Intro to Cybersecurity Vocabulary

Partitioning a network into smaller networks (multiple zones).

Any occurrence or incident within a system or network.

A facility for monitoring and responding to security incidents.

A control that remediates a vulnerability.

Separating different duties or functions to prevent conflicts of interest.

Natural, human or technological circumstances that can cause harm to assets or systems.

Controls designed to identify security incidents.

A system for monitoring and analyzing security events.

An intentional action to compromise the security of a system or organization.

A specific method or approach used by adversaries to execute tactics.

Observable evidence that a security incident has occurred or is ongoing.

Controls such as firewalls, IAM controls or SIEM logging.

The sum of all possible entry points and vulnerabilities an attacker could exploit.

Observable evidence that an attack is about to or is occuring.

A safeguard or countermeasure implemented to manage or reduce risks.

A coordinated response structure involving multiple organizations during emergencies.

A company that offers security services to organizations.

Weaknesses or flaws in a system that can be exploited by threats.

A graphical representation of attack paths and their potential outcomes.

Detailed steps or instructions for executing a specific technique.

The level of risk that an organization is willing to accept or tolerate.

The process of evaluating and measuring risks to determine their impact and likelihood.

A resource or item of value to an organization.

Controls such as locks and access badges or fire extinguishers.

Management-based controls, such as policies and procedures.

Separating (often virtually) object within a network.

A piece of software or technique used to take advantage of a vulnerability.

The path or method an attacker uses to exploit a vulnerability.

The potential for harm or loss resulting from threats exploiting vulnerabilities in assets.

A control designed to correct or remediate vulnerabilities or incidents.

Security event that violates an organization's security policies.

A control that substitutes for another control to achieve risk reduction.

A high-level category of adversary behavior used to achieve objectives.

Controls intended to prevent security incidents before they occur.

Project that provides guidance on web application security.

A security approach where trust is not assumed and verification is required for all interactions.