Table of contents
In the current information age that we live in, effective and optimal protection of data, information and computer network is of high importance. This is important for preventing hardware damage, for securing network and information, in order to mitigate threats and breaches of data. Preventing security and data breaches are the sole responsibilities of Cybersecurity experts in an organization. They are saddled with the responsibilities of protecting data and securing networks against all forms of attacks. It is quite important to understand the basic terms and concepts of Cybersecurity, that can help us an individuals and organizations.
WHAT IS CYBERSECURITY?
Cybersecurity is any practice or process that an organization put in place to ensure the successful protection of data and information systems against any form of threats, attacks and breaches (be it internal or external attack). Another name for Cybersecurity is ‘Information technology Security’. As much as it is important to understand what Cybersecurity is, it is also important to understand its basic terms and concepts, so as to have a background knowledge of its fundamentals.
BASIC CONCEPTS OF CYBERSECURITY
The CIA Triad: The CIA (Confidentiality, Integrity and Accessibility) are the 3 key points of Cybersecurity. Understanding these three standpoints will give us the knowledge of Cybersecurity framework • Confidentiality: Confidentiality is the process and measures that an organization takes to restrict access to sensitive data, in a way that only privileged and authorized users have access to it. This protects an organization’s data and information from unauthorized viewing. • Integrity: Integrity is the second element of the triad which refers to the accuracy, consistency and trustworthiness of data. This means maintaining and protecting data and information from unauthorized alterations and changes. •Availability: This means that all systems and networks are functioning smoothly with no disruption or interruption. It is the process of maintaining data’s accessibility in a such a way that it is accessible to authorized viewers as at when needed. The CIA triad is the primary tenet on which Cybersecurity is built.
Cyberattacks: Cyberattack is another important concept in Cybersecurity. Just as the name implies, Cyberattacks are threats and breaches that are penetrated into an organization’s data, systems and network. In order, cyberattacks ranges from tampering of systems and data, unauthorized access to the targeted systems and accessing sensitive information. There are various forms of cyberattacks and below are some of them. •Malware: Malware (malicious software) is a kind of software, malicious in nature, that is designed to disrupt a system, breach its data and information authorization and in a way prevent authorized access attempts. Malware has its own varieties which include spyware, ransomware, botnet, virus, worms etc. • Social engineering attacks: Social engineering is one of the common non- technical Cybersecurity attacks. It involves the use of tricks to get information access from individuals and personnels that are involved. It may trick you by displaying fascinating prizes or huge offers and requesting personal details from you. • Advanced Persistent threats (APT): APT is a sophisticated attack carried out by cybercriminals with the use of sophisticated gadgets. This attack relies solely on sophisticated malwares to attack targeted networks. • Phishing: Phishing is one of the most common cyberattacks aimed at stealing sensitive data and credentials from victims. It includes fraudulent actions of getting information using spam emails or false information.
Incident Response: Incident responses are the steps, processes and measures an organization follows after detecting an intrusion or threat. These procedures help mitigate the risks associated with breaches, attacks and intrusion.
Security operation center (SOC): The SOC refers to the process of threat and incident response, and also the composition of auxiliary security technologies. Typically, many smaller organizations outsource their SOC, but larger ones often have and train their in-house SOC.
Indicator of Compromise (IoC): The IoC is any piece of information that points to a network intrusion, threat or attack.
Identify Access Management (IAM): These are the principles that control user’s electronic identities. The reason for this is to ensure each user’s access to the right level of their IT infrastructure.
As much as the internet has opened individuals and business to endless opportunity, there’s also the need to be familiar with the concept of Cybersecurity, in order to protect data and information. Cyber criminals are tirelessly trying their best to infiltrate the space with several attacks in order to steal information, data and also damage systems. The role of Cybersecurity experts to prevent and mitigate these threats cannot be underestimated which is why individuals and businesses should also equip themselves with the basic knowledge of its concept.