Security Glossary

A solution or software that allows an organization to remotely manage and secure mobile devices (like smartphones and tablets) used by its employees. ...

An authentication scheme that requires more than one independent credential to verify a user's identity. In practice, this often means combining at le...

A well-known set of cybersecurity guidelines published by the U.S. National Institute of Standards and Technology (NIST), designed to help organizatio...

The practice of using strong, unique passwords and handling them carefully to reduce the chance of account compromise. Good password hygiene means cho...

A software tool (or service) that securely stores and manages your passwords and other credentials. Instead of reusing or writing down passwords, you ...

Ensuring that software updates (patches) are applied in a timely manner to fix security bugs and improve stability. "Patches" are released by software...

A simulated cyberattack on your own systems, conducted with permission, to find vulnerabilities before real attackers do. Think of it as hiring an eth...

A form of social engineering attack that arrives most often via fraudulent emails (though it can also be via text or other messaging) where attackers ...

The practice of giving each user or system the minimum level of access - permissions - necessary to do their job, and nothing more. By limiting privil...

User or service accounts that have elevated rights or administrative privileges on systems. Examples include IT admin accounts, accounts with domain-w...