NEW
Also known as: Computer Security, Information Security (InfoSec)
Protecting systems, networks, and data from digital attacks and unauthorized access.
DESCRIPTION
Cybersecurity encompasses strategies and controls to ensure confidentiality, integrity, and availability of information systems. It includes identity and access management, encryption, secure development, threat detection, and incident response. Frameworks and standards guide programs (e.g., NIST CSF, ISO 27001). Evolving threats demand continuous monitoring, risk management, and resilience.
ALTERNATIVE DEFINITIONS
NIST
The prevention of damage to, protection of, and restoration of computers, electronic communications systems, services, and information they contain, from security-related threats.
Includes prevention, protection, and restoration aspects.
CISA
Cybersecurity is the art of protecting networks, devices, and data from unauthorized access or criminal use and the practice of ensuring confidentiality, integrity, and availability of information.
Highlights CIA triad and practical protection focus.
ENISA
Cybersecurity refers to the protection of information systems from theft or damage to hardware, software, or data, as well as from disruption or misdirection of the services they provide.
Covers damage, theft, and service disruption aspects.
RELATED TERMS
CIA Triad Zero Trust Access Control Data Encryption IAM Threat Detection Incident Response Vulnerability Management Network Security
COMPETING TERMS
RELATIONS
- Narrower: EU Agency for Cybersecurity
KNOWLEDGE AREAS
Data Security Infrastructure Cloud
TARGET AUDIENCE
Chief Information Security Officer Security Architect Cybersecurity Engineer DevOps Engineer Cloud Architect IT Manager Software Developer
EXTERNAL SOURCES
- Wikipedia - Computer security
- NIST - Cybersecurity Framework overview
- ISO - ISO 27001 information security standard
- OWASP - Top web app security risks
TOP QUESTIONS
What are the pillars of Cybersecurity?
Confidentiality, integrity, and availability (CIA triad) guide controls and risk decisions.
Category: Overview
What is a common Cybersecurity mistake?
Prioritizing perimeter defenses while neglecting identity, patching, and least privilege leads to breaches.
Category: Mistakes
What is the biggest risk in Cybersecurity today?
Credential theft and supply-chain vulnerabilities can bypass traditional defenses and cause widespread impact.
Category: Risks
How does Zero Trust relate to Cybersecurity?
Zero Trust assumes breach, verifying explicitly and enforcing least privilege across identities and devices.
Category: Opinion
How is Cybersecurity managed operationally?
Programs implement IAM, encryption, monitoring, incident response, and compliance aligned to frameworks like NIST CSF.
Category: Management
Where to start learning Cybersecurity?
Explore NIST CSF, OWASP Top Ten, and hands-on labs; build foundational skills in IAM and network security.
Category: Overview
How do cloud platforms change Cybersecurity?
Shared responsibility models require strong identity, configuration management, and workload isolation.
Category: Opinion
What is the role of threat detection?
Detecting anomalies and indicators of compromise enables rapid containment and response.
Category: Requirements
What regulations impact Cybersecurity?
ISO 27001, SOC 2, and sector-specific rules guide controls and attestations.
Category: Overview