Cyber Security Glossary

Asset Risk Management (ARM)

Asset Risk Management involves assessing assets, asset systems, portfolios, and their associated risks. It encompasses acquisition, disposal, operational risks, asset criticality, and spares criticality to ensure robust protection of hardware components.

Asset Risks

Asset risks arise from inadequate security measures, including outdated software, weak passwords, and unpatched systems. These vulnerabilities can be exploited by cybercriminals, leading to data breaches and other significant security incidents.

Asset Visibility

Asset visibility refers to the capability to identify all known and shadow assets connected to a network, regardless of their location or user. This includes understanding how assets are utilized, which is crucial for effective cybersecurity management.

Configuration Management Database (CMDB)

A CMDB is a structured repository that stores information about an enterprise’s hardware and software IT assets and their interrelationships, facilitating comprehensive analysis of configuration data for improved cybersecurity.

Cyber Physical technology

Cyber-Physical Technology integrates computation, networking, and physical processes. When secured, it enables real-time, reliable, and resilient performance essential for safeguarding hardware components in various applications.

Cyber attackers and hackers

Cyber attackers and hackers are individuals or groups who use their technical skills to exploit vulnerabilities in computer systems, networks, or devices.

Endpoint and Network Security

Endpoint Security involves protecting individual devices that connect to a network, such as laptops, smartphones, tablets, desktops, and servers. These devices, known as endpoints, are often targeted by cybercriminals because they can serve as entry points to a network.

Hardware Attacks

Hardware Attacks use rogue hardware tools disguised as everyday items like USB drives, chargers, or peripherals. This allows them to infiltrate networks undetected.

Hardware Cyber Security

Hardware cyber security focuses on protecting the physical components of computer systems, devices, and networks from unauthorized access, attacks, and tampering. It plays a crucial role in ensuring the overall security of information technology systems.

IoT Hardware

IoT hardware involves the tangible components and devices used to enable connectivity, such as IoT sensors, computer chips, actuators, cables, and smart devices.

IoT Healthcare

IoT technologies enable various healthcare applications, from remote monitoring and smart sensors to medical device integration. These innovations enhance patient safety and improve the quality of care delivered by healthcare providers.

IoT Security

The strategy and process of keeping IoT devices and systems safe by identifying and monitoring risks; ensuring availability, integrity and confidentiality; and safeguarding against threats and targeted attacks.

Malware and Ransomware

Malware refers to any malicious software that harms or exploits computers, networks, or devices. Ransomware is a type of malware that encrypts data or locks systems, demanding a ransom for access.

Medical Device CyberSecurity

Medical Device Cybersecurity refers to the tools, practices, and techniques employed to prevent unauthorized access to medical devices and the sensitive data they handle.

MSSP

MSSPs offer outsourced monitoring and management of security systems and devices. They handle upgrades, system modifications, and proactive security measures to safeguard hardware assets.

NDAA 889B

The aim of Section 889 is to protect National Security from cyber-attacks carried out by foreign adversaries.

NIST Cybersecurity Framework

A set of standards, guidelines, and best practices to help enterprises organize their cyber security program and mitigate against cyber security risks.

USB Threats

Malicious USB devices can bypass security controls to deliver malware, steal data, or gain unauthorized access, making physical ports a serious cyber risk.

Unauthorized Devices

Devices connected to a network without approval. These pose serious risks, as they may bypass security policies and introduce vulnerabilities.

Zero Trust Asset Access

The method of validating assets using Asset DNA and establishing a level of trust based on Asset Risk Factor score to monitor and control network access, enforcing the Zero Trust concept and its micro-segmentation protocols.