Cybersecurity Fundamentals

The practice of protecting systems, networks, and data from digital attacks, unauthorized access, and damage.

Confidentiality, Integrity, and Availability — the three core security principles.

Ensuring information is accessible only to authorized parties.

Ensuring data is accurate and unaltered except by authorized changes.

Ensuring systems and data are accessible when needed.

Verifying the identity of a user, device, or system.

Granting permission to access specific resources or perform specific actions.

Authentication confirms who you are; authorization defines what you can do.

Tracking and logging user actions for audit and forensic purposes.

The assurance that someone cannot deny the validity of an action.

A potential cause of unwanted incident that may harm a system.

A weakness that can be exploited by a threat to compromise security.