WILDCARD Cybersecurity Glossary

AAAAuthentication, Authorization, and AccountingSecurityThree steps of access control: confirm who you are, decide what you can do, and keep a record of what you did.Read →Account takeoverSecurityWhen someone else gets into your email or other account and uses it as if they were you.Read →ACLAccess Control ListSecurityA list attached to a file, folder or network device that states who is allowed to use it.Read →Admin accountSecurityA login with power to change settings, add users and see everything, which needs far more protection than an everyday login.Read →AEOAnswer Engine OptimizationMarketingWriting your web pages so search engines and voice assistants can lift out a short, direct answer to a customer's question.Read →AESAdvanced Encryption StandardSecurityThe standard method used worldwide to scramble data so only someone with the key can read it.Read →AES-256Advanced Encryption Standards 256-bitSecurityThe strongest common setting of the standard scrambling method, using a very long key.Read →AHAuthentication HeaderProtocolA part of the IPsec system that proves each packet came from the sender and was not changed, without hiding its contents.Read →AIArtificial IntelligenceOtherSoftware that learns patterns from huge amounts of examples so it can answer, sort, write or predict without being given exact steps.Read →AI OverviewsMarketingThe AI-written summary Google shows above the regular search results for some questions.Read →AISAutomated Indicator SharingSecurityA free US government service that shares details of new cyber threats between organisations in real time.Read →ALEAnnualized Loss ExpectancyManagementA dollar estimate of how much a specific risk is expected to cost a business in a year.Read →APAccess PointNetworkingThe box that turns your wired network into Wi-Fi so phones and laptops can join.Read →APIApplication Programming InterfaceCloudThe agreed way two pieces of software talk to each other, such as your booking tool sending appointments to your calendar.Read →APTAdvanced Persistent ThreatSecurityA patient, well-funded attacker who breaks into a network and stays hidden for months.Read →AROAnnualized Rate of OccurrenceManagementHow many times per year a particular bad event is expected to happen.Read →ARPAddress Resolution ProtocolProtocolHow devices on one network discover which hardware address belongs to which network address.Read →ASLRAddress Space Layout RandomizationSecurityA protection that shuffles where programs sit in memory each time they start, so attackers cannot predict where to strike.Read →ATT&CKAdversarial Tactics, Techniques, and Common KnowledgeSecurityA public catalogue, run by MITRE, listing the methods attackers use, grouped by the stage of an attack.Read →AUPAcceptable Use PolicyManagementA short document that tells staff what they may and may not do with company technology.Read →AVAntivirusSecuritySoftware that checks files against a list of known bad ones and blocks the matches.Read →

BacklinksMarketingLinks on other websites that point to yours, which search engines treat as votes of trust.Read →BackupManagementA separate copy of your files, kept somewhere else, that you can restore when the original is lost, deleted or locked.Read →BASHBourne Again ShellOtherA text-based command line used on Linux and older Mac computers to give instructions to the system.Read →BCPBusiness Continuity PlanningManagementA plan that keeps your business running, in some form, through a disaster or long outage.Read →BECBusiness Email CompromiseSecurityA scam where someone pretends to be your boss, your supplier or you by email to get money or data sent to them.Read →BGPBorder Gateway ProtocolProtocolThe system internet providers use to tell each other which routes lead to which networks.Read →BIABusiness Impact AnalysisManagementAn exercise that works out which parts of the business hurt most when they stop, and how fast you need them back.Read →Bing Webmaster ToolsMarketingMicrosoft's free dashboard that shows how your website appears in Bing, and in the Copilot answers built on Bing.Read →BiometricsSecurityUsing your fingerprint, face or voice to prove who you are.Read →BIOSBasic Input/Output SystemDeviceThe small program stored on a computer's motherboard that starts the hardware and hands over to the operating system.Read →BPABusiness Partners AgreementManagementA written agreement between two businesses that work together, covering roles, money and responsibilities.Read →BPDUBridge Protocol Data UnitNetworkingSmall messages that switches pass to each other to avoid creating a loop in the network.Read →Brute force attackSecurityGuessing passwords over and over, with software, until one works.Read →BYODBring Your Own DeviceManagementA policy that lets staff use their own phones or laptops for work.Read →

CACertificate AuthoritySecurityA trusted company that vouches that a website really belongs to who it says it does.Read →Canonical URLMarketingThe one official web address for a page that can be reached several different ways.Read →CAPTCHACompletely Automated Public Turing Test to Tell Computers and Humans ApartSecurityA small test on a web form that tries to tell real people from automated programs.Read →CARCorrective Action ReportManagementA written record of a problem, its cause and the steps taken to fix it and stop it happening again.Read →CASBCloud Access Security BrokerSecurityA service that sits between your staff and cloud apps to see which apps are used and enforce your rules.Read →CBCCipher Block ChainingSecurityA method of scrambling data in blocks where each block depends on the one before it.Read →CCMPCounter Mode/CBC-MAC ProtocolProtocolThe encryption method behind WPA2 Wi-Fi that keeps traffic private and checks it has not been altered.Read →CCTVClosed-circuit TelevisionDeviceA set of cameras that record video for security.Read →CERTComputer Emergency Response TeamManagementA team that handles computer security incidents and shares warnings about new threats.Read →CFBCipher FeedbackSecurityA method of scrambling data a few characters at a time, so it can be used on a live stream.Read →CHAPChallenge Handshake Authentication ProtocolProtocolA sign-in method where the server sends a puzzle and the user's device answers it, so the password never travels.Read →CIAConfidentiality, Integrity, AvailabilitySecurityThe three goals of information security: keep data private, keep it accurate, and keep it available when needed.Read →CIOChief Information OfficerManagementThe person responsible for your technology decisions, budget and direction, a role most small businesses rent part-time instead of hiring.Read →CIRTComputer Incident Response TeamManagementThe group inside one organisation that responds when a security incident happens.Read →Cloud storageCloudOnline space where your files are kept so you can reach them from any device.Read →CMSContent Management SystemOtherThe software you log into to edit your website without touching code, such as WordPress or Webflow.Read →ComplianceManagementFollowing the laws, rules and contract terms that apply to your business.Read →Conditional AccessManagementA checkpoint on every sign-in to Microsoft 365 that can block it, allow it, or ask for more proof.Read →COOPContinuity of Operation PlanningManagementA plan to keep the most important work going from another place or method when the office is out of action.Read →COPECorporate Owned, Personally EnabledManagementA policy where the company buys the phone or laptop, and staff may also use it for personal things.Read →Core Web VitalsMarketingGoogle's three scores for how fast your pages load, how quickly they respond, and how steady they stay while loading.Read →CPContingency PlanningManagementA plan for how the business keeps working when something unexpected happens.Read →CRCCyclical Redundancy CheckProtocolA quick check that data arrived or was stored without accidental damage.Read →Credential stuffingSecurityWhen criminals take a password leaked from one site and try it on every other site, because most people reuse passwords.Read →CRLCertificate Revocation ListSecurityA list of digital certificates that have been cancelled before their expiry date and should no longer be trusted.Read →CSOChief Security OfficerManagementThe senior executive responsible for protecting a company's information, people and buildings.Read →CSPCloud Service ProviderCloudA company that provides cloud services, such as Microsoft, Google or Amazon.Read →CSRCertificate Signing RequestSecurityA request file you create to ask a certificate issuer for a security certificate for your website or server.Read →CSRFCross-site Request ForgerySecurityAn attack that tricks your browser into sending a request to a site where you are already signed in.Read →CSUChannel Service UnitDeviceA device that connects a business's digital telephone or data line to the provider's network.Read →CTMCounter ModeSecurityA method of scrambling data that turns a block cipher into a stream using a running counter.Read →CTOChief Technology OfficerManagementThe senior executive who decides which technology a company builds on and how it is used.Read →CVECommon Vulnerability EnumerationSecurityA public ID number given to each known security flaw in software so everyone refers to the same one.Read →CVSSCommon Vulnerability Scoring SystemSecurityA 0 to 10 score that rates how serious a security flaw is.Read →Cyber insuranceManagementInsurance that helps pay the costs of a cyberattack, such as recovery, legal advice and lost income.Read →CybersecuritySecurityThe practice of protecting your computers, accounts and data from attack.Read →CYODChoose Your Own DeviceManagementA policy where staff pick their work device from a short list the company has approved.Read →

DACDiscretionary Access ControlSecurityA way of controlling access in which the owner of a file decides who else may open it.Read →Dark webSecurityThe hidden part of the internet where stolen passwords, card numbers and company logins are bought and sold.Read →Data breachSecurityWhen information that should be private gets seen, taken or exposed by someone who should not have it.Read →Data retentionManagementDeciding how long you keep each kind of information, and deleting it afterwards.Read →DBADatabase AdministratorManagementThe person who looks after a company's databases, keeping them running, backed up and secure.Read →DDoSDistributed Denial of ServiceSecurityThe same flood of traffic as a denial-of-service attack, but sent from thousands of hijacked devices at once.Read →DeepfakeSecurityA fake video, photo or voice made with AI to look and sound like a real person.Read →DEPData Execution PreventionSecurityA built-in Windows protection that stops data areas of memory from running programs.Read →DESDigital Encryption StandardSecurityAn old data-scrambling method from the 1970s that is now too weak to protect anything important.Read →DHCPDynamic Host Configuration ProtocolNetworkingThe service that automatically gives each device on your network an address when it connects.Read →DHEDiffie-Hellman EphemeralSecurityA way for two devices to agree on a secret key over an open connection, using a fresh key each time.Read →DKIMDomainKeys Identified MailSecurityA digital wax seal added to every email you send so the receiving inbox can tell the message was genuine and was not changed on the way.Read →DLLDynamic Link LibraryOtherA file of reusable code that many Windows programs borrow instead of each carrying their own copy.Read →DLPData Loss PreventionSecurityTools and rules that stop sensitive information, such as client records, from leaving the business by mistake.Read →DMARCDomain-based Message Authentication, Reporting and ConformanceSecurityA rule you publish for your domain that tells other inboxes what to do with email that pretends to be from you.Read →DNATDestination Network Address TranslationNetworkingA firewall rule that redirects traffic arriving at your public address to a specific device inside the office.Read →DNSDomain Name SystemNetworkingThe internet's address book: it turns a name like yourbusiness.ca into the numbers computers use to find it.Read →Domain AuthorityMarketingA 1 to 100 score made by SEO tool companies that estimates how strong a website is in search.Read →Domain nameNetworkingYour business's address on the internet, such as yourbusiness.ca, used for your website and email.Read →Domain registrarNetworkingThe company you pay each year to hold your domain name, such as GoDaddy or Namecheap.Read →Domain reputationSecurityHow much other inboxes trust email that comes from your domain.Read →DoSDenial of ServiceSecurityAn attack that floods a website or service with so many requests that real visitors cannot get through.Read →DowntimeManagementThe time your systems are not working and your staff cannot do their jobs.Read →DPOData Privacy OfficerManagementThe person in charge of making sure an organisation handles personal information properly.Read →DRPDisaster Recovery PlanManagementThe written steps for getting your business running again after a fire, flood, outage or cyberattack.Read →DSADigital Signature AlgorithmSecurityA standard method for signing digital documents so recipients can check who made them and that nothing changed.Read →DSLDigital Subscriber LineNetworkingHome and office internet delivered over ordinary telephone lines.Read →

E-E-A-TExperience, Expertise, Authoritativeness, TrustworthinessMarketingThe signals Google looks for to decide whether a page comes from someone who knows the subject and can be trusted.Read →EAPExtensible Authentication ProtocolProtocolA standard way for a network to ask you to prove who you are before letting you onto Wi-Fi or a wired port.Read →ECBElectronic Code BookSecurityThe simplest way to scramble data in blocks, where identical pieces of data always scramble to the same result.Read →ECCElliptic Curve CryptographySecurityA way of locking and unlocking data with a pair of keys that stays strong even when the keys are short.Read →ECDHEElliptic Curve Diffie-Hellman EphemeralSecurityA method that lets two computers agree on a fresh secret key for each session, even while someone is watching.Read →ECDSAElliptic Curve Digital Signature AlgorithmSecurityA way of signing data digitally so anyone can check who signed it and that it has not been changed.Read →EDREndpoint Detection and ResponseSecuritySecurity software that watches how programs behave on your computers and stops the ones acting like an attack, even if they have never been seen before.Read →EFSEncrypted File SystemSecurityA Windows feature that locks individual files so only the person who encrypted them can open them.Read →Email authenticationSecurityThe set of checks (SPF, DKIM and DMARC) that help inboxes tell real email from forgeries.Read →EncryptionSecurityScrambling information so only someone with the right key can read it.Read →End of supportManagementThe date a maker stops updating a product, after which new security holes stay open.Read →EndpointDeviceAny computer, laptop, phone or tablet that connects to your business network.Read →EntropicSecurityDescribes a password or key that is random and unpredictable enough to be very hard to guess.Read →ERPEnterprise Resource PlanningManagementOne system that runs a business's accounting, inventory, orders and staff records together.Read →ESNElectronic Serial NumberDeviceA unique number burned into older mobile phones to identify each handset on the network.Read →ESPEncapsulated Security PayloadProtocolThe part of a secure VPN tunnel that scrambles the data and checks it was not changed on the way.Read →

FACLFile System Access Control ListSecurityA list on a file or folder that says which people may open it, change it or delete it.Read →FAQ SchemaMarketingCode that labels the questions and answers on a page, so search engines and AI tools can read them as answers.Read →FDEFull Disk EncryptionSecurityScrambling everything on a computer's drive so the data is unreadable without the sign-in.Read →FIMFile Integrity ManagementSecuritySoftware that alerts you when important files change in ways they should not.Read →FirewallSecurityA device or software that decides which traffic may enter or leave your network, blocking the rest.Read →FirmwareDeviceThe built-in software that runs a device such as a router, printer or camera.Read →FPGAField Programmable Gate ArrayDeviceA chip that can be rewired by software after it leaves the factory.Read →FRRFalse Rejection RateSecurityHow often a fingerprint or face scanner wrongly turns away someone who should be let in.Read →FTPFile Transfer ProtocolProtocolAn old way of moving files between computers over the internet, with no encryption.Read →FTPSSecured File Transfer ProtocolProtocolFile transfer over a locked connection, the old FTP method with encryption added.Read →

GCMGalois Counter ModeSecurityA way of scrambling data that also detects if anyone has tampered with it.Read →GDPRGeneral Data Protection RegulationManagementThe European privacy law that applies to you if you hold data about people in the EU, even from Canada.Read →GEOGenerative Engine OptimizationMarketingWork that helps AI tools like ChatGPT and Google's AI answers mention your business when people ask them questions.Read →Google Business ProfileMarketingYour free business listing on Google that shows your hours, address, photos and reviews in Maps and search.Read →Google WorkspaceCloudGoogle's subscription bundle of Gmail, Drive, Docs and Meet for business.Read →GPGGnu Privacy GuardSecurityFree software that scrambles and signs files and email so only the intended person can read and trust them.Read →GPOGroup Policy ObjectManagementA set of rules pushed from one place to many Windows computers, such as password length or screen lock time.Read →GPSGlobal Positioning SystemDeviceSatellite signals that let a phone or device work out where it is.Read →GPUGraphics Processing UnitDeviceA processor built to draw images and do many small calculations at once, used in graphics, video and AI.Read →GREGeneric Routing EncapsulationProtocolA way of wrapping one kind of network traffic inside another so it can cross a network that would not otherwise carry it.Read →Guest networkNetworkingA separate Wi-Fi for visitors that gets them online without letting them see your business computers.Read →

HAHigh AvailabilityCloudA setup with spare parts built in, so your service keeps running when one piece fails.Read →HDDHard Disk DriveDeviceA storage drive with spinning disks inside, cheaper per gigabyte than a modern solid state drive.Read →Help deskManagementThe person or team you contact when something is not working.Read →HIDSHost-based Intrusion Detection SystemSecuritySoftware on a computer that watches for signs it has been attacked and raises an alert.Read →HIPSHost-based Intrusion Prevention SystemSecuritySoftware on a computer that spots an attack as it starts and blocks it.Read →HMACHashed Message Authentication CodeSecurityA short code made from a message and a secret key, used to prove the message came from someone with the key and was not changed.Read →HOTPHMAC-based One-time PasswordSecurityA one-time sign-in code that comes from a counter, so each code works once.Read →HSMHardware Security ModuleDeviceA tamper-resistant box that stores secret keys and does the signing or locking for you without letting the keys out.Read →HTMLHypertext Markup LanguageOtherThe language web pages are written in; it tells a browser what is a heading, a paragraph, a link or an image.Read →HTTPHypertext Transfer ProtocolProtocolThe plain, unencrypted way a browser fetches a web page, which means anyone in between can read it.Read →HTTPSHypertext Transfer Protocol SecureProtocolThe padlock version of a web address: the page is encrypted between the site and your browser so nobody in between can read or change it.Read →HVACHeating, Ventilation Air ConditioningDeviceHeating, ventilation and air conditioning, the systems that keep a building comfortable.Read →

IaaSInfrastructure as a ServiceCloudRenting the raw building blocks of computing, such as servers and storage, from a cloud company.Read →IaCInfrastructure as CodeCloudSetting up servers and networks by writing them as code files that a tool then builds, so setups can be repeated exactly.Read →IAMIdentity and Access ManagementManagementThe system that decides who gets an account, what they can open, and when that access ends.Read →ICMPInternet Control Message ProtocolProtocolThe behind-the-scenes messages devices use to say a destination is unreachable, and the basis of the ping test.Read →ICSIndustrial Control SystemsDeviceThe computers and controllers that run physical equipment, such as factory machines, pumps and building controls.Read →IDEAInternational Data Encryption AlgorithmSecurityAn older method for scrambling data that has mostly been replaced by newer standards.Read →IDFIntermediate Distribution FrameNetworkingA wiring closet that connects the cables on one floor to the building's main network room.Read →IdPIdentity ProviderCloudThe one service that confirms who you are so every other app can trust your sign-in.Read →IDSIntrusion Detection SystemSecurityA system that watches network traffic and raises an alert when it sees something suspicious.Read →IEEEInstitute of Electrical and Electronics EngineersOtherThe professional body whose standards set how Wi-Fi, Ethernet and many other technologies work.Read →IKEInternet Key ExchangeProtocolThe conversation where two VPN devices agree on the keys and settings they will use to protect traffic.Read →IMInstant MessagingOtherChat messages sent instantly between people, such as in Teams or WhatsApp.Read →IMAPInternet Message Access ProtocolProtocolA way of reading email that leaves every message on the mail server so all your devices show the same inbox.Read →IndexingMarketingGoogle adding a page from your website to its library, so the page can show up in search results.Read →IndexNowMarketingA quick ping your website sends to search engines the moment a page is added or changed, so they don't wait to find it.Read →Insider threatSecurityA risk that comes from a current or former staff member, by mistake or on purpose.Read →IoCIndicators of CompromiseSecurityA clue left behind by an attack, such as a strange file, a bad web address or an odd login, that shows you were hit.Read →IoTInternet of ThingsDeviceEveryday gadgets that connect to the internet, such as cameras, smart thermostats and printers.Read →IPInternet Protocol addressNetworkingThe number that identifies a device or website on the internet, like a street address for data.Read →IPSIntrusion Prevention SystemSecurityA system that spots attack traffic on the network and blocks it automatically.Read →IPSecInternet Protocol SecurityProtocolA method of scrambling and protecting traffic between two networks, often used for office-to-office VPNs.Read →IRIncident ResponseSecurityWhat you do in the minutes and days after a security breach: contain it, clean it up, and get back to work.Read →IRCInternet Relay ChatProtocolAn old text chat system where people talk in channels, still used by hobby groups and sometimes by malware to receive instructions.Read →IRPIncident Response PlanManagementA written plan for what to do, who to call and in what order when a security incident happens.Read →ISInformation SystemsManagementAll the computers, software, networks and people a company uses to collect, store and share information.Read →ISOInternational Standards OrganizationManagementThe international group that publishes standards, including a well-known one for managing information security.Read →ISPInternet Service ProviderNetworkingThe company that sells you your internet connection.Read →ISSOInformation Systems Security OfficerManagementThe person named to look after the security of one specific system and make sure its rules are followed.Read →ITILInformation Technology Infrastructure LibraryManagementA widely used playbook for running IT support well: how to log a problem, fix it, learn from it and change things safely.Read →ITSMIT Service ManagementManagementRunning IT as a service your team can count on, with a front door for requests, tracked work and clear expectations.Read →IVInitialization VectorSecurityA random starting value that makes sure the same message scrambles differently every time.Read →

KDCKey Distribution CenterSecurityThe server in a Windows network that checks your login once and hands out passes you use for everything else.Read →KEKKey Encryption KeySecurityA key whose only job is to lock other keys.Read →Keyword ResearchMarketingFinding the exact words your customers type into Google, so your pages use the same words.Read →

L2TPLayer 2 Tunneling ProtocolProtocolA way of building a VPN tunnel that usually gets its privacy from IPsec.Read →LANLocal Area NetworkNetworkingThe network inside your own office that connects your computers, printers and Wi-Fi to each other.Read →LDAPLightweight Directory Access ProtocolProtocolA standard way for software to look people up in a company directory and check their login.Read →LEAPLightweight Extensible Authentication ProtocolSecurityAn old Cisco method for logging into Wi-Fi that is now considered weak.Read →Least privilegeSecurityGiving each person only the access they need for their job, and nothing more.Read →LLM CitationLarge Language Model CitationMarketingWhen an AI tool like ChatGPT or Perplexity names or links your website as the source of its answer.Read →llms.txtMarketingA small text file on your website that gives AI tools a short list of your most important pages.Read →Lookalike domainSecurityA web or email address that is one character off from a real one, used to fool you.Read →

MaaSMonitoring as a ServiceCloudA service that watches your servers, network and apps from the cloud and alerts when something breaks.Read →MACMandatory Access ControlSecurityA strict access system where a central administrator, and nobody else, decides who may open each file or system.Read →MACMessage Authentication CodeSecurityA short code attached to a message that proves it came from the right sender and was not changed on the way.Read →MACMedia Access Control addressNetworkingThe permanent hardware serial number of a device's network connection.Read →MalwareSecurityAny software written to do harm, from viruses and spyware to ransomware.Read →MANMetropolitan Area NetworkNetworkingA network that links offices across one city or region.Read →MBRMaster Boot RecordDeviceThe tiny section at the start of a disk that tells a computer how to start up.Read →MD5Message Digest 5SecurityAn older method for turning a file into a short fingerprint that is now too weak for security.Read →MDFMain Distribution FrameNetworkingThe main room in a building where the internet connection comes in and spreads out to the rest of the network.Read →MDMMobile Device ManagementManagementThe system that lets you set rules on work phones and tablets, such as requiring a passcode or wiping company data if one is lost.Read →MDRManaged Detection and ResponseSecurityDetection software plus a team of people who watch it and act when something looks wrong.Read →Meta DescriptionMarketingThe short summary under your page's title in Google results, written to get people to click.Read →MFAMulti-Factor AuthenticationSecurityProving it is you with a second step, such as a code on your phone, so a stolen password alone is not enough to get in.Read →MFDMultifunction DeviceDeviceThe office machine that prints, scans, copies and often faxes or emails, all in one box.Read →MFPMultifunction PrinterDeviceAn office machine that prints, scans, copies and sometimes faxes.Read →Microsoft 365CloudMicrosoft's subscription bundle of email, Word and Excel, file storage and Teams, run in the cloud.Read →Microsoft Entra IDCloudThe Microsoft system that holds your staff logins and decides who can sign in to what.Read →Microsoft TeamsCloudMicrosoft's app for chat, video meetings and file sharing inside your business.Read →MLMachine LearningOtherThe part of AI where software improves by finding patterns in data instead of following rules someone wrote.Read →MMSMultimedia Message ServiceProtocolA text message that carries a picture, video or sound clip as well as words.Read →MOAMemorandum of AgreementManagementA written agreement in which each party commits to specific actions, usually with firmer terms than an MOU.Read →ModemNetworkingThe box that translates your internet provider's signal (cable, fibre or phone line) into a connection your router can use.Read →MOUMemorandum of UnderstandingManagementA written statement of what two or more parties intend to do together, often not legally binding.Read →MPLSMulti-protocol Label SwitchingNetworkingA private network service sold by phone companies that links offices together over their own paths.Read →MSAMaster Services AgreementManagementThe master contract that sets the standing terms between you and a provider, so each new job only needs a short add-on.Read →MSCHAPMicrosoft Challenge Handshake Authentication ProtocolProtocolA Microsoft login method used for some VPNs and Wi-Fi that can be cracked with enough effort.Read →MSPManaged Service ProviderManagementA company that looks after your technology for a monthly fee, keeping it from breaking before it does.Read →MSSPManaged Security Service ProviderManagementA company that watches over another business's security tools and responds to what they find.Read →MTA-STSMail Transfer Agent Strict Transport SecurityProtocolA published policy that tells other mail servers to only deliver to your domain over an encrypted connection.Read →MTBFMean Time Between FailuresManagementThe average time a repairable device runs between breakdowns, as quoted by the maker.Read →MTTFMean Time to FailureManagementThe average time a part runs before it fails and has to be replaced.Read →MTTRMean Time to RecoverManagementThe average time it takes to get something working again after it breaks.Read →MTUMaximum Transmission UnitNetworkingThe largest chunk of data that can be sent over a network link in one piece.Read →MX recordNetworkingThe line in your domain's settings that tells the world where to deliver your email.Read →

NACNetwork Access ControlSecurityA system that checks a device is approved and healthy before letting it join your network.Read →NAP ConsistencyName, Address and Phone ConsistencyMarketingMaking sure your business name, address and phone number are written the same way everywhere online.Read →NASNetwork-Attached StorageDeviceA box of hard drives on your network that holds shared files for everyone in the office.Read →NATNetwork Address TranslationNetworkingA trick that lets every device in your office share one public internet address.Read →NDANon-disclosure AgreementManagementA signed agreement that stops someone from sharing the private information you give them.Read →Network switchNetworkingThe box with many ports that connects your computers, printers and access points so they can talk to each other.Read →NFCNear Field CommunicationDeviceA short-range wireless link used for tap-to-pay and tap-to-open.Read →NGFWNext-generation FirewallSecurityA modern firewall that looks at what is inside the traffic, as well as where it comes from and where it is going.Read →NIDSNetwork-based Intrusion Detection SystemSecurityA system on the network that watches traffic passing by and alerts on anything suspicious.Read →NIPSNetwork-based Intrusion Prevention SystemSecurityA system on the network that spots an attack in the traffic and blocks it.Read →NISTNational Institute of Standards & TechnologyManagementA US government body whose free security guidance many businesses use as a checklist.Read →NTFSNew Technology File SystemOtherThe file system Windows uses to organise and store files on a drive, including who may open them.Read →NTLMNew Technology LAN ManagerProtocolAn older Windows login method that is weaker than the one that replaced it.Read →NTPNetwork Time ProtocolProtocolThe service that keeps the clocks on all your computers and devices in step.Read →

OAUTHOpen AuthorizationProtocolThe system behind buttons like Sign in with Google, which lets one app use part of your account without seeing your password.Read →OCSPOnline Certificate Status ProtocolProtocolA quick check a browser can make to find out whether a website's security certificate is still valid.Read →OffboardingManagementThe steps for removing a leaver's access and collecting their devices and data.Read →OIDObject IdentifierOtherA long string of numbers that gives a setting or object in a certificate or directory its own unique name.Read →OneDriveCloudMicrosoft's cloud storage for each person's files, which syncs to their computers.Read →OSOperating SystemDeviceThe base software a computer runs on, such as Windows or macOS, and it needs updates like everything built on it.Read →OSINTOpen-source IntelligenceSecurityInformation about a person or company gathered from public sources such as websites and social media.Read →OSPFOpen Shortest Path FirstProtocolA method routers use to share information and find the best path through a network.Read →OTOperational TechnologyDeviceThe computers and controllers that run physical machinery and processes, as opposed to office IT.Read →OTAOver the AirDeviceSending updates or settings to a phone or device wirelessly, with no cable needed.Read →Out-of-band verificationSecurityChecking a request by a different route, such as phoning a number you already had, before you act on it.Read →OVALOpen Vulnerability Assessment LanguageSecurityA standard way of writing down how to test a computer for a specific weakness, so different tools can run the same checks.Read →

P1Microsoft Entra ID P1ManagementAn upgrade to your Microsoft 365 sign-in system that lets us set the security rules smaller plans can't.Read →P12PKCS #12SecurityA single file that holds a certificate together with its private key, locked with a password.Read →P2PPeer to PeerProtocolA way of sharing files or connecting directly between computers, with no central server in between.Read →PaaSPlatform as a ServiceCloudRenting a ready-made platform for building and running software, without managing the servers underneath.Read →PACProxy Auto ConfigurationNetworkingA small file that tells a browser which sites should go through a special gateway and which should go direct.Read →PAMPrivileged Access ManagementManagementTighter control over the accounts that can change everything, such as administrators.Read →PAMPluggable Authentication ModulesSecurityA building-block system on Linux and Unix computers that lets sign-in methods be swapped in and out.Read →PAPPassword Authentication ProtocolProtocolThe simplest login method, which sends the username and password across as plain text.Read →PasskeySecurityA way to sign in with your fingerprint, face or device PIN in place of a password.Read →PassphraseSecurityA password made of several words, which is easier for you to remember and much harder for a computer to guess.Read →PasswordSecurityA secret word or phrase that proves you are allowed to sign in.Read →Password managerSecurityAn app that creates, stores and fills in a different strong password for every account, so you only remember one.Read →PATPort Address TranslationNetworkingThe trick that lets many devices share one public internet address by giving each conversation a different number.Read →Patch / PatchingSoftware patchManagementA fix the maker sends for software you already have, usually to close a security hole that attackers are already using.Read →PBKDF2Password-based Key Derivation Function 2SecurityA method that makes password guessing slow by running a password through many rounds of scrambling.Read →PBXPrivate Branch ExchangeOtherThe phone system that routes calls inside a business: extensions, voicemail, transfers and the main number.Read →PCAPPacket CaptureNetworkingA recording of the traffic on a network, saved so someone can study it later.Read →PCI DSSPayment Card Industry Data Security StandardManagementThe rulebook that card companies require from any business that takes card payments.Read →PDUPower Distribution UnitDeviceThe heavy-duty power bar in a network rack that feeds every device from one controlled source.Read →PEAPProtected Extensible Authentication ProtocolProtocolA Wi-Fi login method that first builds a protected tunnel and then sends the username and password inside it.Read →PEDPersonal Electronic DeviceDeviceAny small personal gadget such as a phone, tablet, smartwatch or e-reader that can hold or share data.Read →PEMPrivacy Enhanced MailSecurityA common text format for storing certificates and keys, with a header line saying what is inside.Read →Penetration testSecurityA paid, permitted attempt by a security expert to break into your systems to find weaknesses.Read →PFSPerfect Forward SecrecySecurityA property of secure connections where a fresh key is used for each session, so old recordings cannot be unlocked later.Read →PGPPretty Good PrivacySecurityA method of locking email and files so only the person you meant can open them.Read →PHIPersonal Health InformationSecurityHealth details linked to a specific person, such as a diagnosis, treatment or health card number.Read →PhishingSecurityA fake email, text or call designed to trick you into clicking a link, opening a file or handing over a password.Read →PHPPHP: Hypertext PreprocessorCloudThe language most websites run on behind the scenes: it builds each page on the server before your visitor sees it.Read →PIIPersonally Identifiable InformationSecurityAny detail that can identify a specific person, such as a name with an address, a birth date or a social insurance number.Read →PIPEDAPersonal Information Protection and Electronic Documents ActManagementCanada's federal privacy law for businesses: it sets the rules for collecting, using and protecting personal information.Read →PIVPersonal Identity VerificationSecurityA US government standard for smart cards that identify employees and unlock buildings and computers.Read →PKCSPublic Key Cryptography StandardsSecurityA set of numbered technical rules for how to store and use keys and certificates.Read →PKIPublic Key InfrastructureSecurityThe system of certificate issuers, certificates and rules that lets computers trust each other's identities.Read →POPPost Office ProtocolProtocolAn older way of reading email that downloads messages to one device and often removes them from the server.Read →POTSPlain Old Telephone ServiceNetworkingThe traditional copper phone line used for voice calls, now being retired by many carriers.Read →PPPPoint-to-Point ProtocolProtocolAn older method for setting up a direct connection between two devices, such as a dial-up or home internet login.Read →PPTPPoint-to-Point Tunneling ProtocolProtocolA very old way of making a VPN that is no longer safe to use.Read →PSKPre-shared KeyNetworkingThe shared Wi-Fi password that everyone in the office types to join.Read →PTZPan-tilt-zoomDeviceA security camera that can be turned left and right, tilted up and down, and zoomed in, usually by remote control.Read →PUPPotentially Unwanted ProgramSecuritySoftware you did not really mean to install, such as toolbars and bundled extras that slow your computer or show ads.Read →

QuarantineSecurityA holding area where suspicious email or files are kept until someone checks them.Read →QuishingSecurityA scam that hides a bad link inside a QR code.Read →

RARegistration AuthoritySecurityThe office that checks who is asking for a digital certificate before the certificate issuer hands one out.Read →RARecovery AgentSecurityA trusted person or account that can unlock encrypted files if the owner's key is lost.Read →RACEResearch and Development in Advanced Communications Technologies in EuropeOtherThe name of a European research programme that gave a hash function family its first letters.Read →RADRapid Application DevelopmentManagementA way of building software quickly by making working versions early and improving them.Read →RADIUSRemote Authentication Dial-in User ServiceProtocolA central server that checks logins for Wi-Fi, VPN and network equipment.Read →RAIDRedundant Array of Inexpensive DisksDeviceA way of using several drives together so that one can fail without losing your files.Read →RansomwareSecurityMalware that locks your files and demands payment to unlock them.Read →RASRemote Access ServerNetworkingA server that lets staff connect to the office network from outside, such as from home.Read →RATRemote Access TrojanSecurityHidden software that lets an attacker control your computer from far away.Read →RBACRole-based Access ControlManagementGiving people access based on their job role instead of picking permissions one by one.Read →RBACRule-based Access ControlManagementA way of granting access by fixed rules, such as only from the office, or only during work hours.Read →RC4Rivest Cipher version 4SecurityAn old method of scrambling data that has been found weak and is no longer allowed on the modern web.Read →RDPRemote Desktop ProtocolProtocolA tool that lets you use your office computer from another place as if you were sitting at it.Read →RFIDRadio Frequency IdentifierDeviceTiny tags that can be read from a short distance, used for badges, stock and tolls.Read →RIPEMDRACE Integrity Primitives Evaluation Message DigestSecurityA family of methods for turning data into a short fingerprint, used less often than the best-known ones.Read →Risk assessmentManagementA review that lists what could go wrong with your technology, how likely it is, and what to do first.Read →RMMRemote Monitoring and ManagementManagementThe agent your IT provider installs on each computer so they can monitor it, patch it and fix it without visiting.Read →robots.txtMarketingA small text file on your website that tells search engines and other bots which pages they may visit.Read →ROIReturn on InvestmentManagementWhat you get back for what you spent, which for IT usually means downtime avoided and hours saved.Read →RouterNetworkingThe box that connects your office network to the internet and directs traffic between your devices.Read →RPORecovery Point ObjectiveManagementHow much work you are willing to lose, measured in time: a one-hour RPO means backups run at least hourly.Read →RSARivest, Shamir, & AdlemanSecurityA widely used method that uses a public key to lock and a private key to unlock, so strangers can exchange secrets safely.Read →RTBHRemotely Triggered Black HoleNetworkingA defence where a provider throws away all traffic aimed at one address so an attack does not swamp everything else.Read →RTORecovery Time ObjectiveManagementHow long you can afford to be down before the business is hurt, which decides how fast your recovery has to be.Read →RTOSReal-time Operating SystemDeviceA small operating system for devices that must respond within a fixed time.Read →RTPReal-time Transport ProtocolProtocolThe way voice and video are sent in small pieces during a call over the internet.Read →

S/MIMESecure/Multipurpose Internet Mail ExtensionsProtocolA way to sign and lock email so the recipient knows it came from you and only they can read it.Read →SaaSSoftware as a ServiceCloudSoftware you use in a browser and pay for monthly, such as Microsoft 365 or QuickBooks Online, instead of installing it yourself.Read →SAESimultaneous Authentication of EqualsProtocolThe handshake that Wi-Fi uses to prove two sides know the password without sending it.Read →SAMLSecurity Assertions Markup LanguageProtocolThe standard that lets one sign-in unlock many apps, by passing a signed confirmation of who you are.Read →SANSubject Alternative NameSecurityAn extra list of website names that one security certificate is allowed to cover.Read →SANStorage Area NetworkDeviceA dedicated, fast network that connects servers to a shared pool of storage.Read →SASESecure Access Service EdgeCloudA service that bundles network and security tools in the cloud so staff are protected wherever they work.Read →SCADASupervisory Control and Data AcquisitionDeviceSoftware and hardware that lets operators watch and control equipment at a distance, such as water pumps or power stations.Read →SCAPSecurity Content Automation ProtocolSecurityA US set of standards that lets security tools check computers for settings and weaknesses in a common format.Read →SCEPSimple Certificate Enrollment ProtocolProtocolA way for devices to ask for and receive certificates automatically.Read →Schema MarkupMarketingHidden labels in your website's code that tell search engines and AI tools exactly what each piece of information is.Read →SD-WANSoftware-defined Wide Area NetworkNetworkingA way to join several offices over ordinary internet lines, with software choosing the best route for each task.Read →SDKSoftware Development KitOtherA bundle of tools and code that lets a developer build software for a particular platform or service.Read →SDLCSoftware Development LifecycleManagementThe series of steps a team follows to plan, build, test, release and maintain software.Read →SDLMSoftware Development Lifecycle MethodologyManagementThe chosen approach a team uses to run those steps, such as agile or waterfall.Read →SDNSoftware-defined NetworkingNetworkingA way of running a network from central software instead of setting up each device by hand.Read →SE LinuxSecurity-enhanced LinuxSecurityAn extra safety layer in Linux that limits what each program is allowed to do.Read →Security awareness trainingManagementShort lessons that teach staff to spot scams and handle data safely.Read →SEDSelf-encrypting DrivesDeviceA drive that scrambles everything stored on it automatically.Read →SEHStructured Exception HandlerSecurityA Windows system for dealing with errors in programs, which attackers have abused to run their own code.Read →SEOSearch Engine OptimizationMarketingWork that helps your website show up when people search Google for what you sell.Read →ServerDeviceA computer that stores files or runs software for everyone in your business.Read →SFTPSecured File Transfer ProtocolProtocolA secure way of moving files between computers over the internet, with everything scrambled in transit.Read →SHASecure Hashing AlgorithmSecurityA method that turns any file into a short fingerprint, so you can tell whether it has been changed.Read →Shadow ITManagementApps and accounts staff use for work without the business knowing.Read →SharePointCloudMicrosoft's shared team filing system, where a business keeps documents everyone needs.Read →SHTTPSecure Hypertext Transfer ProtocolProtocolAn old, rarely used way of protecting individual web messages that lost out to HTTPS.Read →SIEMSecurity Information and Event ManagementSecurityA tool that collects records from many systems into one place so suspicious patterns stand out.Read →SIMSubscriber Identity ModuleDeviceThe small card in a phone that identifies your account with the mobile carrier.Read →SLAService Level AgreementManagementThe written promise of how fast a provider responds and how reliable a service will be, with what happens if they miss it.Read →SLESingle Loss ExpectancyManagementThe money you would expect to lose if one specific thing went wrong once.Read →SmishingSecurityA scam text message that tries to get you to click a link or share information.Read →SMSShort Message ServiceOtherThe ordinary text message sent over a phone network.Read →SMTPSimple Mail Transfer ProtocolProtocolThe standard way email travels from the sender's server to the recipient's server.Read →SMTPSSimple Mail Transfer Protocol SecureProtocolEmail sending over a locked connection, so the message cannot be read on the way to the next mail server.Read →SNMPSimple Network Management ProtocolProtocolA standard way for network devices such as printers and switches to report their status to a monitoring tool.Read →SOAPSimple Object Access ProtocolProtocolAn older, formal way for software systems to send requests and answers to each other over the web.Read →SOARSecurity Orchestration, Automation, ResponseSecuritySoftware that automatically carries out the first response steps when a security alert fires.Read →SOCSecurity Operations CentreSecurityThe team of people who watch security alerts day and night and act on the real ones.Read →SoCSystem on ChipDeviceA whole computer built onto a single chip.Read →Social engineeringSecurityTricking a person instead of hacking a computer, such as a caller pretending to be IT and asking for your password.Read →Software updateManagementA new version of a program or device software that fixes problems and security holes.Read →SOWStatement of WorkManagementThe one-page description of exactly what a project includes, what it costs and when it is done.Read →SpamSecurityUnwanted bulk email, mostly harmless clutter, but the same channel phishing arrives through.Read →Spear phishingSecurityA phishing message written for one person or business, using real details about them.Read →SPFSender Policy FrameworkSecurityA public list of the servers allowed to send email for your domain, so other inboxes can spot a forgery.Read →SPIMSpam over Internet MessagingSecurityJunk messages that arrive through chat apps and instant messaging instead of email.Read →SpoofingSecurityFaking who a message or call comes from so you trust it.Read →SQLStructured Query LanguageOtherThe language used to ask a database for information or to change it.Read →SQLiSQL InjectionSecurityAn attack that sneaks database commands into a web form to read or change data it should not.Read →SRTPSecure Real-Time ProtocolProtocolA secure version of the way voice and video are sent over the internet, which scrambles calls.Read →SSDSolid State DriveDeviceThe fast, no-moving-parts storage inside modern computers, which is why they start in seconds instead of minutes.Read →SSHSecure ShellProtocolA secure way to log into another computer and run commands over the internet.Read →SSLSecure Sockets LayerProtocolThe older name for the padlock technology that scrambles traffic between your browser and a website.Read →SSOSingle Sign-OnSecurityOne login, usually your Microsoft or Google account, opens all your work apps.Read →STIXStructured Threat Information eXchangeProtocolA shared format for describing cyber threats so security tools can pass the details to each other.Read →Structured DataMarketingInformation on your website arranged in a fixed format, so search engines and AI tools can read it without guessing.Read →SWGSecure Web GatewaySecurityA filter that checks the websites your staff visit and blocks the dangerous ones.Read →

TACACS+Terminal Access Controller Access Control SystemProtocolA central server that decides who may log into network equipment and records what they do.Read →TAXIITrusted Automated eXchange of Indicator InformationProtocolA way of delivering threat information between security tools and organisations.Read →TCP/IPTransmission Control Protocol/Internet ProtocolProtocolThe set of rules that lets every computer and device on the internet find each other and exchange data.Read →TenantCloudYour business's own private space inside Microsoft 365 or Google Workspace, with its own users and settings.Read →TGTTicket Granting TicketSecurityA pass you receive when you log in to a Windows network that lets you reach other services without typing your password again.Read →The cloudCloudComputers run by someone else on the internet, which you rent in place of owning your own.Read →TKIPTemporal Key Integrity ProtocolSecurityAn older Wi-Fi scrambling method that has been replaced because it is weak.Read →TLSTransport Layer SecurityProtocolThe encryption that makes the padlock in your browser work, scrambling data between you and a website.Read →TOCTime-of-checkSecurityThe moment a computer checks whether something is allowed, such as a file's permissions.Read →TOTPTime-based One-time PasswordSecurityA six-digit code that changes every 30 seconds, generated by an app on your phone.Read →TOUTime-of-useSecurityThe moment a computer actually uses something after checking it was allowed.Read →TPMTrusted Platform ModuleDeviceA small security chip in a computer that stores keys and checks that the machine has not been tampered with.Read →TSIGTransaction SignatureProtocolA way of signing messages between DNS servers so they only accept updates from trusted sources.Read →TTPTactics, Techniques, and ProceduresSecurityA description of how attackers operate: what they aim for, the methods they use and the steps they follow.Read →TyposquattingSecurityRegistering a domain one typo away from a real one, so people who mistype or misread it land on a fake.Read →

UATUser Acceptance TestingManagementThe last test of new software, done by the people who will use it, before it goes live.Read →UAVUnmanned Aerial VehicleDeviceAn aircraft with no pilot on board, controlled remotely, commonly called a drone.Read →UDPUser Datagram ProtocolProtocolA fast way to send data that skips checking each piece arrived, used for calls, video and games.Read →UEFIUnified Extensible Firmware InterfaceDeviceThe modern start-up software built into a computer that wakes the hardware before Windows loads.Read →UEMUnified Endpoint ManagementManagementA single tool for managing every work device, such as laptops, phones and tablets, from one console.Read →UPSUninterruptible Power SupplyDeviceA battery that keeps your server, router and phones running through a power blip long enough to shut down cleanly or ride it out.Read →URIUniform Resource IdentifierProtocolA string of text that names a resource on the internet, such as a web page, email address or file.Read →URLUniform Resource LocatorNetworkingA web address, and reading it carefully is the fastest way to spot a fake site.Read →USBUniversal Serial BusDeviceThe common plug and port for connecting drives, keyboards, printers and phones to a computer.Read →USB OTGUSB On the GoDeviceA feature that lets a phone or tablet act as the host for USB gadgets such as a keyboard or drive.Read →UTMUnified Threat ManagementSecurityOne device that bundles a firewall with several other protections such as web filtering and threat scanning.Read →UTPUnshielded Twisted PairNetworkingThe standard network cable that connects computers and devices, made of twisted pairs of wire.Read →

VBAVisual BasicOtherThe built-in scripting language of Microsoft Office that automates tasks in Word, Excel and Outlook.Read →VDEVirtual Desktop EnvironmentCloudA full computer desktop that runs in a data centre and that you reach from any device.Read →VDIVirtual Desktop InfrastructureCloudA setup where your desktop runs on a central server and you see it through any device.Read →VirusSecurityA harmful program that spreads from file to file or computer to computer.Read →VishingSecurityA scam phone call where someone pretends to be your bank, the CRA or IT support to get money or information.Read →VLANVirtual Local Area NetworkNetworkingA way to split one physical network into separate private networks that cannot see each other.Read →VLSMVariable Length Subnet MaskingNetworkingA way of cutting an address range into network pieces of different sizes so nothing is wasted.Read →VMVirtual MachineCloudA computer simulated in software that runs inside a real one, so one machine can act as several.Read →VoIPVoice over Internet ProtocolProtocolPhone service that runs over your internet connection instead of a traditional phone line.Read →VPCVirtual Private CloudCloudA private, walled-off section of a cloud provider's data centre that only your business can use.Read →VPNVirtual Private NetworkNetworkingAn encrypted tunnel between your device and your office or a provider, so your traffic is private on any Wi-Fi.Read →VTCVideo TeleconferencingOtherMeeting with people in other places by live video and sound, such as Teams or Zoom calls.Read →VulnerabilitySecurityA weakness in software or settings that an attacker could use to get in.Read →

WAFWeb Application FirewallSecurityA filter in front of a website that blocks common web attacks before they reach it.Read →WAPWireless Access PointNetworkingThe device that broadcasts your Wi-Fi; a bigger office needs several so every corner has signal.Read →Website hostingCloudThe service that stores your website and delivers it to visitors.Read →WEPWired Equivalent PrivacyNetworkingAn old Wi-Fi security setting that is broken and can be cracked in minutes.Read →Wi-FiNetworkingThe wireless signal that connects your phones, laptops and printers to your network and the internet.Read →WIDSWireless Intrusion Detection SystemSecurityA system that watches the Wi-Fi airwaves for rogue access points and unauthorised devices.Read →WIPSWireless Intrusion Prevention SystemSecurityA system that spots a threat on the Wi-Fi and blocks it.Read →WOWork OrderManagementA written request to get a job done, with who, what and by when.Read →WPAWi-Fi Protected AccessNetworkingThe security setting that scrambles your Wi-Fi traffic so people nearby cannot read it.Read →WPSWi-Fi Protected SetupNetworkingA shortcut for joining Wi-Fi by pressing a button or typing a short number instead of the full password.Read →WTLSWireless TLSProtocolA security layer from the era of early mobile phone browsing that is no longer used.Read →

XDRExtended Detection and ResponseSecurityEDR extended beyond computers to email, identity and cloud, so one system sees an attack moving between them.Read →XMLExtensible Markup LanguageOtherA text format that labels data with tags so different programs can read the same file.Read →XML SitemapMarketingA file that lists every page on your website so search engines can find them all.Read →XORExclusive OrOtherA basic operation that gives yes only when its two inputs are different.Read →XSRFCross-site Request ForgerySecurityAn attack that tricks your browser into sending a request to a site where you are already signed in.Read →XSSCross-site ScriptingSecurityA website flaw that lets an attacker slip their own script into a page that other visitors then run.Read →

Zero TrustSecurityA security approach where nothing is trusted just because it is inside the office network: every person and device proves itself every time.Read →Zero-dayZero-day vulnerabilitySecurityA security hole attackers are already using before the software maker has a fix for it.Read →ZTNAZero Trust Network AccessSecurityA safer way to reach work systems from outside the office: you get into the specific apps you need, and only after you and your device check out.Read →

Something here sounds like your problem? Every WILDCARD card exists to solve one.

Pick your problem →

Cybersecurity terms, in plain language.