🔐 Cybersecurity Glossary

An attack where the attacker secretly relays and possibly alters communications between two parties who believe they are directly communicating.

An outsourced cybersecurity service that provides threat monitoring, detection, and response capabilities.

A framework for assessing the current state and improvement path of an organization's cybersecurity capabilities across defined levels.

The maximum period of time that a business process can be disrupted without causing unacceptable consequences.

The average time it takes to discover a security incident from its initial occurrence.

A key performance indicator that measures the average time it takes for a SOC team to discover a security incident or breach from the moment it occurs. MTTD is critical for assessing the effectiveness of security monitoring capabilities and detection controls, with lower values indicating more mature security operations.

The average time it takes to contain and remediate a security incident after detection.

A Zero Trust security technique that divides networks into small, isolated segments to contain breaches and limit lateral movement. Each segment has its own access controls and security policies, allowing organizations to define granular security perimeters around critical assets and enforce strict traffic inspection between segments.

A security technique that divides a network into isolated segments down to the individual workload level.

Security strategy and controls for organizations using services from multiple cloud service providers simultaneously.

A security mechanism that requires users to provide two or more verification factors to gain access to a resource, application, or system. MFA combines something the user knows (password), something the user has (security token or mobile device), and/or something the user is (biometric verification) to significantly reduce the risk of unauthorized access.