EU AI Act
FRAMEWORK
AI GOVERNANCE
Comprehensive European Union regulations governing the development, deployment, and risk classification of AI systems.
FRAMEWORK
CYBERSECURITY
Single Sign-On (SSO)
An authentication arrangement that allows a user to access multiple applications through one identity-provider session.
BUSINESS RELEVANCE
It reduces the likelihood or impact of unauthorised access, data loss and service disruption and provides evidence for assurance.
IMPLEMENTATION EXAMPLE
A cross-functional team applies Single Sign-On (SSO) in a production initiative, defines ownership and success criteria, tests representative scenarios, monitors outcomes and records corrective actions before scaling.
LIMITATIONS
No single control eliminates risk. Misconfiguration, compromised identities, weak recovery and changing threats require defence in depth and continuous review.
TECHNICAL EXPLANATION
An authentication arrangement that allows a user to access multiple applications through one identity-provider session. The control should be based on identified threats, least privilege, strong identity, logging, monitoring and tested response procedures. Effectiveness depends on implementation and operating context rather than the presence of a product label.
Secondary Topics
Systems Architecture
Sources
NIST Cybersecurity Framework 2.0 — https://www.nist.gov/cyberframework; OWASP — https://owasp.org/
Related terms
AI Management System
FRAMEWORK
AI GOVERNANCE
An organizational framework of policies, procedures, and controls for governing responsible AI development and deployment under ISO 42001.
OAuth 2.0
FRAMEWORK
CYBERSECURITY
An open standard authorization framework providing applications secure delegated access to server resources without sharing passwords.
Zero Trust
FRAMEWORK
CYBERSECURITY
A security architecture enforcing strict identity verification, micro-segmentation, and least-privilege access for all network requests.
Two-Factor Authentication (2FA)
FRAMEWORK
CYBERSECURITY
A security defense requiring two separate authentication factors before granting access to protected accounts.