Learning Glossary
Explore clear, beginner friendly explanations of key technology terms and concepts: cybersecurity, information security, cloud computing, networking and best practices, so you can build a strong foundation and stay informed.
The core building blocks of cybersecurity concepts that every practitioner must understand before diving deeper.
The foundational vocabulary every cybersecurity professional needs to know.
How encryption hashing and digital certificates protect data in transit and at rest.
Design patterns and models for building systems that are secure from the ground up.
A comprehensive look at how attackers operate from malware and ransomware to social engineering and emerging AI-driven threats.
Malicious software categories: how they work and how they spread.
Human-targeted attacks that manipulate people rather than systems.
Attacks that target network infrastructure protocols and traffic.
Risks that originate from within an organization employees, contractors, and partners.
Next-generation attack techniques exploiting AI automation and new attack surfaces.
How networks are designed and defended, firewalls perimeters VPNs intrusion detection and the protocols that underpin them all.
Technologies that control traffic at the boundary between trusted and untrusted networks.
Secure remote connectivity options and the protocols behind them.
Systems that monitor network traffic and host activity for signs of attack.
The protocols and structural choices that determine network security posture.
Securing the software layer, web application vulnerabilities API weaknesses secure development practices and container security.
The most common weaknesses found in web applications from the OWASP Top 10 and beyond.
Protecting APIs from abuse unauthorized access and data exposure.
Integrating security into software development pipelines and practices.
Security considerations for containerized and distributed application architectures.
Protecting cloud workloads endpoints and operational technology across hybrid and multi-cloud environments.
Core concepts for securing workloads data and infrastructure in the cloud.
Security controls services and configurations specific to major cloud providers.
Protecting laptops desktops mobile devices and servers from compromise.
Securing industrial control systems operational technology and internet-connected devices.
Managing who gets access to what, authentication, authorization, privileged access, and identity-based attack techniques.
How identities are created managed authenticated and authorized across systems.
Controlling and auditing highly privileged accounts and administrative access.
Attack techniques that exploit weaknesses in authentication and identity systems.
Ensuring the right people have the right access and that it is regularly reviewed.
The day-to-day work of detecting threats managing incidents tracking vulnerabilities and running an effective SOC.
The tools and processes that power 24/7 security monitoring and detection.
Using intelligence about adversaries to anticipate and prevent attacks.
The structured process for detecting containing and recovering from security incidents.
Finding prioritizing and remediating security weaknesses before attackers exploit them.
Governance risk management and compliance the management layer that ties cybersecurity strategy to business and regulatory requirements.
The leadership structures policies and accountability frameworks that direct cybersecurity programs.
Identifying measuring and treating cybersecurity risks across the enterprise.
Legal and regulatory obligations that shape cybersecurity and data protection programs.
Evaluating the effectiveness of security controls through structured review and testing.
Classifying protecting and governing personal and sensitive data across its full lifecycle and in compliance with global privacy laws.
Knowing what data you have where it lives how sensitive it is and who owns it.
Technical controls for securing data throughout its lifecycle.
The legal frameworks that govern how personal data must be collected used and protected.
How organizations respond to contain and report data breaches.
The structured models certifications and industry standards that organizations use to build measure and demonstrate mature security programs.
Structured models that help organizations build measure and improve security programs.
Frameworks specifically designed for governance risk and compliance programs.
The Cybersecurity Maturity Model Certification DoD's framework for defense contractor cybersecurity.
Sector-specific compliance standards and certification schemes.
Professional certifications that validate cybersecurity and GRC expertise.
Advanced GRC topics, third-party risk, business continuity, NIST RMF, and cyber risk quantification explored in depth.
End-to-end processes for identifying assessing and continuously monitoring risk from vendors suppliers and partners.
Planning testing and executing strategies to maintain operations during and after a disruptive event.
The seven-step federal framework for managing security and privacy risk across information systems.
Translating cybersecurity risk into financial terms and transferring residual risk through insurance.
Terms are easier with someone who owns the plan. Book a free IT Strategy Session.
