🔐 Cybersecurity Glossary

The practice of encrypting backup data to protect it from unauthorized access if backup media is lost or stolen.

Authentication method using unique biological characteristics such as fingerprints, facial recognition, or iris patterns.

A group of security professionals responsible for defending against simulated and real attacks.

The responsibility of the board of directors to oversee the organization's cybersecurity strategy and risk management.

An attack method that uses trial and error to guess passwords, login credentials, or encryption keys.

A program offered by organizations that rewards security researchers for responsibly reporting vulnerabilities.

A documented collection of procedures and information that enables an organization to respond to disruptions, maintain critical business functions, and recover operations to predefined levels following a disaster or significant incident. The BCP identifies critical business processes, recovery time objectives (RTO), recovery point objectives (RPO), and the resources required to sustain operations during adverse conditions.

A sophisticated scam targeting organizations that regularly perform wire transfers, exploiting compromised executive email accounts.

A strategic security approach combining technical controls, user awareness training, and governance policies to prevent sophisticated email fraud attacks targeting organizations. This includes implementing verification procedures for financial transactions, executive impersonation detection, and incident response protocols.

A process that identifies and evaluates the potential effects of disruption to critical business operations.