The Practitioner's Cybersecurity Glossary.

A security model that eliminates implicit trust and continuously verifies every user, device, and connection.

Authorized simulated attacks on systems, networks, or applications to identify exploitable vulnerabilities before adversaries do.

A managed security operations center that provides 24/7 threat monitoring, detection, and response without the cost of building in-house.

Analyzed, contextualized data about threat actors, their tactics, and the indicators used to detect their activity.

The structured process for detecting, containing, eradicating, and recovering from a cybersecurity breach.

A full-scope adversary simulation that tests an organization's people, processes, and technology as a unified system.

Continuous discovery, inventory, and risk monitoring of all external-facing assets that an attacker could target.

Mean Time to Detect and Mean Time to Respond — the two most important metrics for measuring security operations effectiveness.

The practice of integrating security testing and controls into the software development lifecycle from the first sprint.

Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) — the two primary automated approaches to finding application vulnerabilities.

The DoD's mandatory cybersecurity framework for defense contractors handling Controlled Unclassified Information (CUI).

An independent audit report verifying that a technology company's security controls operated effectively over a period of time.

The U.S. federal government's standardized security authorization program for cloud service providers.

Federal regulations requiring healthcare organizations to protect the confidentiality, integrity, and availability of electronic Protected Health Information (ePHI).

A comprehensive, certifiable security framework designed specifically for healthcare organizations that incorporates HIPAA, NIST, ISO 27001, and other standards.

Mandatory cybersecurity standards for bulk electric system owners, operators, and users in North America.

The Payment Card Industry Data Security Standard — mandatory security requirements for any organization that stores, processes, or transmits cardholder data.

A voluntary but widely adopted framework organizing cybersecurity activities around five functions: Identify, Protect, Detect, Respond, and Recover.

The international standard for information security management systems (ISMS) — certifiable and globally recognized.

Automated tools that continuously monitor cloud infrastructure for misconfigurations and compliance violations.

Tools that discover and right-size excessive permissions in cloud environments to enforce least-privilege at scale.

An approach to building and running applications that fully exploits cloud computing — using microservices, containers, dynamic orchestration, and continuous delivery.

Security hardening, policy enforcement, and runtime protection for container orchestration environments.

Identity and Access Management in cloud environments — controlling who and what can access which cloud resources.

The division of security responsibilities between a cloud provider and the customer — a framework that defines who owns what in cloud security.

Security practices, threat modeling, and controls for applications built on Large Language Models.

An attack that manipulates an AI system's behavior by embedding malicious instructions in its input.

Structured adversarial testing of AI systems to identify safety, security, and reliability failures before deployment.

The practice of deploying, monitoring, and operating machine learning models in production reliably and efficiently.

The strategic reimagining and technical overhaul of how an organization delivers value using digital technology.

A multi-year plan aligning technology investments and architecture decisions to business outcomes and competitive positioning.

The structured approach to transitioning individuals, teams, and organizations from a current state to a desired future state.

The design of how an organization structures its people, processes, technology, and governance to deliver its strategy.