Cybersecurity

Cards · 20

CIA Triad

The foundational model guiding information security policies, consisting of Confidentiality, Integrity, and Availability.

Confidentiality

Ensuring that information is accessible only to those authorized to have access.

Integrity

Maintaining and assuring the accuracy and completeness of data over its entire lifecycle.

Availability

Ensuring authorized users have timely and reliable access to information and resources.

Authentication

The process of verifying the identity of a user, device, or system.

Authorization

The process of granting or denying specific permissions to an authenticated entity.

Non-repudiation

Assurance that an individual cannot deny the authenticity of their signature on a document or a sent message.

Threat

Any circumstance or event with the potential to adversely impact an asset via unauthorized access, destruction, or modification.

Vulnerability

A weakness or flaw in a system that can be exploited by a threat.

Risk

The potential for loss, damage, or destruction of an asset as a result of a cyber threat exploiting a vulnerability.

Social Engineering

Manipulating individuals into divulging confidential information or performing actions that compromise security.

Phishing

A fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity in electronic communications.

Malware

Malicious software designed to infiltrate, damage, or obtain unauthorized access to a computer system.

Ransomware

Malware that encrypts a victim's files and demands payment in exchange for the decryption key.

Denial-of-Service (DoS)

A cyberattack that makes a system or network resource unavailable to its intended users by overwhelming it with traffic.

Zero-day Vulnerability

A security flaw that is unknown to the software developer and has no available patch.

Encryption

The process of converting plaintext into unreadable ciphertext to prevent unauthorized access.

Firewall

A network security device that monitors and filters incoming and outgoing traffic based on predetermined rules.

Principle of Least Privilege

The security practice of granting users only the minimum access rights necessary to perform their jobs.

Multi-Factor Authentication (MFA)

An electronic authentication method that requires two or more pieces of evidence to verify a user's identity.