Security & Compliance Fundamentals

The Apptega Security and Compliance Fundamentals offers clear, concise definitions of essential frameworks and compliance terms. Perfect for beginners and experts looking to quickly understand industry jargon.

NIST CSF

A simulated cyber attack against your computer system to check for vulnerabilities.

Cybersecurity Compliance

The proactive search for cyber threats that may be lurking undetected in a network.

ISO 27001

A document that outlines an organization's security measures and protocols.

CIS

The approach taken to prepare for, detect, and respond to cybersecurity incidents.

Security Audit

A systematic evaluation of an organization's information system security posture.

Two-Factor Authentication

An extra layer of security used to ensure that people trying to gain access to an online account are who they say they are.

VPN

A Virtual Private Network that creates a secure connection over the internet.

Ransomware

A type of malware that encrypts a victim's files and demands payment for the decryption key.

Phishing

A cyber attack that attempts to steal sensitive information by masquerading as a trustworthy entity.

Malware

Malicious software designed to harm or exploit any programmable device or network.

Firewall

A network security device that monitors and controls incoming and outgoing network traffic.

Cybersecurity

The practice of protecting systems, networks, and programs from digital attacks.

Cybersecurity Awareness Training

Training designed to educate employees about cybersecurity risks and best practices.

Security Audit

A comprehensive assessment of an organization's information system's security posture.

Cybersecurity Framework

A policy framework of computer security guidance for how private sector organizations can assess and improve their ability to prevent, detect, and respond to cyber attacks.

Incident Response

The approach taken to prepare for, detect, and respond to cybersecurity incidents.

Penetration Testing

A simulated cyber attack against your computer system to check for exploitable vulnerabilities.

Data Breach

An incident where unauthorized access to confidential data occurs.

Social Engineering

The psychological manipulation of people into performing actions or divulging confidential information.

Two-Factor Authentication

An extra layer of security requiring not only a password but also something that only the user has.

Encryption

The process of converting information into a code to prevent unauthorized access.

VPN

A Virtual Private Network that creates a secure connection over a less secure network.

Firewall

A network security device that monitors and controls incoming and outgoing network traffic.

Ransomware

A type of malware that encrypts files and demands payment for the decryption key.

Phishing

A cyber attack that uses disguised email as a weapon to trick users into revealing personal information.

Malware

Malicious software designed to harm or exploit any programmable device or network.

Cybersecurity

The practice of protecting systems, networks, and programs from digital attacks.