SOAR – Security Orchestration Automation and Response

A firewall is a network security system that monitors and...

Network Access Control (NAC) is a security solution that helps...

The CIA Triad is a fundamental concept in cybersecurity that...

Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) are...

A Virtual Private Network (VPN) is a technology that allows...

Ransomware is a type of cyber attack in which the...

The Recovery Time Objective (RTO) defines the maximum amount of...

An Incident Response Plan (IRP) is a strategy that outlines...

An Incident Response Plan (IRP) is a strategy that outlines...

A Disaster Recovery Plan (DRP) is a key document in...

A Business Impact Analysis (BIA) is a vital process in...

A Business Continuity Plan (BCP) is a key document in...

A Critical Business Asset (CBA) is the most essential resource...

A Critical Business Process (CBP) is the most crucial process...

ISO 27001 is a globally recognized standard for information security...

The National Institute of Standards and Technology (NIST) Special Publication...

The General Data Protection Regulation (GDPR) is a comprehensive data...

The Federal Information Security Management Act (FISMA) is a United...

The Health Insurance Portability and Accountability Act (HIPAA) is a...

The American Institute of Certified Public Accountants (AICPA) SOC 2...

A Chief Information Security Officer (CISO) is a senior executive...

Digital Forensics is a field that specializes in the investigation...

Shadow IT refers to the use of digital technologies and...

A Vulnerability refers to a weakness or flaw in a...

Advanced Persistent Threat (APT) is a term describing a sophisticated...

Threat Hunting is a proactive process aimed at locating and...

Attack Vectors are the pathways through which attackers infiltrate computer...

Certified Information Systems Security Professional (CISSP) is an international certification...

Extended Detection and Response (XDR), similar in nature to EDR,...

Security Information and Event Management (SIEM) is a system designed...

A Sandbox is an isolated environment where code or software...

Security Orchestration, Automation, and Response (SOAR) is a solution designed...

Data Loss Prevention (DLP) systems focus on identifying, monitoring, and...

A Security Operations Center (SOC) is a centralized unit within...

CVE is a program used for reporting security vulnerabilities and...

Patch Management involves identifying, assessing, and installing updates and patches...

Indicators of Compromise (IOCs) are data or parameters that help...

An Exploit is a code or attack technique used to...

The Common Vulnerability Scoring System (CVSS) is an international method...

Governance, Risk, and Compliance (GRC) is a comprehensive concept that...

FedRAMP (Federal Risk and Authorization Management Program) is a U.S....

SABSA (Sherwood Applied Business Security Architecture) is a business-driven security...

TOGAF is a comprehensive framework that guides organizations in designing,...

Mean Time to Recover (MTTR) is a key metric in...

A Brute Force Attack is a trial-and-error method used by...

An Insider Threat refers to a security risk posed by...

Packet Sniffing is a technique used to monitor and capture...

Phishing is a social engineering attack in which cybercriminals impersonate...

A Penetration Test or simply pen test, is a simulated...

User Access Control (UAC) is a security feature in Windows...

Windows Security Center (WSC) is a built-in feature in Windows...

Hashing is a cryptographic process that transforms an input ("message")...

An Email Security Gateway is a system or appliance designed...

The International Information System Security Certification Consortium (ISC2) is a...

The traditional Antivirus software is designed to detect, block, and...

Cryptography is the practice of securing information by converting it...

The Anti-Malware Scan Interface (AMSI) is a security feature in...

A Bastion Host (AKA Jump Box) is a specialized server...

Event Tracing for Windows (ETW) is a high-performance logging mechanism...

Multi Factor Authentication (MFA) is a security mechanism that requires...

A Vulnerability Assessment is a systematic process used to identify,...

A Brute Force Attack is a trial-and-error method used by...

The Cloud Security Alliance (CSA) is a nonprofit organization dedicated...

Certified Information Security Manager (CISM) is a globally recognized certification...

Personally Identifiable Information (PII) refers to any data that can...

The Information Systems Audit and Control Association (ISACA) is a...

The Internet Engineering Task Force (IETF) is an open standards...

The Internet Corporation for Assigned Names and Numbers (ICANN) is...

The Institute of Electrical and Electronics Engineers (IEEE) is the...

The Internet Assigned Numbers Authority (IANA) is a key organization...

The Cyber security and Infrastructure Security Agency (CISA) is a...

Protected Health Information (PHI) refers to any information in a...

Certified in Risk and Information Systems Control (CRISC) is a...

Administrative controls are policies, procedures, and guidelines that govern how...

A Cloud Security Access Broker (CASB) acts as an intermediary...

Security measures designed to protect an organization's physical infrastructure and...

Digital signatures are cryptographic mechanisms used to authenticate the validity...

A Honeypot is a decoy system or network resource designed...

Identity and Access Management (IAM) is a framework of policies,...

Secure Access Service Edge (SASE) is a cloud-based architecture that...

A Web Application Firewall (WAF) is a security solution designed...

Zero Trust is a security framework that operates on the...

Technical controls (also known as logical controls) are security measures...

TOR is a privacy-focused network that enables anonymous communication over...

Tails (The Amnesic Incognito Live System) is a privacy-focused Linux...

Privilege creep occurs when an individual within an organization gradually...

The Principle of Least Privilege (PoLP) is a security concept...

Identification, Authentication, Authorization, and Accountability (IAAA) are four key principles...

A Data Privacy Officer (DPO) is a key role within...

A Data Owner is a person or entity accountable for...

The Dark Net is a hidden part of the internet...

A Data Custodian is responsible for the technical management, storage,...

The Biba Model is a formal security model focused on...

A Cyber Security Architect is a professional responsible for designing...

The Bell-LaPadula Model is a formal security model designed to...

MITRE is a not-for-profit organization that operates federally funded research...

MITRE is a not-for-profit organization that operates federally funded research...

MITRE D3FEND is a cyber security framework designed to help...