This glossary explains acronyms frequently encountered in the Technology & Telecom industry, with a focused view of the IT Services, Cloud & Data Centers Practice. It helps executives and practitioners navigate cloud delivery, managed services, critical-facility operations, resilience, security, compliance, sustainability, and commercial performance.
0–9 A B C D E F G H I J K L M N O P Q R S T U V W X Z
| 0–9 | |
| 2N | Two-N Redundancy: A critical-facility design providing two fully independent systems, each capable of supporting the entire load, to reduce exposure to equipment failure or maintenance events. |
| 2N+1 | Two-N Plus One Redundancy: A design combining two complete capacity paths with an additional component, providing greater fault tolerance for especially critical infrastructure. |
| 24/7 CFE | 24/7 Carbon-Free Energy: An energy-procurement objective that seeks to match electricity consumption with carbon-free generation in every location and hour, rather than only on an annual basis. |
| A | |
| AC | Alternating Current: The form of electrical power commonly delivered by utility grids and distributed through data-center electrical systems before conversion where required by computing equipment. |
| AHJ | Authority Having Jurisdiction: The organization or official responsible for interpreting and enforcing applicable building, electrical, fire, and safety requirements for a facility. |
| AHU | Air Handling Unit: Equipment that filters, conditions, and circulates air through a building or data hall as part of the cooling and ventilation system. |
| AIOps | Artificial Intelligence for IT Operations: The application of analytics and machine learning to operational telemetry to detect anomalies, correlate events, automate responses, and improve service reliability. |
| AMS | Application Management Services: Outsourced services covering application monitoring, support, maintenance, enhancement, and lifecycle management under defined service commitments. |
| ANSI/TIA-942 | American National Standards Institute/Telecommunications Industry Association Standard 942: A widely used data-center standard addressing site location, architecture, electrical and mechanical systems, telecommunications infrastructure, fire protection, and redundancy. |
| AOS | Accredited Operations Specialist: An Uptime Institute credential focused on applying operational sustainability principles to critical-facility management and risk reduction. |
| API | Application Programming Interface: A defined mechanism through which software components exchange data or invoke services, enabling cloud automation, integration, and programmable infrastructure management. |
| APM | Application Performance Monitoring: The collection and analysis of application availability, latency, transaction, dependency, and error data to maintain service performance and diagnose problems. |
| ASHRAE | American Society of Heating, Refrigerating and Air-Conditioning Engineers: A standards organization whose thermal guidelines and environmental classes are widely applied to data-center cooling, temperature, humidity, and equipment-operating conditions. |
| ATD | Accredited Tier Designer: An Uptime Institute credential for professionals who design data-center infrastructure according to recognized Tier performance and redundancy principles. |
| ATS | Accredited Tier Specialist: An Uptime Institute credential demonstrating knowledge of applying Tier concepts to data-center operations, management, and infrastructure decisions. |
| ATS | Automatic Transfer Switch: Electrical equipment that transfers a load between normal and backup power sources when it detects a supply failure or unacceptable power condition. |
| AWS | Amazon Web Services: A major public-cloud platform providing computing, storage, database, networking, security, analytics, and managed infrastructure services. |
| AZ | Availability Zone: A distinct infrastructure location within a cloud region used to distribute workloads and reduce the risk that a localized failure disrupts an entire service. |
| B | |
| BaaS | Backup as a Service: A managed offering that protects data and workloads using provider-operated backup infrastructure, policies, retention, monitoring, and recovery capabilities. |
| BCDR | Business Continuity and Disaster Recovery: The combined discipline of maintaining essential services during disruption and restoring technology, facilities, data, and operations following a disaster. |
| BCM | Business Continuity Management: A governance process for identifying disruption risks, defining continuity requirements, preparing response capabilities, and validating organizational resilience. |
| BCP | Business Continuity Plan: A documented set of roles, procedures, dependencies, and recovery arrangements for sustaining critical business services during significant disruption. |
| BESS | Battery Energy Storage System: A system that stores electrical energy for backup, peak management, grid services, or renewable-energy integration at a data-center site. |
| BGP | Border Gateway Protocol: The routing protocol used to exchange reachability information between autonomous networks, making it fundamental to cloud connectivity, multihoming, and internet resilience. |
| BIA | Business Impact Analysis: An assessment that identifies critical services, dependencies, disruption consequences, and time-based recovery priorities for continuity planning. |
| BICSI | Building Industry Consulting Service International: A professional association that publishes information and communications technology infrastructure standards and administers credentials relevant to data-center design and installation. |
| BMS | Building Management System: A centralized control platform that monitors and manages mechanical, environmental, and other facility systems such as cooling, ventilation, and alarms. |
| BREEAM | Building Research Establishment Environmental Assessment Method: A sustainability assessment framework used to evaluate buildings, including data centers, across energy, water, materials, waste, pollution, and management criteria. |
| BTU | British Thermal Unit: A unit of heat frequently used when specifying cooling capacity and quantifying thermal loads in facilities. |
| BYOK | Bring Your Own Key: A cloud-encryption model in which a customer supplies or imports its own cryptographic key for use with a provider’s services. |
| BYOL | Bring Your Own License: A commercial model allowing customers to apply eligible existing software licenses to cloud or outsourced infrastructure, subject to vendor terms. |
| C | |
| C5 | Cloud Computing Compliance Criteria Catalogue: A German Federal Office for Information Security control framework used to assess the information-security practices of cloud service providers. |
| CaaS | Containers as a Service: A cloud service model providing managed container deployment, orchestration, scaling, networking, and lifecycle capabilities. |
| CAB | Change Advisory Board: A governance group that reviews significant service changes for risk, readiness, scheduling, dependencies, and potential customer impact. |
| CAFM | Computer-Aided Facility Management: Software used to manage facility assets, space, maintenance, work orders, documentation, and operational planning. |
| CAIQ | Consensus Assessments Initiative Questionnaire: A Cloud Security Alliance questionnaire used by customers to evaluate cloud providers against standardized security and control questions. |
| CAPEX | Capital Expenditure: Spending on long-lived assets such as land, buildings, power systems, cooling equipment, and infrastructure, central to data-center investment decisions. |
| CASB | Cloud Access Security Broker: A security control point that provides visibility, policy enforcement, threat protection, and data safeguards across cloud-service usage. |
| CCM | Cloud Controls Matrix: A Cloud Security Alliance control framework for assessing cloud security, privacy, compliance, governance, and shared-responsibility practices. |
| CCSP | Certified Cloud Security Professional: An independent professional certification covering cloud architecture, data security, platform security, operations, compliance, and legal risk. |
| CCTV | Closed-Circuit Television: Video-surveillance technology used to monitor data-center perimeters, entrances, loading areas, cages, and other controlled spaces. |
| CDCE | Certified Data Centre Expert: A professional credential focused on advanced data-center design, operations, availability, capacity, efficiency, and risk management. |
| CDCP | Certified Data Centre Professional: A professional credential covering core data-center facilities, availability, power, cooling, security, operations, and management concepts. |
| CDCS | Certified Data Centre Specialist: A professional credential addressing data-center design and operational subjects at a more advanced level than foundational certification. |
| CDN | Content Delivery Network: A geographically distributed platform that caches and serves digital content closer to users to improve latency, scalability, and resilience. |
| CDP | Continuous Data Protection: A protection method that captures data changes continuously or at very short intervals, enabling restoration to more granular points in time. |
| CFD | Computational Fluid Dynamics: Simulation techniques used to model airflow and temperature behavior, supporting data-hall layout, cooling optimization, and hotspot prevention. |
| CI/CD | Continuous Integration and Continuous Delivery: Automated practices for building, testing, and releasing software and infrastructure changes rapidly and consistently. |
| CIDR | Classless Inter-Domain Routing: A method for allocating and expressing internet-address ranges efficiently, widely used in cloud virtual-network design and routing policy. |
| CIS | Center for Internet Security: A nonprofit organization whose configuration benchmarks and controls are widely used to harden operating systems, cloud platforms, containers, and infrastructure. |
| CKA | Certified Kubernetes Administrator: A performance-based certification validating practical skills in administering and troubleshooting Kubernetes clusters. |
| CKAD | Certified Kubernetes Application Developer: A performance-based certification covering the design, configuration, deployment, and troubleshooting of applications on Kubernetes. |
| CKS | Certified Kubernetes Security Specialist: A performance-based certification addressing cluster hardening, system security, supply-chain controls, monitoring, and incident response. |
| CLI | Command-Line Interface: A text-based method for configuring and operating cloud services, infrastructure tools, operating systems, and automation workflows. |
| CLOUD Act | Clarifying Lawful Overseas Use of Data Act: A United States law governing certain legal demands for data held by communications and cloud providers, including data stored outside the country. |
| CMDB | Configuration Management Database: A repository that records technology components, services, dependencies, ownership, and relationships to support change, incident, asset, and service management. |
| CMK | Customer-Managed Key: A cryptographic key controlled through a customer’s policies and permissions rather than managed entirely by a cloud provider. |
| CMMC | Cybersecurity Maturity Model Certification: A United States Department of Defense program for verifying that contractors and relevant service providers protect sensitive federal information at the required level. |
| CMMS | Computerized Maintenance Management System: Software that schedules preventive maintenance, manages work orders, records equipment history, and tracks parts and labor for critical facilities. |
| CMP | Cloud Management Platform: A toolset that provides governance, provisioning, monitoring, automation, security, and cost-management capabilities across cloud environments. |
| CNAPP | Cloud-Native Application Protection Platform: An integrated security platform that combines posture management, workload protection, entitlement analysis, and development-pipeline controls for cloud-native environments. |
| CNCF | Cloud Native Computing Foundation: A Linux Foundation organization that hosts and governs open-source projects used for containers, orchestration, observability, service networking, and cloud-native infrastructure. |
| CNI | Container Network Interface: A specification and plugin model used to configure network connectivity for containers in orchestrated environments. |
| CO2e | Carbon Dioxide Equivalent: A common unit that expresses the climate impact of different greenhouse gases on a comparable basis for emissions accounting. |
| COBIT | Control Objectives for Information and Related Technologies: An information and technology governance framework used to align controls, risk management, performance, and accountability with business objectives. |
| COP | Coefficient of Performance: A ratio of cooling or heating output to energy input used to evaluate the efficiency of chillers, heat pumps, and related mechanical systems. |
| CPU | Central Processing Unit: The primary general-purpose processor in a computing system and a fundamental unit for cloud capacity, workload sizing, and performance planning. |
| CRAC | Computer Room Air Conditioner: A precision cooling unit that typically uses direct-expansion refrigeration to control temperature in computer rooms and data halls. |
| CRAH | Computer Room Air Handler: A precision air-handling unit that commonly uses chilled water to remove heat and circulate conditioned air through a data hall. |
| CRI | Container Runtime Interface: A Kubernetes interface that enables cluster software to use compatible container runtimes without embedding runtime-specific code. |
| CSA | Cloud Security Alliance: An industry organization that develops cloud-security guidance, control frameworks, assurance programs, and professional education. |
| CSA STAR | Cloud Security Alliance Security, Trust, Assurance, and Risk: A cloud-provider assurance program and registry incorporating self-assessment, third-party certification, and continuous-assurance options. |
| CSI | Container Storage Interface: A standard interface that allows container orchestrators to provision and manage storage through vendor-neutral drivers. |
| CSI | Continual Service Improvement: A structured service-management discipline for identifying, prioritizing, implementing, and measuring improvements to services and operating processes. |
| CSP | Cloud Service Provider: An organization delivering shared or dedicated computing, storage, platform, software, security, or related services through cloud operating models. |
| CSPM | Cloud Security Posture Management: Continuous assessment of cloud configurations and controls to detect misconfigurations, excessive exposure, policy violations, and compliance gaps. |
| CUD | Committed Use Discount: A cloud-pricing discount granted in exchange for committing to a defined level or duration of resource consumption. |
| CUE | Carbon Usage Effectiveness: A data-center sustainability metric relating total carbon emissions from energy use to the energy consumed by information technology equipment. |
| CVE | Common Vulnerabilities and Exposures: A standardized identification system for publicly disclosed cybersecurity vulnerabilities, supporting consistent remediation and risk tracking. |
| CVSS | Common Vulnerability Scoring System: A standardized method for rating vulnerability severity using exploitability, impact, scope, and environmental considerations. |
| CWPP | Cloud Workload Protection Platform: Security technology that protects virtual machines, containers, serverless functions, and other workloads across private and public clouds. |
| D | |
| DaaS | Desktop as a Service: A cloud service that delivers centrally managed virtual desktops to users on a subscription or consumption basis. |
| DBaaS | Database as a Service: A managed cloud offering in which the provider handles database provisioning, maintenance, patching, backups, scaling, and availability. |
| DC | Data Center: A purpose-built facility or dedicated space housing computing, storage, networking, power, cooling, physical security, and supporting operational systems. |
| DC | Direct Current: Electrical current flowing in one direction, used internally by electronic equipment and in some battery, backup-power, and facility-distribution architectures. |
| DCaaS | Data Center as a Service: A consumption-based model for obtaining data-center capacity, infrastructure, and operational support without owning the underlying facility. |
| DCEP | Data Center Energy Productivity: A metric relating useful computing work to total facility energy consumption, intended to connect energy use with productive output. |
| DCI | Data Center Interconnect: High-capacity network connectivity linking separate data centers for replication, workload mobility, resilience, and distributed service delivery. |
| DCiE | Data Center Infrastructure Efficiency: The ratio of information technology equipment energy to total facility energy, expressed as a percentage and mathematically inverse to power usage effectiveness. |
| DCIM | Data Center Infrastructure Management: Software that integrates facility and technology data to manage capacity, assets, energy, environmental conditions, connectivity, and operational workflows. |
| DCOI | Data Center Optimization Initiative: A United States federal program establishing requirements and metrics for consolidating, optimizing, and improving government data-center infrastructure. |
| DDoS | Distributed Denial of Service: An attack in which many systems overwhelm a service or network with traffic, requiring scalable detection, filtering, and resilience controls. |
| DHCP | Dynamic Host Configuration Protocol: A network protocol that automatically assigns addresses and related configuration parameters to connected devices. |
| DLP | Data Loss Prevention: Policies and technologies that identify sensitive information and prevent unauthorized disclosure, transfer, or storage across endpoints, networks, and cloud services. |
| DNS | Domain Name System: The distributed naming system that translates domain names into network addresses and is essential to service availability and routing. |
| DORA | Digital Operational Resilience Act: A European Union regulation imposing technology-risk, incident-reporting, resilience-testing, and third-party oversight requirements on financial entities and relevant providers. |
| DR | Disaster Recovery: The capabilities and procedures used to restore technology services, data, connectivity, and supporting infrastructure after a major disruption. |
| DRaaS | Disaster Recovery as a Service: A managed cloud service providing replication, orchestration, failover, recovery testing, and restoration for protected workloads. |
| DSPM | Data Security Posture Management: Technology that discovers sensitive data across cloud environments, evaluates access and exposure, and prioritizes remediation of data-security risks. |
| E | |
| EAC | Energy Attribute Certificate: A tradable instrument documenting the generation attributes of a quantity of electricity, used to support renewable-energy and emissions claims. |
| EDR | Endpoint Detection and Response: Security technology that monitors endpoints for malicious activity and supports investigation, containment, and remediation by internal or managed security teams. |
| EER | Energy Efficiency Ratio: A measure of cooling output relative to electrical input under specified conditions, used when evaluating cooling equipment performance. |
| EN 50600 | European Standard 50600, Information Technology — Data Centre Facilities and Infrastructures: A European standards series covering data-center design, construction, availability, security, energy efficiency, and operational management. |
| EPD | Environmental Product Declaration: A standardized, independently verified disclosure of a product’s lifecycle environmental impacts, useful when assessing construction materials and facility equipment. |
| EPMS | Electrical Power Monitoring System: A platform that monitors electrical distribution, meters, breakers, power quality, capacity, events, and alarms throughout a critical facility. |
| EPO | Emergency Power Off: A safety mechanism that rapidly disconnects electrical power to designated equipment or areas during a serious emergency. |
| ERE | Energy Reuse Effectiveness: A metric derived from power usage effectiveness that accounts for energy exported from a data center and productively reused elsewhere. |
| ERF | Energy Reuse Factor: The proportion of total data-center energy that is exported for beneficial use, such as heating nearby buildings or industrial processes. |
| EUC | End-User Computing: The devices, virtual desktops, operating environments, collaboration tools, and support services through which employees access enterprise technology. |
| EU ETS | European Union Emissions Trading System: A cap-and-trade program for greenhouse-gas emissions that can affect electricity costs, energy sourcing, and certain backup-generation operations. |
| EVPN | Ethernet Virtual Private Network: A standards-based control-plane technology used to build scalable, resilient Layer 2 and Layer 3 networks across data-center fabrics and interconnected sites. |
| F | |
| FaaS | Function as a Service: A serverless cloud model that executes event-driven code while the provider manages the underlying runtime, scaling, and infrastructure. |
| FCR | First Contact Resolution: The percentage of support requests resolved during the initial interaction without escalation or repeat contact, indicating service-desk effectiveness. |
| FedRAMP | Federal Risk and Authorization Management Program: A United States government program providing standardized security assessment, authorization, and continuous monitoring for cloud products and services. |
| FIPS | Federal Information Processing Standards: United States government standards covering areas such as cryptographic algorithms and validated security modules used in regulated cloud environments. |
| FISMA | Federal Information Security Modernization Act: A United States law establishing information-security responsibilities and risk-management requirements for federal systems and their service providers. |
| FLOPS | Floating-Point Operations per Second: A measure of computational throughput commonly used to compare high-performance computing systems and cloud accelerator capacity. |
| FMEA | Failure Modes and Effects Analysis: A structured method for identifying how equipment or processes might fail, evaluating consequences, and prioritizing preventive controls. |
| FOCUS | FinOps Open Cost and Usage Specification: An open specification that normalizes cloud billing data to improve cost allocation, reporting, analytics, and management across providers. |
| FRT | First Response Time: The elapsed time between a customer submitting a support request and receiving an initial service response. |
| FT | Fault Tolerance: The ability of a system to continue operating correctly when one or more components fail. |
| G | |
| GCP | Google Cloud Platform: A major public-cloud platform providing computing, storage, networking, data, analytics, artificial intelligence, security, and managed infrastructure services. |
| GDPR | General Data Protection Regulation: The European Union’s principal personal-data protection regulation, shaping cloud processing agreements, security controls, data location, retention, and breach response. |
| GHG | Greenhouse Gas: A gas that contributes to atmospheric warming and is measured in data-center emissions inventories covering electricity, fuel, refrigerants, and value-chain activities. |
| GPU | Graphics Processing Unit: A parallel-processing device increasingly used in cloud infrastructure for artificial intelligence, analytics, simulation, rendering, and high-performance computing. |
| GWP | Global Warming Potential: A measure comparing the heat-trapping effect of a gas with carbon dioxide, important when selecting and managing cooling refrigerants. |
| H | |
| HA | High Availability: An architecture and operating approach designed to minimize service interruption through redundancy, failover, monitoring, and rapid recovery. |
| HCI | Hyperconverged Infrastructure: A software-defined architecture combining computing, storage, virtualization, and management on standardized clustered nodes. |
| HIPAA | Health Insurance Portability and Accountability Act: A United States law whose privacy and security requirements affect cloud and managed-service providers handling protected health information. |
| HPC | High-Performance Computing: The use of powerful parallel computing resources to execute demanding scientific, engineering, analytics, and artificial-intelligence workloads. |
| HSM | Hardware Security Module: A tamper-resistant device or managed cloud service that securely generates, stores, and uses cryptographic keys. |
| HTTP | Hypertext Transfer Protocol: The foundational application protocol used for communication between web clients, services, gateways, and application interfaces. |
| HTTPS | Hypertext Transfer Protocol Secure: Web communication protected with transport encryption and certificate-based authentication to preserve confidentiality and integrity. |
| HVAC | Heating, Ventilation, and Air Conditioning: The mechanical systems that regulate temperature, humidity, airflow, filtration, and ventilation within a data-center facility. |
| HYOK | Hold Your Own Key: An encryption model in which the customer retains cryptographic keys outside the cloud provider’s key-management environment. |
| I | |
| IaaS | Infrastructure as a Service: A cloud model providing on-demand computing, storage, and networking resources while customers manage operating systems, applications, and data. |
| IaC | Infrastructure as Code: The practice of defining and managing infrastructure through version-controlled, machine-readable configuration rather than manual setup. |
| IAM | Identity and Access Management: Policies and technologies governing digital identities, authentication, authorization, roles, and access to cloud resources and services. |
| IDF | Intermediate Distribution Frame: A secondary telecommunications distribution location connecting local cabling and equipment to a building’s main distribution infrastructure. |
| IDS | Intrusion Detection System: Security technology that monitors network or host activity for suspicious behavior and generates alerts for investigation. |
| IEC | International Electrotechnical Commission: A global standards organization whose electrical, electronic, safety, and energy-management standards affect data-center equipment and facilities. |
| IEEE | Institute of Electrical and Electronics Engineers: A professional and standards organization responsible for many networking, electrical, communications, and computing standards used in cloud and data-center environments. |
| IMACD | Install, Move, Add, Change, and Dispose: A managed workplace service category covering common endpoint and user-environment lifecycle activities. |
| IOPS | Input/Output Operations per Second: A storage-performance measure indicating how many read and write operations a system can process each second. |
| IP | Internet Protocol: The addressing and packet-delivery protocol underlying communication within and between cloud networks, data centers, and the internet. |
| IPMI | Intelligent Platform Management Interface: A standardized interface for out-of-band hardware monitoring, remote administration, power control, and fault reporting. |
| IPS | Intrusion Prevention System: Security technology that detects malicious network activity and automatically blocks or disrupts identified threats. |
| ISO 14001 | International Organization for Standardization 14001 — Environmental Management Systems: A certifiable standard for establishing and continually improving an organization’s environmental management system. |
| ISO 22301 | International Organization for Standardization 22301 — Security and Resilience, Business Continuity Management Systems: A certifiable standard for planning, implementing, maintaining, and improving organizational continuity capabilities. |
| ISO 50001 | International Organization for Standardization 50001 — Energy Management Systems: A certifiable framework for systematically improving energy performance, efficiency, use, and consumption. |
| ISO 9001 | International Organization for Standardization 9001 — Quality Management Systems: A certifiable standard for consistently meeting customer and regulatory requirements through controlled, continually improved processes. |
| ISO/IEC 20000-1 | International Organization for Standardization/International Electrotechnical Commission 20000-1 — Information Technology Service Management System Requirements: A certifiable standard defining requirements for establishing, operating, monitoring, and improving a service management system. |
| ISO/IEC 27001 | International Organization for Standardization/International Electrotechnical Commission 27001 — Information Security Management Systems: A certifiable standard for managing information-security risks through a structured control and governance system. |
| ISO/IEC 27017 | International Organization for Standardization/International Electrotechnical Commission 27017 — Information Security Controls for Cloud Services: Guidance that supplements general security controls with cloud-specific responsibilities and implementation considerations. |
| ISO/IEC 27018 | International Organization for Standardization/International Electrotechnical Commission 27018 — Protection of Personally Identifiable Information in Public Clouds: Guidance for protecting personal data when public-cloud providers act as processors. |
| ITE | Information Technology Equipment: Computing, storage, networking, and related electronic equipment whose load forms the productive-energy component in data-center efficiency calculations. |
| ITeS | Information Technology-enabled Services: Services delivered or substantially enabled by technology infrastructure, often including outsourced support, operations, processing, and digital workplace activities. |
| ITFM | Information Technology Financial Management: The discipline of budgeting, allocating, forecasting, and communicating technology costs and consumption across services and business units. |
| ITIL | Information Technology Infrastructure Library: A widely adopted framework for managing technology-enabled services through practices covering value, incidents, changes, service levels, problems, and continual improvement. |
| ITO | Information Technology Outsourcing: The transfer of defined technology functions, assets, personnel, or operational responsibilities to an external service provider. |
| ITOM | Information Technology Operations Management: The processes and tools used to monitor, operate, automate, and maintain infrastructure and services across on-premises and cloud environments. |
| ITSM | Information Technology Service Management: The coordinated management of technology services across their lifecycle, including request, incident, problem, change, configuration, and service-level practices. |
| J | |
| JSA | Job Safety Analysis: A task-level assessment that breaks work into steps, identifies hazards, and defines controls before maintenance or construction begins. |
| K | |
| K8s | Kubernetes: A widely used open-source platform for deploying, scaling, networking, and managing containerized applications across clusters. |
| KEDB | Known Error Database: A repository of diagnosed problems, root causes, and workarounds used to accelerate incident resolution and reduce repeated investigation. |
| KEK | Key Encryption Key: A cryptographic key used to encrypt other keys, supporting secure key hierarchies and separation of duties. |
| KMS | Key Management Service: A managed capability for creating, storing, rotating, controlling, and auditing cryptographic keys used by cloud resources and applications. |
| kVA | Kilovolt-Ampere: A unit of apparent electrical power used to rate transformers, generators, uninterruptible power systems, and distribution equipment. |
| KVM | Kernel-based Virtual Machine: An open-source virtualization technology built into the Linux kernel and widely used to operate virtual machines in cloud infrastructure. |
| KVM | Keyboard, Video, and Mouse: A local or remote console technology that allows operators to control multiple servers through shared input and display interfaces. |
| kW | Kilowatt: A unit of real power commonly used to express rack density, technology load, cooling demand, and facility capacity. |
| kWh | Kilowatt-Hour: A unit of energy consumption used for utility billing, efficiency analysis, carbon accounting, and workload cost allocation. |
| L | |
| LAN | Local Area Network: A network connecting devices within a limited site, building, campus, or data-center environment. |
| LCA | Life-Cycle Assessment: A method for evaluating environmental impacts across a product, building, or service lifecycle, including materials, construction, operation, and end of life. |
| LEED | Leadership in Energy and Environmental Design: A green-building rating system used to assess sustainable site, water, energy, materials, indoor-environment, and innovation performance. |
| LOTO | Lockout/Tagout: A safety procedure for isolating hazardous energy and preventing equipment from being energized during maintenance or repair. |
| LTO | Linear Tape-Open: An open magnetic-tape storage format used for high-capacity backup, long-term retention, archiving, and offline data protection. |
| M | |
| M&E | Mechanical and Electrical: The power, cooling, ventilation, controls, and related building systems that support continuous operation of critical technology infrastructure. |
| MAO | Maximum Acceptable Outage: The longest period a service or activity can remain unavailable before the consequences become unacceptable to the organization. |
| MBCO | Minimum Business Continuity Objective: The minimum acceptable level of products or services that must be maintained during a disruption. |
| MDM | Mobile Device Management: Technology for enrolling, configuring, securing, monitoring, and remotely managing smartphones, tablets, and other mobile endpoints. |
| MDF | Main Distribution Frame: The primary telecommunications distribution point connecting external services, backbone cabling, and internal network infrastructure within a facility. |
| MEP | Mechanical, Electrical, and Plumbing: The core building-engineering disciplines responsible for power, cooling, water, drainage, fire protection, and related facility systems. |
| MFA | Multi-Factor Authentication: An authentication method requiring more than one type of evidence, reducing the risk that compromised credentials lead to unauthorized access. |
| MIB | Management Information Base: A structured collection of managed-object definitions used to monitor and administer networked devices. |
| MMR | Meet-Me Room: A secure data-center space where carriers, customers, and facility operators interconnect network services and exchange traffic. |
| MOP | Method of Procedure: A detailed, step-by-step document governing planned work on critical systems, including prerequisites, responsibilities, risk controls, testing, and rollback actions. |
| MSP | Managed Service Provider: A company that assumes ongoing responsibility for monitoring, operating, supporting, and improving defined technology services for customers. |
| MSSP | Managed Security Service Provider: A specialist provider delivering outsourced security monitoring, threat detection, incident response, vulnerability management, or security-device operations. |
| MTBF | Mean Time Between Failures: A reliability measure estimating the average operating time between repairable equipment or system failures. |
| MTDC | Multi-Tenant Data Center: A facility in which multiple customers lease segregated space, power, connectivity, and supporting services from a common operator. |
| MTPD | Maximum Tolerable Period of Disruption: The maximum time an activity, product, or service can be disrupted before resulting harm becomes unacceptable. |
| MTTA | Mean Time to Acknowledge: The average elapsed time between generation of an alert or incident and acknowledgment by a responsible responder. |
| MTTD | Mean Time to Detect: The average time required to identify that a failure, incident, or security event has occurred. |
| MTTR | Mean Time to Recovery: The average time required to return a service to normal operation after disruption, including detection, diagnosis, remediation, and validation. |
| MTTR | Mean Time to Repair: The average active time needed to fix a failed repairable component and restore it to working condition. |
| MTTR | Mean Time to Resolve: The average end-to-end time needed to close an incident or support request, including investigation, repair, testing, and communication. |
| MW | Megawatt: A unit of power used to express large data-center utility feeds, critical capacity, technology load, and market supply. |
| N | |
| N+1 | N Plus One Redundancy: A design providing the capacity needed for the full load plus one additional component, allowing a single unit to fail or undergo maintenance. |
| NAS | Network-Attached Storage: File-level storage delivered over a network and shared by multiple clients or applications. |
| NAT | Network Address Translation: A networking technique that maps private and public addresses, supporting address conservation, segmentation, and controlled cloud connectivity. |
| NEC | National Electrical Code: The commonly used name for the United States electrical installation code published as National Fire Protection Association Standard 70. |
| NFPA | National Fire Protection Association: A standards organization whose electrical, fire-protection, battery, fuel, and emergency-system codes are widely applied to data centers. |
| NFPA 70 | National Fire Protection Association 70, National Electrical Code: A foundational United States code governing safe electrical design and installation, including data-center power systems. |
| NFPA 75 | National Fire Protection Association 75, Standard for the Fire Protection of Information Technology Equipment: A standard addressing fire risks and protection practices for information technology equipment areas. |
| NFPA 76 | National Fire Protection Association 76, Standard for the Fire Protection of Telecommunications Facilities: A standard covering fire protection for telecommunications facilities, including spaces and systems commonly present in data centers. |
| NFPA 855 | National Fire Protection Association 855, Standard for the Installation of Stationary Energy Storage Systems: A standard establishing fire, ventilation, separation, detection, and emergency requirements for stationary battery installations. |
| NIS2 | Network and Information Systems Directive 2: A European Union cybersecurity directive establishing risk-management, incident-reporting, governance, and supply-chain requirements for covered cloud, data-center, and managed-service providers. |
| NIST | National Institute of Standards and Technology: A United States agency whose cybersecurity, cloud, cryptography, risk, and technical publications are widely used by providers and enterprise customers. |
| NIST CSF | National Institute of Standards and Technology Cybersecurity Framework: A risk-based framework for governing, identifying, protecting, detecting, responding to, and recovering from cybersecurity risk. |
| NOC | Network Operations Center: A centralized function that monitors infrastructure and services, coordinates incident response, performs escalation, and maintains operational visibility. |
| NVMe | Non-Volatile Memory Express: A high-performance storage protocol designed for solid-state media and used in low-latency cloud, database, and analytics infrastructure. |
| O | |
| OCP | Open Compute Project: An industry community developing open designs and specifications for energy-efficient servers, racks, storage, networking, and data-center infrastructure. |
| OCI | Open Container Initiative: An open-governance project that defines standard formats and runtime specifications supporting portable container images and execution. |
| OCI | Oracle Cloud Infrastructure: A public-cloud platform providing computing, storage, networking, database, security, analytics, and managed infrastructure services. |
| OLA | Operational Level Agreement: An internal agreement defining how teams or support groups will cooperate to meet customer-facing service commitments. |
| OOB | Out-of-Band: A separate management channel used to monitor and administer equipment when the primary production network or operating system is unavailable. |
| OPEX | Operating Expenditure: Recurring spending required to run services and facilities, including cloud consumption, labor, maintenance, electricity, connectivity, licenses, and support. |
| OSHA | Occupational Safety and Health Administration: The United States regulator responsible for workplace-safety requirements affecting electrical work, hazardous energy, construction, maintenance, and facility operations. |
| OVF | Open Virtualization Format: An open standard for packaging and distributing virtual appliances across compatible virtualization platforms. |
| P | |
| PaaS | Platform as a Service: A cloud model providing managed application runtimes, middleware, databases, development tools, and deployment services while abstracting underlying infrastructure. |
| PAM | Privileged Access Management: Controls and tools that secure, approve, monitor, and audit powerful administrative access to infrastructure, platforms, applications, and data. |
| PCI DSS | Payment Card Industry Data Security Standard: A security standard governing environments that store, process, or transmit payment-card data, including hosted and cloud infrastructure. |
| PDU | Power Distribution Unit: Equipment that distributes electrical power to racks or other downstream loads, often providing metering, monitoring, and remote switching. |
| PFC | Power Factor Correction: Techniques or equipment used to improve the relationship between real and apparent power, reducing electrical losses and capacity penalties. |
| PII | Personally Identifiable Information: Information that identifies or can reasonably be linked to an individual and therefore requires appropriate privacy, security, retention, and access controls. |
| PIR | Post-Incident Review: A structured review of an incident’s timeline, impact, contributing factors, response effectiveness, and corrective actions. |
| PITR | Point-in-Time Recovery: A data-protection capability that restores a database or system to a selected moment before corruption, deletion, or another damaging event. |
| PKI | Public Key Infrastructure: The roles, policies, certificates, keys, and systems used to establish digital trust, encrypt communications, and authenticate identities. |
| PLC | Programmable Logic Controller: An industrial control device used to automate and monitor mechanical, electrical, and safety equipment in critical facilities. |
| PPA | Power Purchase Agreement: A long-term contract for electricity supply that can provide price certainty and support renewable-energy procurement. |
| PPE | Personal Protective Equipment: Clothing and equipment used to reduce worker exposure to electrical, mechanical, chemical, noise, and construction hazards. |
| PSA | Professional Services Automation: Software used by service providers to manage projects, resources, time, expenses, billing, contracts, and delivery profitability. |
| PTW | Permit to Work: A formal authorization process used to control hazardous or high-risk work through defined scope, precautions, approvals, and handback procedures. |
| PUE | Power Usage Effectiveness: The ratio of total data-center energy consumption to information technology equipment energy, widely used to assess facility energy overhead. |
| Q | |
| QoS | Quality of Service: Network policies that classify and prioritize traffic to manage bandwidth, latency, jitter, and packet loss for important applications. |
| R | |
| RAID | Redundant Array of Independent Disks: A storage technique that combines multiple drives to improve performance, availability, or both through striping, mirroring, or parity. |
| RAS | Reliability, Availability, and Serviceability: Three design characteristics used to evaluate how consistently infrastructure operates, remains accessible, and can be maintained or repaired. |
| RCA | Root Cause Analysis: A structured investigation that identifies the underlying technical, process, or organizational causes of an incident and defines corrective actions. |
| RCD | Residual Current Device: A protective electrical device that disconnects a circuit when it detects leakage current that could cause shock or fire. |
| RCM | Reliability-Centered Maintenance: A method for selecting maintenance strategies based on asset functions, failure modes, consequences, and operational criticality. |
| REC | Renewable Energy Certificate: A tradable instrument representing the environmental attributes of one megawatt-hour of renewable electricity generation. |
| REF | Renewable Energy Factor: The proportion of a data center’s energy supplied from renewable sources, used to communicate the renewable content of facility energy use. |
| REIT | Real Estate Investment Trust: A structure that owns or finances income-producing property and is commonly used by publicly traded data-center operators. |
| RFO | Reason for Outage: A customer-facing or internal report explaining the cause, impact, response, and corrective actions associated with a service interruption. |
| RI | Reserved Instance: A cloud-pricing arrangement that offers discounted resource usage in exchange for a term commitment, with conditions varying by provider and service. |
| RIM | Remote Infrastructure Management: The outsourced monitoring, administration, maintenance, and support of infrastructure from an off-site delivery center. |
| RMM | Remote Monitoring and Management: Tools used by service providers to monitor endpoints and infrastructure, deploy software, automate maintenance, and resolve issues remotely. |
| RPO | Recovery Point Objective: The maximum acceptable amount of data loss expressed as time, which determines backup or replication frequency. |
| RPP | Remote Power Panel: An electrical distribution panel positioned closer to technology loads to divide power into branch circuits serving racks or equipment rows. |
| RTO | Recovery Time Objective: The target time for restoring a service or system after disruption to avoid unacceptable business impact. |
| RU | Rack Unit: A standardized vertical measurement equal to 1.75 inches used to specify the height of rack-mounted equipment. |
| S | |
| SAN | Storage Area Network: A dedicated high-speed network providing servers with block-level access to shared storage resources. |
| SASE | Secure Access Service Edge: A cloud-delivered architecture combining wide-area networking and security capabilities to connect users, sites, devices, and applications. |
| SCADA | Supervisory Control and Data Acquisition: Industrial control technology used to monitor and control distributed electrical, mechanical, utility, and facility systems. |
| SDN | Software-Defined Networking: An architecture that separates network control from forwarding and enables centralized, programmable configuration of virtual and physical networks. |
| SDS | Software-Defined Storage: Storage architecture that abstracts management and data services from underlying hardware, enabling policy-based provisioning and scaling. |
| SECaaS | Security as a Service: Cloud-delivered security capabilities offered on a subscription or consumption basis, such as identity, filtering, monitoring, and threat protection. |
| SI | Systems Integrator: A service provider that designs, combines, implements, and coordinates technology components from multiple vendors into an operational solution. |
| SIAM | Service Integration and Management: An operating model for coordinating multiple internal and external providers so that they deliver cohesive end-to-end services. |
| SIEM | Security Information and Event Management: Technology that collects, correlates, searches, and analyzes security logs and alerts across infrastructure, applications, identities, and cloud services. |
| SKMS | Service Knowledge Management System: The collection of tools and information used to create, maintain, share, and apply knowledge throughout the service lifecycle. |
| SLA | Service Level Agreement: A formal agreement defining measurable service commitments, responsibilities, exclusions, reporting, and remedies between provider and customer. |
| SLI | Service Level Indicator: A quantitative measure of service behavior, such as availability, latency, throughput, durability, or error rate. |
| SLO | Service Level Objective: A target value or acceptable range for a service-level indicator over a defined measurement period. |
| SNMP | Simple Network Management Protocol: A protocol for collecting status and performance information from networked devices and issuing certain management commands. |
| SOAR | Security Orchestration, Automation, and Response: Technology that coordinates security tools, enriches alerts, automates investigation steps, and executes repeatable incident-response workflows. |
| SOC | Security Operations Center: A centralized team and operating function responsible for security monitoring, threat detection, investigation, escalation, and incident response. |
| SOC | System and Organization Controls: An assurance-reporting framework used by service organizations to communicate the design and operating effectiveness of relevant internal controls. |
| SOC 1 | System and Organization Controls 1: An independent assurance report addressing controls at a service organization that may be relevant to customers’ financial reporting. |
| SOC 2 | System and Organization Controls 2: An independent assurance report evaluating controls relevant to security, availability, processing integrity, confidentiality, or privacy. |
| SOP | Standard Operating Procedure: A documented, repeatable method for performing routine operational tasks consistently and safely. |
| SPOF | Single Point of Failure: A component, path, person, or process whose failure could interrupt an entire service because no effective alternative exists. |
| SRE | Site Reliability Engineering: An engineering discipline applying software, automation, measurement, and reliability objectives to the operation of scalable services. |
| SSE | Security Service Edge: A cloud-delivered set of security capabilities that protects access to web, software, private applications, and cloud services. |
| SSO | Single Sign-On: An authentication capability allowing users to access multiple authorized services through one identity session. |
| STaaS | Storage as a Service: On-demand storage capacity and data services delivered through a subscription or consumption-based cloud model. |
| STS | Secure Token Service: A cloud identity service that issues temporary, limited-privilege credentials for accessing resources. |
| STS | Static Transfer Switch: Solid-state electrical equipment that rapidly transfers a critical load between independent power sources without mechanical switching. |
| T | |
| TBM | Technology Business Management: A framework for organizing technology costs, consumption, services, performance, and value in terms useful to finance, technology, and business leaders. |
| TCO | Total Cost of Ownership: The full lifecycle cost of an infrastructure or service option, including acquisition, migration, operation, support, energy, risk, and retirement. |
| TCP/IP | Transmission Control Protocol/Internet Protocol: The core protocol suite used to address, route, transmit, and reliably deliver data across enterprise, cloud, and internet networks. |
| TEE | Trusted Execution Environment: An isolated processing environment that protects code and data while in use, supporting confidential-computing services. |
| TLS | Transport Layer Security: A cryptographic protocol that protects data in transit through encryption, integrity checks, and certificate-based authentication. |
| TOGAF | The Open Group Architecture Framework: An enterprise-architecture method used to structure technology strategy, target architectures, governance, roadmaps, and transformation planning. |
| TOSCA | Topology and Orchestration Specification for Cloud Applications: An open standard for describing portable cloud applications, their components, relationships, deployment processes, and management requirements. |
| U | |
| UDP | User Datagram Protocol: A connectionless transport protocol used for low-overhead, latency-sensitive, or transaction-oriented network communication. |
| UEM | Unified Endpoint Management: A platform for centrally securing and managing laptops, desktops, mobile devices, and other endpoints across operating systems. |
| UPS | Uninterruptible Power Supply: A system that provides immediate temporary power and power conditioning when the normal electrical source fails or becomes unstable. |
| V | |
| vCPU | Virtual Central Processing Unit: A unit of virtualized processor capacity assigned to a virtual machine or cloud instance for workload sizing and billing. |
| VDC | Virtual Data Center: A logically isolated pool of virtual computing, storage, networking, and security resources managed as a data-center environment. |
| VDI | Virtual Desktop Infrastructure: Technology that hosts desktop operating environments centrally and delivers them remotely to user devices. |
| VFD | Variable-Frequency Drive: A controller that adjusts motor speed and torque, improving energy efficiency and control of fans, pumps, and cooling equipment. |
| VLAN | Virtual Local Area Network: A logical network segment that separates traffic and broadcast domains across shared switching infrastructure. |
| VM | Virtual Machine: A software-defined computing environment that emulates a physical computer and runs its own operating system and applications. |
| VMM | Virtual Machine Monitor: The software layer, also called a hypervisor, that creates, isolates, schedules, and manages virtual machines on physical hosts. |
| VPC | Virtual Private Cloud: A logically isolated cloud network in which customers define address ranges, subnets, routing, security controls, and connectivity. |
| VPN | Virtual Private Network: An encrypted connection that securely extends access between users, sites, data centers, and cloud networks over shared infrastructure. |
| VRLA | Valve-Regulated Lead-Acid: A sealed lead-acid battery technology commonly used in uninterruptible power systems and standby-power installations. |
| VXLAN | Virtual Extensible Local Area Network: An overlay-network technology that encapsulates Ethernet traffic over routed networks, enabling large-scale segmentation and workload mobility. |
| W | |
| WAF | Web Application Firewall: A security control that inspects and filters web traffic to protect applications and interfaces from common attacks and malicious requests. |
| WAN | Wide Area Network: A network connecting users, facilities, data centers, and cloud environments across geographically dispersed locations. |
| WEEE | Waste Electrical and Electronic Equipment: A European Union framework governing the collection, treatment, recovery, and recycling of discarded electrical and electronic equipment. |
| WRT | Work Recovery Time: The time required after technology restoration to validate systems, reconcile data, restore business processes, and resume normal work. |
| WUE | Water Usage Effectiveness: A data-center sustainability metric relating annual site water consumption to the energy consumed by information technology equipment. |
| X | |
| XaaS | Everything as a Service: An umbrella term for technology capabilities delivered through on-demand, subscription, or consumption-based service models. |
| XDR | Extended Detection and Response: A security platform that correlates telemetry across endpoints, networks, identities, email, applications, and cloud workloads to improve threat detection and response. |
| XLA | Experience Level Agreement: A service commitment focused on user or customer outcomes and experience measures rather than only technical operational metrics. |
| Z | |
| ZTNA | Zero Trust Network Access: An access model that grants authenticated, policy-based connections to specific applications rather than broad trust in a network location. |