What Is Cybersecurity?

What is Cybersecurity?

Cybersecurity is the practice of protecting computers, networks, applications, identities, data, cloud environments, and connected systems from unauthorized access, disruption, misuse, or attack.

In practical terms, cybersecurity is about understanding where an organization may be exposed, reducing that exposure, detecting suspicious activity early, and responding before an incident causes significant damage.

Modern cybersecurity goes far beyond antivirus software and firewalls. Organizations now have to protect cloud workloads, mobile devices, remote users, operational technology, APIs, digital identities, Internet of Things (IoT) systems, and an expanding digital footprint. At the same time, cybercriminals are becoming more organized, attacks are becoming increasingly automated, and generative AI is changing both defensive security operations and the techniques used by attackers.

Cybersecurity combines technologies, processes, policies, and human expertise to protect digital systems against cyber threats.

Those threats may come from financially motivated cybercriminals, nation-state groups, insiders, hacktivists, organized cybercrime operations, or opportunistic attackers looking for vulnerable systems.

Because technology environments continuously change, cybersecurity is not something an organization implements once and considers finished. New applications appear, users change roles, cloud services are added, vulnerabilities are discovered, and attack methods evolve.

Effective cybersecurity therefore depends on continuous visibility, risk assessment, threat monitoring, security operations, incident response, and improvement.

Synonyms

What Does Cybersecurity Protect?

The scope of cybersecurity has expanded considerably as organizations have become more connected.

1. People and Digital Identities:

User identities are now one of the most important parts of the security perimeter. Attackers frequently target passwords, privileged accounts, authentication tokens, session credentials, and other forms of identity information.

Identity and access management (IAM), multi-factor authentication (MFA), device authentication, least privilege access, and behavioral analytics can help reduce identity risks such as credential theft, credential stuffing, account takeover, and identity fraud.

2. Networks and Infrastructure:

Network security protects the infrastructure through which users, devices, applications, and services communicate. Security controls may include firewalls, network segmentation, network access control, network encryption, intrusion detection, network detection and response (NDR), behavioral analytics, and continuous network analysis.

Network visibility is particularly important because attackers that compromise one system may attempt lateral movement toward more valuable assets.

3. Endpoints and Devices:

Endpoints include laptops, desktops, servers, smartphones, and other devices connecting to organizational resources. Endpoint security focuses on preventing, detecting, and containing threats affecting these systems.

Modern endpoint protection frequently includes endpoint detection and response (EDR), behavioral monitoring, device controls, threat detection, and automated containment capabilities.

4. Applications and APIs:

Applications are frequent targets because they process valuable data and often provide direct access to business systems. Application security addresses vulnerabilities in software, APIs, web applications, and the development lifecycle.

Controls may include secure development practices, vulnerability management, application testing, authentication controls, web application firewalls (WAFs), and runtime monitoring.

5. Data:

Data security focuses on protecting information from unauthorized access, alteration, destruction, and leakage. Organizations commonly use data encryption, access controls, data loss prevention (DLP), classification policies, monitoring, and data security solutions to protect sensitive information.

Different industries may have additional requirements. Healthcare organizations, for example, must place particular emphasis on protecting patient data such as protected health information (PHI).

6. Cloud Environments:

Cloud security protects applications, identities, workloads, infrastructure, and data operating within public, private, hybrid, and multi-cloud environments.

Cloud security becomes especially important because cloud infrastructure can change quickly and may involve complex permissions, APIs, containers, third-party services, and distributed workloads.

7. IoT and Operational Technology:

IoT security protects connected devices such as sensors, cameras, smart equipment, and industrial devices.

Operational technology (OT) security focuses on environments controlling physical processes, including industrial control systems (ICS), manufacturing systems, energy infrastructure, transportation technology, and other critical operational environments.

Cyberattacks against these systems can affect more than data. In some environments, they may disrupt physical operations, production, or public services.

Why is Cybersecurity Important?

Organizations depend on digital systems for communication, operations, financial transactions, customer services, manufacturing, healthcare, logistics, and decision-making.

That dependence creates opportunity, but it also creates exposure. A successful cyberattack can lead to:

Data breaches
Operational disruption
Financial loss
Intellectual property theft
Corporate espionage
Regulatory penalties
Data leakage
Identity fraud
Reputational damage
Business interruption
Loss of customer trust

Cybersecurity helps organizations reduce the likelihood and impact of these events. Its importance has increased as digital footprints expand across cloud environments, remote workforces, SaaS platforms, mobile devices, third-party providers, IoT systems, and interconnected infrastructure.

Organizations must therefore think beyond simply blocking malware. They need to understand their attack surface, monitor changing risks, detect suspicious behavior, protect identities and data, and prepare for incidents that prevention technologies may not stop.

How Does Cybersecurity Work?

Cybersecurity works through multiple layers of protection rather than through a single security tool.

1. Identify and Understand Risk:

Organizations first need visibility into their users, applications, devices, networks, vulnerabilities, cloud resources, data, and external dependencies.

Cybersecurity assessments, vulnerability management, threat assessments, contextual risk analysis, and cybersecurity risk assessments help security teams understand where meaningful exposure exists.

2. Protect Critical Assets:

Preventive controls are then used to reduce opportunities for attackers. These may include firewalls, MFA, least privilege access, network segmentation, encryption, endpoint protection, secure access controls, patching, WAFs, SASE technologies, identity security controls, and data loss prevention.

3. Detect Suspicious Activity:

Because no preventive control can stop every attack, organizations also require continuous cybersecurity monitoring. Threat detection technologies analyze activity across endpoints, networks, identities, applications, and cloud environments to identify behavior that may indicate compromise.

Threat intelligence can provide additional context about known threat actors, infrastructure, attack vectors, malicious domains, malware, and adversary techniques.

4. Investigate and Respond:

Security teams investigate suspicious activity to determine what occurred, what systems are affected, and how serious the incident may be.

Security information and event management (SIEM), EDR, NDR, XDR, behavioral analytics, SOAR, and threat detection and response technologies can provide analysts with the evidence needed to investigate incidents.

When malicious activity is confirmed, incident response teams may isolate systems, disable compromised accounts, block malicious traffic, remove malware, preserve evidence, or execute an established incident response plan.

5. Recover and Improve:

After containment, organizations restore affected systems and investigate what enabled the attack. Lessons from the incident can then improve detection rules, access controls, security architecture, cybersecurity training, vulnerability remediation, and future incident response plans.

Core Principles of Cybersecurity

Several fundamental principles appear repeatedly across effective cybersecurity programs.

1. Confidentiality, Integrity, and Availability:

The cybersecurity CIA triad represents three fundamental security objectives.

Confidentiality means information should only be accessible to authorized users.
Integrity means information should remain accurate and should not be changed without authorization.
Availability means systems and information should remain accessible when legitimate users need them.

Many cybersecurity controls ultimately support one or more of these three objectives.

2. Least Privilege:

Least privilege access gives users, applications, and systems only the permissions required to perform legitimate functions. Reducing unnecessary privileges limits what an attacker can access if an account becomes compromised.

3. Defense in Depth:

Defense in depth uses multiple security layers so that the failure of one control does not automatically result in complete compromise. An organization might combine MFA, endpoint protection, network segmentation, threat monitoring, DLP, firewalls, encryption, and incident response rather than relying on any single technology.

4. Zero-Trust Security:

Zero trust assumes that network location alone should not determine whether a user or device is trustworthy. Users, devices, applications, and access requests are continuously evaluated based on identity, device posture, context, behavior, and risk.

5. Continuous Monitoring:

Modern environments change too quickly for periodic assessments alone. Continuous monitoring helps organizations identify unusual activity, new vulnerabilities, identity risks, unauthorized changes, and emerging threats as they appear.

6. Assume Breach:

An assume-breach mindset recognizes that some attacks will eventually bypass preventive controls. Cybersecurity architecture should therefore limit attacker movement, detect malicious behavior quickly, protect critical assets, and support rapid containment.

What Makes Up a Modern Cybersecurity Program?

A mature cybersecurity program combines more than security software.

People: Security analysts, incident responders, threat hunters, engineers, architects, administrators, executives, and employees all contribute to cybersecurity. Cybersecurity awareness and cybersecurity training are particularly important because phishing and social engineering continue to target human behavior.

Processes: Organizations need defined processes for vulnerability management, cybersecurity monitoring, access management, threat detection, incident response, security assessments, patching, investigations, and recovery. Documented incident response plans are especially important because teams need to know what actions to take when a serious cybersecurity incident occurs.

Technology: Cybersecurity technologies provide visibility, prevention, detection, investigation, and response capabilities. Organizations may use combinations of EDR, NDR, XDR, SIEM, SOAR, DLP, IAM, firewalls, WAFs, encryption, SASE, vulnerability management platforms, and other cybersecurity solutions.

Governance: Cybersecurity governance defines how security decisions are made, who owns specific risks, what policies apply, and how cybersecurity aligns with organizational priorities. Governance may also include cybersecurity compliance, regulatory requirements, security policies, risk management, audit processes, and executive oversight.

Threat Intelligence: Threat intelligence gives security teams additional information about threat actors, attack methods, malicious infrastructure, campaigns, vulnerabilities, and the broader cyber threat landscape. Useful intelligence helps analysts understand not simply that something happened, but whether the behavior matches a known threat or creates meaningful risk.

Security Operations: Security operations bring monitoring, investigation, threat detection, threat intelligence, threat hunting, incident response, and security engineering together. A security operations center, or SOC, may perform these activities internally, through managed detection and response (MDR), or through a combination of internal and external teams.

Types of Cybersecurity

Cybersecurity includes multiple specialized disciplines.

Network Security: Network security protects communications, infrastructure, and network-connected systems against unauthorized access and malicious activity.
Endpoint Security: Endpoint security protects laptops, workstations, servers, and other devices using technologies such as antivirus, EDR, application controls, and behavioral monitoring.
Cloud Security: Cloud security protects cloud identities, applications, workloads, services, infrastructure, and data.
Application Security: Application security addresses vulnerabilities and security weaknesses in software, websites, APIs, and business applications.
Data Security: Data security protects information against unauthorized access, modification, exposure, or destruction.
Identity Security: Identity security protects user accounts, authentication processes, privileged identities, credentials, and access rights.
Mobile Security: Mobile security protects smartphones, tablets, mobile applications, and the data those devices access.
IoT Security: IoT security protects connected devices and IoT systems against unauthorized access, exploitation, and manipulation.
Operational Technology Security: Operational technology security protects industrial equipment, industrial control systems, production environments, and other systems controlling physical processes.
Information Security: Information security, or InfoSec, focuses on protecting information regardless of whether that information is stored digitally, physically, or in another form.

Common Cybersecurity Threats

The cyber threat landscape includes numerous attack techniques and motivations.

Phishing and Social Engineering: Phishing attempts to trick users into revealing sensitive information, opening malicious attachments, transferring money, or visiting fraudulent websites. Social engineering is the broader practice of manipulating people rather than directly exploiting technology. Business email compromise (BEC) is a common example. Attackers may impersonate executives, suppliers, or business partners to convince victims to transfer funds or disclose sensitive information.
Malware: Malware is malicious software designed to disrupt systems, steal information, monitor activity, establish unauthorized access, or perform other harmful actions.
Ransomware: Ransomware encrypts systems or data, disrupts operations, or steals information before demanding payment. The cybercrime ecosystem has made ransomware increasingly accessible through Ransomware-as-a-Service (RaaS), in which developers provide ransomware infrastructure to affiliates that conduct attacks.
Credential Theft and Identity Attacks: Attackers frequently steal usernames, passwords, authentication tokens, cookies, and other credentials. Stolen credentials may support account takeover, credential stuffing, privilege escalation, identity fraud, or broader compromise.
Insider Threats: Insider threats involve employees, contractors, partners, or other trusted individuals whose actions create security risk. These incidents may be malicious, careless, accidental, or the result of an insider account being compromised.
Advanced Persistent Threats: Advanced persistent threats, or APTs, typically involve skilled and well-resourced adversaries attempting to maintain access to valuable systems over an extended period. These campaigns are commonly associated with espionage, strategic intelligence collection, and high-value targets.
Supply Chain Attacks: Supply chain attacks compromise a trusted vendor, software provider, service provider, or business partner to reach additional organizations.
DDoS Attacks and Botnets: Distributed denial-of-service attacks overwhelm systems or services with traffic in an attempt to make them unavailable. Botnets consisting of large numbers of compromised devices are frequently used to generate this traffic.
Man-in-the-Middle Attacks: A man-in-the-middle attack occurs when an attacker secretly intercepts communications between two parties. Depending on the circumstances, the attacker may monitor traffic, steal credentials, or manipulate communications.
Vulnerability Exploitation: Attackers can exploit unpatched vulnerabilities, software weaknesses, configuration errors, and publicly exposed systems to gain unauthorized access. Effective vulnerability management helps organizations identify and prioritize these weaknesses before they are exploited.
IoT and Industrial Attacks: Poorly secured IoT devices and industrial systems may provide attackers with entry points into networks or opportunities to interfere with physical operations.
AI-Powered Attacks: Generative AI can help cyber adversaries create convincing phishing messages, generate fraudulent content, automate reconnaissance, produce deepfakes, or scale social engineering campaigns. AI does not replace traditional attack methods, but it can make certain methods faster, cheaper, and more convincing.

How Cybersecurity Defenses Work Together

Strong cybersecurity rarely depends on one product. Security controls work best when they provide overlapping visibility and protection.

For example, MFA may prevent an attacker from using a stolen password. If the attacker still gains access, identity monitoring may identify unusual authentication behavior. Endpoint security may detect malicious execution. NDR may identify suspicious network communication. SIEM or XDR may correlate those signals, while an analyst investigates the incident and initiates containment.

This layered model is important because cyberattacks often cross multiple parts of the environment. An identity compromise can become an endpoint compromise. An endpoint compromise can lead to lateral movement. Lateral movement can expose sensitive data. Data access can then lead to exfiltration, ransomware, fraud, or operational disruption.

The objective of a cybersecurity architecture is therefore not simply to create more alerts. It is to provide enough visibility, context, and control to identify meaningful threats and stop them before they develop into larger incidents.

Key Cybersecurity Technologies and Capabilities

Modern cybersecurity programs rely on a combination of specialized and integrated technologies.

Firewalls: Firewalls inspect and control network traffic based on security policies. They remain an important part of network security, although modern environments require additional controls beyond traditional perimeter firewalls.
Endpoint Detection and Response: Endpoint detection and response monitors endpoint behavior for suspicious activity and helps analysts investigate and contain endpoint threats.
Network Detection and Response: Network detection and response analyzes network activity to identify suspicious communication, lateral movement, malware activity, and other network security threats.
Extended Detection and Response: XDR combines telemetry and detections across multiple security domains, such as endpoints, networks, identities, email, and cloud infrastructure. The objective is to improve threat detection and response by connecting evidence that might otherwise remain isolated.
Security Information and Event Management: SIEM platforms collect and analyze security events and log data from multiple systems. They help security teams centralize monitoring, search historical activity, correlate events, and support investigations.
Security Orchestration, Automation and Response: SOAR technologies automate repetitive security operations and help analysts coordinate response workflows across multiple security tools.
Managed Detection and Response: MDR provides external security monitoring, investigation, threat hunting, and response expertise. Organizations may use MDR when they need additional analyst capacity or around-the-clock detection and response.
Identity and Access Management: IAM manages user identities, authentication, access privileges, and authorization. Strong identity security increasingly depends on MFA, least privilege access, device authentication, and continuous analysis of user behavior.
Data Loss Prevention: DLP helps organizations identify and prevent unauthorized movement or disclosure of sensitive information.
Secure Access Service Edge: Secure Access Service Edge, or SASE, combines networking and security capabilities through cloud-delivered architecture to protect users accessing applications and services from distributed locations.
Web Application Firewalls: A WAF monitors and filters traffic directed toward web applications and can help protect applications against common web-based attacks.
Encryption: Data encryption protects information by making it unreadable without the appropriate cryptographic key. Encryption can protect both stored data and information moving across networks.
Network Segmentation: Network segmentation separates systems into controlled network zones. If attackers compromise one area, segmentation can restrict lateral movement and limit access to more sensitive resources.
Threat Intelligence: Threat intelligence provides context about cyber threat actors, malware, infrastructure, vulnerabilities, and attack methods.
Behavioral Analytics: Behavioral analytics looks for changes or anomalies in user, device, endpoint, or network behavior that may indicate malicious activity.

Cybersecurity vs. Information Security vs. IT Security

These terms overlap, but they are not identical.

Cybersecurity vs. Information Security: Cybersecurity focuses primarily on protecting digital systems, networks, applications, identities, and information from cyber threats. Information security has a broader scope because it protects information in any form, including digital and physical information.
Cybersecurity vs. IT Security: IT security focuses on protecting information technology infrastructure such as computers, servers, business systems, networks, and enterprise applications. Cybersecurity includes IT security but also considers wider threats involving cloud environments, identities, IoT devices, operational technology, digital services, and external attack surfaces.
Cybersecurity vs. Network Security: Network security is one component of cybersecurity. It specifically protects network infrastructure, communications, connected devices, and traffic moving between systems.

Cybersecurity and the Security Operations Center

A security operations center helps transform security data into operational action.

Continuous Security Monitoring: SOC teams continuously monitor security telemetry from endpoints, networks, cloud services, identities, applications, and other systems.
Alert Triage and Investigation: Security tools can generate large numbers of alerts. Analysts determine which alerts represent normal activity, low-risk anomalies, or genuine cyber threats requiring investigation. Contextual risk analysis, asset information, threat intelligence, and behavioral analytics can improve these decisions.
Threat Hunting: Threat hunting proactively searches for indicators of malicious activity that may not have generated a conventional security alert.
Incident Response: When an incident is confirmed, analysts work with incident response teams to contain the threat, investigate its scope, remove malicious access, and restore affected systems.
Detection Engineering: Detection engineers build and improve rules, analytics, behavioral models, and monitoring logic that help identify attack techniques.
SOC Automation and Optimization: Automation can reduce repetitive analyst work by enriching alerts, gathering evidence, creating tickets, blocking indicators, isolating endpoints, or executing approved response actions. The objective is not to automate every decision. It is to allow analysts to spend more time on investigation, judgment, and complex threats.

How to Build a Cybersecurity Strategy

A cybersecurity strategy defines how an organization will reduce cyber risk while supporting business priorities.

Understand the Environment: Security teams need accurate visibility into applications, users, networks, endpoints, cloud resources, identities, data, and third-party services. Without that visibility, important parts of the attack surface may remain unmanaged.
Establish a Risk Baseline: Cybersecurity assessments and risk assessments help organizations understand current exposure and determine which weaknesses deserve attention first. Organizations often align their security programs with established cybersecurity frameworks such as the NIST Cybersecurity Framework while adapting controls to their own environment and risk tolerance.
Prioritize Critical Assets and Exposures: Not every vulnerability presents the same level of risk. Effective risk management considers factors such as exploitability, asset criticality, network exposure, business impact, active threat intelligence, identity privileges, and existing security controls.
Build Layered Security Controls: A cybersecurity plan should combine preventive and detective controls rather than relying entirely on one security platform. Controls may include MFA, network segmentation, EDR, NDR, DLP, firewalls, WAFs, IAM, encryption, SASE, vulnerability management, and XDR.
Establish Detection and Response Capabilities: Organizations should assume that some cyberattacks will bypass preventive defenses. Threat detection, cybersecurity monitoring, incident response, threat hunting, and security operations should therefore be core components of the cybersecurity strategy.
Test and Validate Defenses: Security controls should be tested to confirm that they provide the expected protection and visibility. Regular cybersecurity assessments, incident exercises, penetration testing, detection testing, and security architecture reviews can reveal gaps before real attackers find them.
Measure and Continuously Improve: Cybersecurity programs should evolve as business systems, technologies, vulnerabilities, regulations, and adversary behavior change. Cybersecurity transformation is therefore an ongoing process rather than a one-time modernization project.

How Do You Measure Cybersecurity Effectiveness?

Installing cybersecurity software does not automatically mean an organization is well protected. Security teams need to measure whether their cybersecurity solutions actually reduce meaningful risk.

Security Coverage and Visibility: Organizations should understand which endpoints, cloud workloads, identities, networks, applications, and critical assets are covered by monitoring and protection.
Detection Performance: Security teams can evaluate how reliably their cybersecurity tools detect meaningful malicious behavior while limiting false positives.
Detection and Response Speed: Metrics such as mean time to detect and mean time to respond can help organizations understand how quickly security teams identify and contain incidents.
Exposure Reduction: Organizations can track whether vulnerability management, identity controls, access management, and configuration improvements are reducing attack surface exposure.
Incident Containment: Security teams should also evaluate whether incidents are contained before attackers can move laterally, access sensitive data, or disrupt additional systems.
Control Effectiveness: Security testing can determine whether firewalls, endpoint controls, MFA, segmentation, DLP, detection rules, and other controls behave as expected.

Common Cybersecurity Challenges

Cybersecurity programs operate in increasingly complex environments.

Expanding Attack Surfaces: Cloud services, remote work, SaaS applications, APIs, mobile devices, third-party integrations, and IoT systems continuously expand organizational digital footprints.
Security Tool Fragmentation: Organizations may operate dozens of security technologies that generate independent alerts and data. Without integration, analysts can struggle to build a complete picture of an incident.
Limited Visibility: Unknown assets, unmanaged devices, encrypted traffic, cloud services, and shadow IT can create monitoring gaps.
Alert Fatigue: Poorly tuned cybersecurity monitoring can generate excessive low-value alerts. Analysts then spend valuable time investigating activity that poses little real risk.
Identity-Based Threats: Attackers increasingly use legitimate credentials rather than obvious malware. This makes identity security, behavioral analytics, MFA, and contextual access controls increasingly important.
Third-Party and Supply Chain Risk: Organizations depend on software vendors, service providers, contractors, cloud platforms, and business partners. A compromise within one of these trusted relationships can create significant downstream risk.
Changing Threat Actors: Cyber threat actors constantly adapt their cyberattack methods to bypass defenses. The cyber threat landscape includes financially motivated groups, state-sponsored adversaries, malicious insiders, hacktivists, fraud networks, and organized cybercrime operations.

The Role of AI in Cybersecurity

Artificial intelligence is changing both cybersecurity defense and cybercrime.

AI for Threat Detection: Machine learning and behavioral analytics can analyze large volumes of security telemetry to identify unusual patterns that might indicate malicious activity.
AI for Security Operations: Generative AI can help analysts summarize incidents, investigate alerts, search security data, generate queries, explain suspicious behavior, and automate repetitive security workflows.
AI-Powered Cyberattacks: Attackers can also use AI to improve phishing campaigns, automate reconnaissance, generate malicious content, create deepfakes, or scale social engineering.
AI Security: AI security focuses on protecting AI models, applications, infrastructure, training data, prompts, and connected systems against misuse or compromise. As organizations deploy more generative AI applications, securing those systems is becoming another part of modern cybersecurity architecture.

Cybersecurity Best Practices

No cybersecurity plan can eliminate all cyber risk, but several practices consistently strengthen protection:

Maintain an accurate inventory of assets, applications, identities, and cloud resources.
Use multi-factor authentication wherever possible.
Apply least privilege access.
Patch critical vulnerabilities quickly.
Continuously monitor endpoints, networks, identities, applications, and cloud environments.
Segment networks to limit lateral movement.
Encrypt sensitive information.
Deploy strong endpoint and network detection capabilities.
Maintain effective vulnerability management.
Protect privileged credentials.
Use threat intelligence to understand relevant adversaries and attack vectors.
Maintain tested incident response plans.
Back up critical data and verify recovery procedures.
Conduct cybersecurity awareness and phishing training.
Continuously assess cybersecurity architecture and risk posture.
Test security controls rather than assuming they are working.
Integrate cybersecurity governance with broader organizational risk management.

The most effective cybersecurity programs combine prevention, detection, response, and continuous improvement.

How Cybersecurity is Evolving

Cybersecurity has changed considerably from the era when most organizations protected a clearly defined corporate network.

Today, applications, users, workloads, identities, devices, and data may operate across multiple cloud platforms, offices, homes, data centers, SaaS environments, and third-party networks. This shift is changing cybersecurity architecture.

Organizations are increasingly adopting zero-trust security, SASE, XDR, behavioral analytics, identity-focused security, cloud-native security, cybersecurity mesh architecture, and integrated cybersecurity platforms.

At the same time, the cybercrime ecosystem is becoming more commercialized. Ransomware-as-a-Service, stolen credential markets, botnets, phishing kits, and other criminal services allow less-skilled attackers to access sophisticated capabilities.

Cybersecurity therefore continues to move toward better visibility, stronger identity controls, contextual risk analysis, automation, integrated threat detection, and faster incident response.

Related Terms & Synonyms

IT Security: The protection of IT infrastructure, systems, hardware, applications, and services against unauthorized access, disruption, or misuse.
Data Security: The technologies and practices used to protect data against unauthorized access, modification, exposure, leakage, or destruction.
Cloud Security: The protection of cloud applications, workloads, identities, infrastructure, services, and data from security threats.
Digital Security: The broader protection of digital identities, devices, information, online accounts, applications, and digital activities.
Network Security: The protection of network infrastructure, traffic, communications, and connected systems from unauthorized access and malicious activity.
Computer Security: The protection of computers and computing systems from malware, unauthorized access, misuse, and other security threats.
Enterprise Security: The coordinated protection of an organization’s users, applications, networks, endpoints, cloud environments, data, infrastructure, and business systems.
Application Security: The practices and technologies used to identify, prevent, and remediate vulnerabilities affecting software applications and APIs.
Infrastructure Security: The protection of the underlying computing, network, cloud, physical, and operational systems supporting organizational technology.
Information Security (InfoSec): The broader discipline of protecting information against unauthorized access, alteration, disclosure, or destruction regardless of its format.

Cybersecurity

Related Topics