🔐 Cybersecurity Glossary
Over 265 professional cybersecurity terms in English & Arabic — your comprehensive reference for the cybersecurity world
265 terms
16 categories
47 frameworks
All
🏛 Governance & Strategy 35
⚖ Risk Management 17
🔑 Identity & Access 14
🌐 Network Security 16
🔒 Data Protection 11
⚡ Threat & Attack 22
🚨 Incident Response 13
☑ Compliance & Audit 12
🔐 Cryptography 11
☁ Cloud Security 9
💻 Application Security 11
§ Privacy & Data Law 12
🛡 Security Operations 17
♻ Business Continuity 9
🇸🇦 Saudi Regulations 14
🛡️ Platform Tools 1
NCA_ECC (122)
SAMA_CSF (76)
PCI_DSS (47)
ISO_27001 (39)
PDPL (34)
NIST_CSF (29)
Array (25)
NCA ECC (20)
SAMA CSF (20)
NCA_CSCC (14)
✕ Clear
33 terms
⚡ Advanced Persistent Threat
APT
التهديد المتقدم المستمر
A prolonged and targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period.
🛡️ ARIA
ARIA
آريا
AI Regulatory Intelligence Advisor — CISO Consulting's enterprise Virtual CISO (vCISO) module. ARIA provides AI-powered cybersecurity advisory services including policy generation, risk assessment, compliance gap analysis, board reports, and document generation in Word, Excel, PowerPoint, and PDF formats. Specialized in Saudi regulatory frameworks: SAMA CSF, NCA ECC, PDPL, and international standards including ISO 27001, NIST CSF, and PCI DSS.
⚖ Attack Surface
سطح الهجوم
The total sum of all vulnerabilities and entry points that an attacker could potentially exploit.
🚨 Containment
الاحتواء
The phase of incident response focused on limiting the scope and damage of a security incident.
🏛 Cybersecurity Framework
CSF
إطار الأمن السيبراني
A structured set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risk.
🏛 Defense in Depth
DiD
الدفاع المتعمق
A cybersecurity strategy that uses multiple layers of security controls to protect information assets, so if one layer fails, another is in place.
🚨 Eradication
الاستئصال
The phase of incident response where the root cause and artifacts of the security incident are removed from the environment.
🔑 FIDO2
FIDO2
معيار FIDO2
An open authentication standard that enables passwordless login using public key cryptography and biometrics.
🌐 Firewall
FW
الجدار الناري
A network security device that monitors and filters incoming and outgoing network traffic based on predetermined security rules.
🚨 Incident Response Plan
IRP
خطة الاستجابة للحوادث
A documented plan that outlines the procedures and responsibilities for detecting, responding to, and recovering from cybersecurity incidents.
Incident Response Plan (IRP)
IRP
خطة الاستجابة للحوادث
A documented, structured approach with detailed procedures for detecting, responding to, and recovering from cybersecurity incidents. It defines roles, responsibilities, communication protocols, and step-by-step actions to minimize damage and restore normal operations efficiently.
🚨 Indicators of Compromise
IoC
مؤشرات الاختراق
Forensic artifacts that identify potentially malicious activity on a system or network.
⚡ Malware
البرمجيات الخبيثة
Software specifically designed to disrupt, damage, or gain unauthorized access to a computer system.
Mean Time to Detect (MTTD)
MTTD
متوسط الوقت للكشف
A key performance indicator that measures the average time it takes for a SOC team to discover a security incident or breach from the moment it occurs. MTTD is critical for assessing the effectiveness of security monitoring capabilities and detection controls, with lower values indicating more mature security operations.
🌐 Microsegmentation
التجزئة الدقيقة
A security technique that divides a network into isolated segments down to the individual workload level.
⚡ MITRE ATT&CK
إطار MITRE ATT&CK
A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations of cyberattacks.
🔑 Multi-Factor Authentication
MFA
المصادقة متعددة العوامل
An authentication method requiring two or more verification factors: something you know, something you have, or something you are.
🔑 Passwordless Authentication
المصادقة بدون كلمة مرور
Authentication methods that verify user identity without traditional passwords, using biometrics, tokens, or cryptographic keys.
🚨 Playbook
دليل الإجراءات
A predefined set of actions and procedures for responding to a specific type of security incident.
⚡ Ransomware
برامج الفدية
Malicious software that encrypts victim's files and demands payment for the decryption key.
⚖ Risk Appetite
قبول المخاطر
The amount and type of risk that an organization is willing to accept in pursuit of its objectives.
⚖ Risk Assessment
RA
تقييم المخاطر
The process of identifying, analyzing, and evaluating risks to determine their likelihood and potential impact on the organization.
🏛 Security Architecture
البنية الأمنية
A unified security design that addresses the necessities and potential risks involved in a certain scenario and specifies when and where to apply security controls.
🏛 Sender Policy Framework
SPF
إطار سياسة المرسل
An email authentication protocol that allows domain owners to specify which mail servers are authorized to send emails on behalf of their domain. SPF helps prevent email spoofing by enabling receiving servers to verify that incoming mail from a domain comes from an authorized IP address.
⚡ Supply Chain Attack
هجوم سلسلة التوريد
An attack that targets the less-secure elements in a supply chain to compromise the final target.
⚖ Threat
التهديد
Any circumstance or event with the potential to adversely impact organizational operations through unauthorized access, destruction, disclosure, or modification of information.
🛡 Threat Hunting
مطاردة التهديدات
The proactive practice of searching through networks and datasets to detect threats that evade existing security solutions.
🛡 Threat Intelligence
TI
استخبارات التهديدات
Evidence-based knowledge about existing or emerging threats that helps organizations make informed security decisions.
⚖ Threat Modeling
نمذجة التهديدات
A structured approach for identifying and prioritizing potential threats to a system and determining countermeasures.
⚖ Vulnerability
Vuln
الثغرة الأمنية
A weakness in a system, application, or process that could be exploited by a threat to gain unauthorized access or cause harm.
🔑 Zero Trust
ZT
الثقة المعدومة
A security model based on the principle of never trust, always verify, requiring strict identity verification for every person and device attempting to access resources.
🌐 Zero Trust Architecture
ZTA
بنية الثقة الصفرية
Security model based on the principle "never trust, always verify" — every user, device, and application must be continuously authenticated regardless of network location. Key pillars: strong identity, device validation, least-privilege access, microsegmentation, and continuous monitoring.
⚡ Zero-Day Vulnerability
0-Day
ثغرة يوم الصفر
A software security vulnerability that is unknown to the vendor and for which no patch or fix is available.