cybersecurity glossary

Access control is a security measure used to regulate who or what can view or use resources in a computing environment. It is used to protect confidential information, and is implemented through authentication, authorization, and encryption. Examples include physical, network, and application access control systems.

Advanced Persistent Threats (APTs) are long-term, sophisticated cyber attacks conducted by highly skilled attackers to steal intellectual property, disrupt operations, or gain access to confidential information. Examples include the 2017 North Korean attack on Sony Pictures Entertainment.

Application Penetration Testing is a security testing technique used to identify vulnerabilities in web applications and software. It is an important part of any organization's security strategy and should be conducted regularly to ensure the safety of the application and its users.

Attack Surface is a measure of the potential vulnerability of a system or network to malicious attacks. It is an important concept in cybersecurity, as it helps to identify and mitigate potential risks by reducing the number of components, simplifying the system architecture, and limiting the number of entry points.

BYOD (Bring Your Own Device) is a policy that allows employees to use their own personal devices for work purposes. It is becoming increasingly popular in the workplace and should include security measures to protect company data and networks.

Botnets are networks of computers or other internet-connected devices infected with malicious software and controlled as a group without the knowledge of their owners. They are used to carry out malicious activities such as sending spam, launching DDoS attacks, stealing data, and spreading malware.

Business Email Compromise (BEC) is a type of cybercrime in which attackers use social engineering techniques to gain access to a company's email accounts and use them to commit fraud. Examples include malicious links or attachments, impersonating a company executive, and requesting wire transfers.

CIS Controls are a set of best practices developed by the Center for Internet Security (CIS) to help organizations protect their networks and data from cyber threats. Organizations can use the CIS Controls to reduce their risk of a cyber attack, such as setting strong passwords, disabling unnecessary services, and using access control measures.

CIS RAM is a comprehensive approach to managing computer security incidents, including the identification, containment, investigation, and resolution of incidents, as well as the development of policies and procedures to prevent future incidents.

COBIT is a framework for IT governance, risk management, and compliance that provides best practices and processes for managing IT resources. It is used by organizations of all sizes to ensure IT investments are managed effectively and efficiently, and to align IT objectives with business objectives.

Cloud Security is the practice of protecting data, applications, and infrastructure associated with cloud computing. It involves a set of policies, technologies, and controls to protect data from unauthorized access, malicious attacks, and data leakage.

Cloud Computing is a type of computing that uses a network of remote servers hosted on the Internet to store, manage, and process data. It is used for a variety of purposes, from storing and sharing data to running applications and cloud gaming.