THE STANDARDISED LANGUAGE OF THE DIGITAL TRUST PROFESSION

Why Standardised Language Matters

Digital Trust requires:

• clear communication across organisations

• consistency in frameworks and capability models

• alignment across jurisdictions and sectors

​

Without standardised definitions, organisations face:

• fragmented understanding

• inconsistent implementation

• misalignment with recognised frameworks

​

The Digital Trust Glossary ensures clarity, consistency, and alignment across the profession.

​

Foundational Terms

• Digital Trust - The confidence that people, organisations and society place in digital systems to operate safely, securely, ethically and reliably.

• Digital Trust Profession - The global discipline integrating governance, cybersecurity, privacy, resilience, operational risk and AI assurance into a unified capability.

• Digital Trust Professional - A practitioner responsible for ensuring digital systems operate with integrity, transparency, security and accountability.

• Digital Trust Body of Knowledge™ (DTBoK™) - The formal canon defining the competencies, domains and practices of the Digital Trust Profession.

​

Governance & Leadership

• Governance - The structures, accountability and oversight ensuring digital operations are ethical, transparent and aligned to organisational objectives.

• Accountability - Clear ownership of decisions, risks and outcomes across digital systems and processes.

• Ethical Oversight - Ensuring digital technologies, data and AI are used responsibly and in alignment with societal expectations.

​

Cybersecurity & Resilience

• Cybersecurity - Protection of systems, networks and data from threats, compromise and disruption.

• Operational Resilience - The ability of an organisation to withstand, respond to and recover from incidents while maintaining critical services.

• Incident Response - Coordinated actions to detect, contain and remediate cybersecurity events.

• Threat Intelligence - Evidence‑based insights into adversaries, vulnerabilities and emerging risks.

​

Data Protection & Privacy

• Data Protection - Safeguarding personal and sensitive information through appropriate controls and governance.

• Privacy - Ensuring individuals’ rights, freedoms and expectations are respected in the handling of their data.

• Data Minimisation - Collecting and retaining only the data necessary for a defined purpose.

​

Operational Risk & Assurance

• Operational Risk - The potential for loss or disruption arising from people, processes, systems or external events.

• Assurance - Evidence‑based confidence that controls, processes and systems are effective and reliable.

• Control Effectiveness - The degree to which a security or governance control achieves its intended purpose.

​

AI Governance & Responsible AI

• AI Governance - The structures, policies and oversight ensuring AI systems are safe, transparent and aligned with ethical and regulatory expectations.

• Responsible AI - The practice of designing, deploying and monitoring AI systems in ways that are fair, accountable and trustworthy.

• Algorithmic Transparency - The ability to understand how AI systems make decisions and what data influences their outputs.

​

Supply Chain & Third‑Party Trust

• Supply Chain Trust - Confidence that third‑party providers and partners operate securely and responsibly.

• Third‑Party Risk - Risks arising from vendors, suppliers, contractors or external service providers.

• Assured Procurement - Procurement processes that validate the security, compliance and trustworthiness of suppliers.

​

Credentialling & Professional Pathways

• Digital Trust Professional® (DTP®) - Credentialling programme for professionals operating in real‑world cybersecurity and Digital Trust environments.

• Digital Trust Specialist® (DTSp®) - Specialist‑level credentials for governance, risk management, cybersecurity, privacy, data protection, organisational resilience and AI assurance professionals.

• NIST Cybersecurity Professional® (NCSP®) - Credentialling programme for professionals aligned to the NIST Cybersecurity Framework for operational cybersecurity capability.

• Competency Framework - A structured model defining the skills, behaviours and knowledge required for professional practice.

​

Standards & Frameworks

• NIST Cybersecurity Framework (CSF 2.0) - A globally recognised framework for managing cybersecurity risk.

• UK NCSC Cyber Assessment Framework (CAF) - A framework for assessing and improving cyber resilience in high‑assurance environments.

• ISO/IEC 27001:2022 - The international standard for information security management systems.

• ENISA Guidance - European Union recommendations for cybersecurity, resilience and digital governance.

​

Trust, Ethics & Accountability

• Transparency - Clear communication about how digital systems operate, make decisions and handle data.

• Integrity - Ensuring systems, data and processes remain accurate, consistent and unaltered.

• Accountable AI - Ensuring AI‑enabled decisions can be traced, justified and governed.

​

Organisational Capability

• Digital Maturity - The degree to which an organisation can operate safely, securely and effectively in a digital environment.

• Capability Development - Building the skills, processes and structures required for Digital Trust.

• High‑Assurance Environment - Contexts where security, compliance and trust are critical to organisational resilience (e.g., defence, law enforcement, CNI).

​

Part of the Digital Trust Body of Knowledge™ (DTBoK™)

The glossary forms part of the Digital Trust Body of Knowledge™ supporting:

• organisation policy and governance

• capability frameworks

• professional credential alignment

• cross-sector and cross-jurisdiction communication

​

By defining the language of Digital Trust, The Digital Trust Institute® (DTI®) supports the consistent development of capability, standards, and professional practice worldwide.