| Data Breach | An incident where confidential, protected, or sensitive data is accessed or disclosed without authorization. |
| Cybersecurity | The practice of protecting systems, networks, and programs from digital attacks. |
| Encryption | The process of converting information or data into a code, especially to prevent unauthorized access. |
| Malware | Software that is specifically designed to disrupt, damage, or gain unauthorized access to a computer system. |
| Phishing | The fraudulent practice of sending emails purporting to be from reputable companies to induce individuals to reveal personal information. |
| Ransomware | A type of malicious software designed to block access to a computer system until a sum of money is paid. |
| Two-Factor Authentication (2FA) | A security process in which users provide two different authentication factors to verify themselves. |
| Firewall | A network security device that monitors and filters incoming and outgoing network traffic based on an organization’s previously established security policies. |
| VPN (Virtual Private Network) | A service that encrypts your internet traffic and protects your online identity by hiding your IP address. |
| Dark Web | The part of the World Wide Web that is only accessible by means of special software, allowing users and website operators to remain anonymous or untraceable. |
| Hacktivism | The act of hacking, or breaking into a computer system, for a politically or socially motivated purpose. |
| Identity Theft | The fraudulent acquisition and use of a person’s private identifying information, usually for financial gain. |
| SSL/TLS (Secure Sockets Layer / Transport Layer Security) | Protocols for establishing authenticated and encrypted links between networked computers. |
| Zero-Day Exploit | A cyber attack that occurs on the same day a weakness is discovered in software, before a fix becomes available. |
| DDoS Attack (Distributed Denial of Service) | An attempt to crash a website or online service by overwhelming it with a flood of internet traffic. |
| GDPR (General Data Protection Regulation) | A regulation in EU law on data protection and privacy in the European Union and the European Economic Area. |
| Incident Response | The process by which an organization handles a data breach or cyber attack, including its preparation, investigation, and recovery. |
| Multi-Factor Authentication (MFA) | A security system that requires more than one method of authentication from independent categories of credentials to verify the user’s identity. |
| Social Engineering | The use of deception to manipulate individuals into divulging confidential or personal information that may be used for fraudulent purposes. |
| Endpoint Security | The approach to network protection that requires each computing device on a corporate network to comply with certain standards before network access is granted. |
