Archives: Glossary

A

Azure Firewall

Azure Firewall is a managed, cloud-based network security service provided by Microsoft, designed to protect Azure Virtual Network resources. It is a stateful firewall as a service with built-in high availability and unrestricted cloud scalability.

B

Bring Your Own Device (BYOD)

Bring Your Own Device (BYOD) is a policy that allows employees to use their personal devices, such as smartphones, tablets, and laptops, for work purposes. This approach can increase flexibility and productivity while reducing equipment costs for the organization. However, BYOD also introduces security and management challenges that must be addressed.

C

Cloud Migration

Cloud Migration refers to the process of moving digital business operations into the cloud. This transition can encompass moving data, applications, or entire IT processes from on-premises servers or another cloud environment to a cloud computing environment.

Compliance as a Service (CaaS)

Compliance as a Service (CaaS) is a cloud-based model that aids organizations in efficiently managing regulatory and industry compliance requirements

Cross-Site Scripting (XSS)

Cross-site scripting (XSS) is a security vulnerability typically found in web applications. This vulnerability allows attackers to inject malicious scripts into content from otherwise trusted websites. XSS attacks enable attackers to bypass access controls such as the same-origin policy, which is designed to prevent malicious scripts on one page from obtaining access to sensitive data on another page without the user's consent.

Cybersecurity Compliance

Cybersecurity compliance involves adhering to laws, regulations, guidelines, and specifications relevant to an organization's cybersecurity practices.

D

Data Encryption

Data Encryption is a security method where information is encoded in such a way that only authorized parties can access it. The process involves converting the original representation of the information, known as plaintext, into an alternative form known as ciphertext.

Distributed Denial-of-Service (DDoS)

Distributed Denial-of-Service (DDoS) is a cyberattack aimed at overwhelming a target's network, service, or website with a flood of internet traffic, rendering it unavailable to legitimate users. Attackers use multiple compromised systems, often part of a botnet, to generate excessive traffic.

E

End-Point Protection

End-Point Protection is a security solution designed to secure end-points, or end-user devices such as desktops, laptops, and mobile devices, from a variety of cyber threats. These threats include malware, phishing attacks, ransomware, and other forms of cyberattacks that target the vulnerabilities in endpoint devices.

F

FTP (File Transfer Protocol)

File Transfer Protocol (FTP) is a standard network protocol used for transferring files between a client and server over a computer network. Operating over Transmission Control Protocol (TCP), FTP typically uses port 21 to establish connections, allowing users to upload, download, delete, and organize files on servers.

G

General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that became enforceable on May 25, 2018. It was enacted by the European Union (EU) to protect the privacy and personal data of EU citizens for transactions that occur within EU member states.

H

Health Insurance Portability and Accountability Act (HIPAA)

HIPAA was primarily designed to protect the privacy and security of patients' medical records and other health information provided to health plans, doctors, hospitals, and other healthcare providers.

Helpdesk Support

Helpdesk Support refers to the service provided by organizations to offer assistance, support, and information to users facing issues with products or services. This support can be delivered through various channels, including phone, email, web, and live chat.

I

Information Assurance

Information Assurance (IA) refers to the measures taken to protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation

Intrusion Prevention System (IPS)

An Intrusion Prevention System (IPS) is a network security technology designed to detect and prevent identified threats. IPSs are placed inline (directly in the path of network traffic) to actively analyze and take automated actions on all traffic flows entering and leaving a network.

L

LAN (Local Area Network) Support

Local Area Network (LAN) Support encompasses managing and maintaining local networks within an organization. A LAN connects computers and other devices within a limited geographic area, such as a building or campus, facilitating resource sharing and communication.

M

Malware

Malware is a type of malicious software designed to inflict harm on computers, networks, or users. It encompasses various forms, including viruses, worms, Trojans, ransomware, spyware, adware, and rootkits. Malware can steal sensitive data, disrupt operations, or provide unauthorized access to attackers.

Meraki Firewall

Meraki Firewall is part of Cisco Meraki's cloud-managed IT solutions, offering integrated network security and threat management within the Meraki ecosystem.

Microsoft 365

Microsoft 365 is a comprehensive suite of cloud-based productivity and collaboration tools developed by Microsoft. It integrates core office applications like Word, Excel, PowerPoint, and Outlook with advanced services such as OneDrive, SharePoint, and Teams, among others.

N

Network Infrastructure Monitoring

Network Infrastructure Monitoring involves the continuous observation and management of a network's hardware and software components to ensure optimal performance, security, and reliability.

Network Management

Network management encompasses the processes, methods, and tools required to administer, operate, maintain, and provision computer networks.

Network Topology

Network topology refers to the arrangement of different elements (links, nodes, etc.) of a computer network. Essentially, it is the topological structure of a network and may be depicted physically or logically.

P

Patch Management

Patch management is the process of managing updates for software applications and technologies. It involves acquiring, testing, and installing multiple patches (code changes) on existing applications and software tools on a computer, enabling systems to stay updated on current versions.

Payment Card Industry Data Security Standard (PCI DSS)

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. The PCI DSS is a global standard and applies to any organization, regardless of size or number of transactions, that accepts, transmits, or stores any cardholder data.

Penetration Testing

Penetration Testing, often referred to as "pen testing" or "ethical hacking," is a simulated cyber attack against your computer system to check for exploitable vulnerabilities.

R

Ransomware

Ransomware is a type of malicious software (malware) that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid. Modern ransomware families, collectively categorized as crypto-ransomware, encrypt certain file types on infected systems and force users to pay the ransom through certain online payment methods to get a decrypt key.

Remote Monitoring

Remote monitoring, in the context of IT and cybersecurity, refers to the process of overseeing and managing technology assets, systems, and networks from a distance. This practice is essential for ensuring the health, performance, and security of IT infrastructure, particularly in distributed environments or where direct physical access is limited.

S

Security Information and Event Management (SIEM) Systems

Security Information and Event Management (SIEM) systems provide a holistic view of an organization's information security. SIEM solutions aggregate and analyze log data generated across the network—from endpoints, servers, network devices, and applications—to detect, categorize, and respond to potential security incidents in real-time

Switches

In the context of computer networking, a switch is a hardware device that connects devices within a local area network (LAN). Unlike a network hub that broadcasts the same data out of each of its ports and lets devices decide what data they need, a switch is more intelligent.

System Hardening

System hardening is the process of securing a computer system by reducing its surface of vulnerability. This involves identifying and mitigating potential security risks by removing unnecessary applications, closing unused ports, disabling unneeded services, and applying the latest patches and security updates.

T

Tech Consultancy

Tech consultancy involves providing expert advice and solutions to businesses regarding the use of technology to achieve their goals.

U

User Access Management

User Access Management is a crucial aspect of IT security that controls and monitors who has access to various organizational resources. Effective user access management ensures that only authorized individuals can access specific data, applications, and systems, protecting sensitive information from unauthorized access and breaches.

V

Vulnerability Scanning

Vulnerability scanning is a systematic process to probe computing systems, networks, and applications for security weaknesses. It is a fundamental component of any cybersecurity strategy, enabling organizations to identify, assess, and prioritize vulnerabilities for remediation before attackers can exploit them.

W

WAN (Wide Area Network)

Wide Area Network (WAN) is a telecommunications network that extends over large geographic areas, connecting multiple Local Area Networks (LANs) across cities, countries, or continents. WANs facilitate communication and resource sharing across dispersed locations, supporting global business operations.

Z

Zero Trust Network Access (ZTNA)

Zero Trust Network Access (ZTNA) is a security model that assumes no implicit trust and requires continuous verification of user identity and device integrity before granting access to resources. Unlike traditional security models that trust users inside the network, ZTNA treats all network traffic as untrusted.

Cloud Migrations

Microsoft 365

Microsoft Azure

End-Point Protection

System Hardening

Helpdesk Support

Network Management

Servers & Systems

A

Azure Firewall

B

Bring Your Own Device (BYOD)

C

Cloud Migration

Compliance as a Service (CaaS)

Cross-Site Scripting (XSS)

Cybersecurity Compliance

D

Data Encryption

Distributed Denial-of-Service (DDoS)

E

End-Point Protection

F

FTP (File Transfer Protocol)

G

General Data Protection Regulation (GDPR)

H

Health Insurance Portability and Accountability Act (HIPAA)

Helpdesk Support

I

Information Assurance

Intrusion Prevention System (IPS)

L

LAN (Local Area Network) Support

M

Malware

Meraki Firewall

Microsoft 365

N

Network Infrastructure Monitoring

Network Management

Network Topology

P

Patch Management

Payment Card Industry Data Security Standard (PCI DSS)

Penetration Testing

R

Ransomware

Remote Monitoring

S

Security Information and Event Management (SIEM) Systems

Switches

System Hardening

T

Tech Consultancy

U

User Access Management

V

Vulnerability Scanning

W

WAN (Wide Area Network)

Z

Zero Trust Network Access (ZTNA)