Security Glossary
Plain-English definitions of security, IT, and compliance terms for small businesses and WordPress sites, with real examples and primary sources.
Categories
- Frameworks and Compliance
- Identity and Access
- Incident Response and Forensics
- Infrastructure and Hosting
- Security Operations
- Small Business Risk
- Threats and Malware
- Web and WordPress Security
Frameworks and Compliance
- The CIS Controls
- CMMC
- The HIPAA Security Rule
- The NIST Cybersecurity Framework (CSF 2.0)
- PCI DSS
- A SOC 2 Report
- Zero Trust
Identity and Access
- Account Takeover (ATO)
- Least Privilege
- Multi-Factor Authentication (MFA)
- A Password Manager
- Password Spraying
- Session Hijacking
- Single Sign-On (SSO)
Incident Response and Forensics
- Containment in Incident Response
- Eradication in Incident Response
- A Forensic Image
- Incident Response
- An Indicator of Compromise (IOC)
- NIST SP 800-61
- A Post-Incident Review
- Recovery in Incident Response
- Triage in Incident Response
Infrastructure and Hosting
- The 3-2-1 Backup Rule
- A DDoS Attack
- DKIM (DomainKeys Identified Mail)
- DMARC
- DNS Hijacking
- DNSSEC
- PHP End of Life
- A Recovery Point Objective (RPO)
- A Recovery Time Objective (RTO)
- SPF (Sender Policy Framework)
- A TLS Certificate
Security Operations
- A CVE (Common Vulnerabilities and Exposures)
- CVSS (Common Vulnerability Scoring System)
- Endpoint Detection and Response (EDR)
- Malware Scanning
- Patch Management
- Security Logging
- A SIEM (Security Information and Event Management)
- Vulnerability Scanning
Small Business Risk
- Cyber Insurance
- An Incident Response Retainer
- A Risk Register
- Security Awareness Training
- A Security Policy
- A Tabletop Exercise
Threats and Malware
- A Backdoor
- Business Email Compromise (BEC)
- A Card Skimmer (Magecart)
- Casino and Gambling Link Injection
- Credential Stuffing
- A Malicious Redirect
- Malware
- Phishing
- Ransomware
- SEO Spam
- A Supply Chain Attack
- A Webshell