Skip to content
Knowledge Base

Glossary

Plain-English definitions for the terminology used across Agilewing.

001
BYOK
A practice where customers generate and control their own encryption keys instead of relying on the cloud provider’s key management.
002
CCPA
A California law that gives consumers rights to know, delete, and opt out of the sale of their personal information.
003
CDN
A network of geographically distributed servers that caches and delivers web content from locations closest to the user for faster load times.
004
China MLPS 2.0
A Chinese cybersecurity regulation that requires organizations to classify and protect their information systems according to security levels.
005
Cloud Migration
The process of moving applications, data, and other IT assets from on-premises infrastructure to a cloud environment.
006
Cross-Border Data Transfer
The movement of data across national borders, which can trigger compliance obligations under privacy and security regulations.
007
Data Residency
The physical location where an organization’s data is stored, influencing which laws and security standards apply.
008
Data Sovereignty
The principle that digital data is subject to the laws and governance of the country in which it is stored or processed.
009
DLP
Tools and policies that identify, monitor, and block sensitive data from being transferred or leaked outside an organization.
010
Edge Computing
A model that processes data near the source—such as on a device or local server—instead of sending it to a distant data center, reducing latency.
011
GDPR
A European Union law that sets strict requirements for how businesses collect, store, and process personal data of EU individuals.
012
Lift-and-Shift
A migration approach where applications are moved to the cloud without making significant changes to their architecture.
013
MSS
An outsourced service where a third party monitors, detects, and responds to security events on behalf of a client.
014
Multi-CDN
A strategy that uses more than one content delivery network simultaneously to improve reliability, performance, and resilience against outages.
015
PCI-DSS
A set of security standards that organizations must follow when handling credit card transactions to protect cardholder data.
016
PDPA
A generic term for data protection laws in various countries (e.g., Singapore, Thailand) that regulate how personal data is handled.
017
PoP
A physical location, often a server rack, where a CDN or network provider has equipment to serve content and handle traffic for a region.
018
Re-Platforming
A migration strategy that involves moving an application to the cloud while making modest modifications, such as switching to a managed database service.
019
RPO
The maximum acceptable amount of data loss measured in time, indicating how far back in time data must be recoverable.
020
RTO
The maximum acceptable time allowed to restore a system after a disruption, defining how quickly operations must resume.
021
SASE
A cloud-native architecture that combines network connectivity and security functions, such as firewall and identity access, into a single service.
022
SIEM
A platform that aggregates security data from multiple sources, analyzes it for threats, and generates alerts for analysts.
023
SLA
A contract that specifies the expected performance metrics, uptime guarantees, and remedies if those targets are not met.
024
SOC
A dedicated team and facility that continuously monitors an organization’s systems to detect, analyze, and respond to security incidents.
025
Zero Trust Architecture
A security model that requires every user, device, and application to be authenticated and authorized before accessing resources, regardless of network location.