Security Glossary

A specific type of policy that describes what is and isn't allowed when using the organization's IT resources (like computers, internet, email, and mo...

The methods and technologies used to determine who can access what resources, under what conditions. It's the mechanism that sits between a user and a...

Software that detects, blocks, and removes malware on your devices. Traditional antivirus focused on catching computer viruses, but modern solutions (...

The sum of all the possible ways an attacker could get into your systems or data. In other words, it's the collection of points where your organizatio...

A record of events, changes, or actions that have taken place in a system, which can be used to trace who did what, when, and how. Audit trails (also ...

The process of verifying that someone (or something) is who they claim to be when trying to access a system. In everyday terms, it's the login step - ...

The process of determining what resources a user (or system) is allowed to access after their identity has been verified through authentication. If au...

The process of formally informing affected parties (users, customers, regulators, etc.) that a security breach has occurred which may have compromised...

A policy (or simply a practice) where employees use their personal devices (like laptops, smartphones, tablets) for work purposes, instead of or in ad...

A strategy and set of arrangements to keep your business operational (or at least quickly restore operations) during and after disruptive events - whi...