Security Glossary

A centralized system that aggregates logs and security events from across your IT environment, then correlates and analyzes that data to spot signs of...

A written document (or set of documents) that outlines an organization's rules, guidelines, and expectations for security. It's essentially the do's a...

The use of IT systems, software, or services without explicit approval or knowledge of the organization's IT department. In other words, employees usi...

An access solution that lets users log in once and gain access to multiple systems or applications without separate logins for each. With SSO, one set...

A tactic attackers use that involves manipulating people (rather than hacking computers) to gain unauthorized access or information. In a social engin...

A discussion-based, simulation exercise where key staff gather (literally around a table, though often virtual now) to walk through their response to ...

Information about emerging or known threats that helps organizations anticipate and defend against attacks. This can include data on new hacker tactic...

A technology that establishes an encrypted tunnel for your network traffic, often used to securely connect a device to a company's internal network ov...

A weakness or flaw in your security that could be exploited by a threat. Vulnerabilities can be technical (like an unpatched software bug or a misconf...

The practice of finding and fixing vulnerabilities in your systems on an ongoing basis. This typically involves regular vulnerability scans to identif...