| Cyber Security | The practice of protecting systems, networks, and programs from digital attacks. |
| Network Security | A subset of cyber security that focuses on protecting IT infrastructure and guarding against intrusion. |
| Information Security (InfoSec) | Protects information from unauthorized access to avoid identity theft and to protect privacy. |
| Ethical Hacking | The practice of penetrating systems or networks to find vulnerabilities that can be fixed before a malicious attacker exploits them. |
| Penetration Testing | Testing a computer system, network, or web application to find vulnerabilities that an attacker could exploit. |
| Security Operations Center (SOC) | A centralized unit that deals with security issues on an organizational and technical level. |
| Incident Response | The approach taken by an organization to prepare for, detect, investigate, and recover from a cyber attack. |
| Malware Analysis | The process of studying malware (viruses, worms, spyware, etc.) to understand its functions, origin, and potential impact. |
| Cryptography | The practice of securing communication and information through the use of codes so that only those for whom the information is intended can read and process it. |
| Risk Management | The process of identifying, assessing, and controlling threats to an organization’s capital and earnings. |
| Compliance | Adhering to laws, regulations, guidelines, and specifications relevant to the organization’s business processes. |
| Vulnerability Assessment | The process of identifying, quantifying, and prioritizing (or ranking) the vulnerabilities in a system. |
| Firewall | A network security device that monitors and filters incoming and outgoing network traffic based on an organization’s previously established security policies. |
| Intrusion Detection System (IDS) | A device or software application that monitors a network or systems for malicious activity or policy violations. |
| Security Information and Event Management (SIEM) | Software that provides real-time analysis of security alerts generated by applications and network hardware. |
| Virtual Private Network (VPN) | A service that allows you to connect to the Internet via a server run by a VPN provider, ensuring your Internet use is secure and private. |
| Cloud Security | A collection of policies, controls, procedures, and technologies that work together to protect cloud-based systems, data, and infrastructure. |
| Identity and Access Management (IAM) | A framework for business processes that facilitates the management of electronic identities. |
| Phishing | A type of social engineering attack often used to steal user data, including login credentials and credit card numbers. |
| Ransomware | A type of malicious software designed to block access to a computer system until a sum of money is paid. |
