The AEGIBIT Glossary
The concepts behind secure business software, explained properly: what each one is, why it matters, how it works, where teams go wrong, and how to get it right. Written by the team that builds this way every day.
Zero Trust
A security model that treats every request as untrusted until verified, regardless of whether it originates inside or outside the network. The operating principle: never trust, always verify.
Role-Based Access Control (RBAC)
An access-control method where permissions attach to roles (accountant, manager, owner) rather than to individuals, and people inherit permissions by being assigned a role.
Audit Log (Audit Trail)
A chronological, tamper-resistant record of who did what, when, and from where in a system. Immutable audit logs cannot be edited or deleted, which is what makes them evidence rather than notes.
Prompt Injection
An attack on AI systems where malicious instructions are hidden inside content the model reads (a document, web page, or tool description), tricking it into following the attacker instead of the user.
Tool Poisoning
An attack where the description or metadata of an AI tool (the text a model reads to decide how to use it) carries hidden malicious instructions, corrupting every agent that loads the tool.
Model Context Protocol (MCP)
An open protocol that standardizes how AI models connect to external tools, data sources, and services, letting any compliant model use any compliant tool server.
Row-Level Security (RLS)
A database feature that enforces, at the database itself, which rows each user or tenant can see or change, so isolation holds even if application code has bugs.
Retrieval-Augmented Generation (RAG)
An AI architecture where a model retrieves relevant documents from a trusted knowledge base at question time and answers from them, instead of relying on whatever it memorized in training.
DPDP Act (Digital Personal Data Protection Act, India)
India's data-protection law (2023) governing how organizations collect, process, store, and share the personal data of individuals in India, with consent, purpose limitation, and security obligations.
Multi-Tenant Architecture
A software design where one application instance securely serves many customers (tenants), with each tenant's data isolated as strictly as if they had their own system.
Petty Cash Management
The controlled handling of small day-to-day cash expenses (fuel, repairs, refreshments, courier) across a business, with documented vouchers, approvals, and reconciliation.
CPQ (Configure, Price, Quote)
Software that helps sales teams configure a product or service, price it correctly under current rules, and generate an accurate quotation, fast and without spreadsheet archaeology.
OTP Authentication (One-Time Password)
A login method where a short-lived single-use code (sent by SMS, app, or email, or generated on-device) proves the user controls a registered factor, replacing or supplementing passwords.
Anomaly Detection
Techniques that identify patterns deviating from expected behavior, unusual logins, odd transaction shapes, abnormal usage, so humans can investigate before small oddities become incidents.