taken. There are typically three types of incident reports: Immediate incident report (sent immediately or as soon as possible after the incident occurs and often verbal); Incident updates (sent as often as necessary, to provide more information on the incident or situation as it evolves); Post-incident report (completed and sent after the situation is stabilised or the incident is over, providing a written account of the incident and actions taken).
Related terms: incident
Show translations

inclusive security

An approach to security that recognises the impact of an individual’s specific profile on the risks they face, and actively provides them with the guidance and support they need to enable them to fully participate and feel secure.
Related terms: inclusion
Show translations

information security

Refers to the practice of protecting information from unauthorised access, disclosure, disruption, modification, or destruction. This involves implementing policies, procedures, and technical measures to safeguard the confidentiality, integrity, and availability of data.
Show translations

informed consent

The process by which staff give their agreement or permission based upon a clear appreciation and understanding of the risks, implications, and future consequences of an action or decision. Informed consent is central to duty of care; it is vital that staff can discuss concerns and say ‘no’ to a role, trip, or situation that they feel compromises their safety or security.
Show translations

insecure context

An environment where the ability to operate is impacted by a lack of security. Different organisations will create their own classifications of levels of insecure contexts based on their individual risk management processes (e.g., low, medium, high, extreme).
Show translations

intersectionality

An analytical framework used to understand and explore how the different parts of one individual’s identity (‘race’, gender, wealth, sexual orientation, religion etc.) influence their experience of the world. An individual’s intersectional identity impacts how they are perceived, the vulnerabilities they have, and the risks they may face. Adopting an intersectional lens is, therefore, an essential part of SRM and forms the foundation of a person-centred approach.
Related terms: inclusive security
Show translations