🔐 Cybersecurity Glossary

A Zero Trust security mechanism that continuously validates user identity and device trustworthiness throughout a session, rather than only at initial login. It monitors behavioral patterns, device posture, location, and contextual factors in real-time to detect anomalies and dynamically adjust access privileges or terminate sessions when risk levels change.

A secondary physical or cloud-based facility equipped with necessary infrastructure, systems, and data backups that enables an organization to resume critical IT operations and business functions following a major disruption, cyber attack, or disaster at the primary site.

An individual, group, or entity that conducts or has the intent to conduct malicious cyber activities against an organization's information systems or data. Threat actors are categorized by motivation (financial, political, espionage), capability (nation-state, organized crime, hacktivists), and targeting patterns.

A cybersecurity framework that eliminates implicit trust by requiring continuous verification of all users, devices, and network flows before granting access to resources. Zero Trust operates on the principle of 'never trust, always verify' and assumes breach as the default state, implementing least-privilege access controls, micro-segmentation, and continuous monitoring regardless of whether requests originate inside or outside the network perimeter.