Next-Generation Firewall

Security Operations Centre

A centralised facility where security professionals monitor, detect, analyse, and respond to cybersecurity incidents.

Intrusion Detection System

A system that monitors network traffic or system activities for malicious activity or policy violations.

Endpoint Detection and Response

Security technology that monitors endpoint devices to detect, investigate, and respond to cyber threats.

Security Orchestration Automation and Response

Technology that automates security operations by orchestrating tools and processes for incident response.

Incident Response Plan

A documented set of procedures for detecting, responding to, and recovering from cybersecurity incidents.

Digital Forensics

The process of collecting, preserving, and analysing electronic evidence for investigating security incidents.

Honeypot

A decoy system designed to attract attackers and study their methods while protecting real systems.

Extended Detection and Response

A unified security platform that integrates data from endpoints, networks, cloud workloads, and email to provide holistic threat detection, investigation, and automated response.

Security Orchestration, Automation and Response

A technology stack that integrates security tools and automates incident response workflows, enabling faster triage, investigation, and remediation of security alerts.

Threat Hunting

The proactive search for cyber threats within an organisation's environment that have evaded automated detection, using hypotheses, threat intelligence, and advanced analytics.

An entity that issues digital certificates, verifying the identity of organisations and encrypting communications.

Malicious software that encrypts a victim's files and demands payment for the decryption key.

A communication system where only the communicating users can read the messages, with encryption at both endpoints.

A group of security professionals who simulate real-world attacks to test an organisation's defensive capabilities.

A cyberattack targeting the less-secure elements of a supply chain to compromise a primary target.

An authentication method requiring two or more verification factors to gain access to a resource.

The practice of protecting systems, networks, and programs from digital attacks, unauthorised access, and data breaches.

The process of identifying, quantifying, and prioritising security vulnerabilities in systems and applications.