Security Glossary

A particularly nasty subset of malware that encrypts your files or otherwise locks your system, then demands a ransom payment (often in cryptocurrency...

A systematic evaluation of what could go wrong in your IT environment. This process involves identifying assets and vulnerabilities, determining possi...

The overall process of handling cyber risks in a sensible way. It includes identifying risks, analyzing their severity, prioritizing them, and taking ...

A living document or database where an organization tracks its identified risks. It typically lists each risk, its estimated severity (impact and like...

An approach to managing user access by assigning permissions based on roles (job functions) rather than individual identities. With RBAC, you define r...

Organized education for employees about cybersecurity best practices and threats. The goal is to make your team aware of common attacks (like phishing...

A set of minimum security standards or settings that your organization commits to implementing everywhere. It's essentially the baseline "must-do" sec...

Any measure put in place to reduce risk or protect against threats. Security controls can be technical (like firewalls or encryption), administrative ...

The overall management and oversight of an organization's security program, ensuring that security efforts align with business objectives and comply w...

Any event that indicates your systems or data may have been compromised or that security measures failed. In plain terms, it's something that could sp...