Dictionary

A

ABAC (Attribute Based Access Control)

ABAC grants access based on multiple attributes and context.

ADC (Application Delivery Controller)

Application Delivery Controller (ADC) ensures safe and efficient access.

Adware displays ads and may collect user data without consent.

Agentic AI describes AI systems that can plan, decide, and act independently.

The AI Act sets requirements for how organizations develop and use artificial intelligence.

Air-gapped networks

A network isolated from external connections.

AISI (AI Security Institute)

AISI evaluates the capabilities and security risks of advanced AI models.

Alert fatigue occurs with high alarm frequency.

Alpha AI reduces noise and highlights critical security threats.

Antivirus detects, prevents, and removes malware from devices.

API (Application Programming Interface)

An API is an interface that connects systems securely.

Arctic Wolf protects organizations from cyber threats.

Artificial general intelligence (AGI)

AGI can perform all intellectual tasks humans can.

Artificial intelligence (AI)

AI enables computers to perform human tasks.

An attack surface is every digital entry point an attacker can exploit.

Authentication verifies identity and secures access.

Authorization defines which actions and resources an identity may access.

Azure is Microsoft’s cloud platform that consists of over 200 products and cloud services.

Azure Policy ensures control and compliance in cloud environments.

Azure Resource Manager

ARM enables consistent management of Azure resources with security controls.

B

Baiting lures victims with tempting offers.

BEC (Business Email Compromise)

Learn what BEC is and how it targets businesses.

Beste praksis streber etter høyest mulig sikkerhet

Bicep is Azure's native declarative language for infrastructure as code.

Biometrics enable secure authentication without passwords.

A blackhat is a hacker who attacks systems without permission.

Blue team protects systems with real-time response

Bluejacking sends unsolicited messages via Bluetooth.

Norwegian technology company with expertise in networking, OT security, and industrial cybersecurity.

Botnet are infected computers controlled by attackers.

Brute force attack

Brute force attack tests all password combinations.

Bug bounty rewards ethical hackers for vulnerability findings.

C

Carding is fraud with stolen credit card information.

CASB (Cloud Access Security Broker)

CASB provides control and visibility over cloud usage.

Cloud-native SASE platform unifying networking and security.

Certificate management

Poor certificate management can lead to outages and security risks.

CI/CD (Continuous Integration, Continuous Delivery/Deployment)

CI/CD enables secure and fast code delivery through automation.

CIS (Center for Internet Security)

CIS develops global security standards that help organizations protect systems and data.

CIS Benchmarks provide secure configuration baselines for systems and cloud services.

CIS Controls provide organizations with a prioritized and structured path to stronger cybersecurity.

Global leader in networking, security, and collaboration technologies.

CISO as a service

CISO as a service is outsourced security leadership without hiring a CISO.

CISO-for-hire offers temporary security expertise.

CISOaaS is outsourced security leadership delivered as a flexible service.

Cloud offers scalable IT services with shared security responsibility between customer and provider.

Compliance ensures IT solutions meet legal requirements.

A computer virus is malware that infects files and systems

A computer worm is malware that spreads automatically between computers.

Conditional Access

Conditional Access provides context-based access control in Entra ID based on identity, device and risk.

Credential stuffing

Credential stuffing uses stolen usernames and passwords from attacks to gain access to new accounts.

Cyber insurance

Cyber insurance provides financial protection against cyberattacks.

Cyber Kill Chain

Cyber Kill Chain breaks down cyberattacks into seven phases.

A cyberattack is a digital assault on systems, networks, or data.

Cybersecurity protects against digital attacks.

D

Dark web requires special software for access.

A data breach is when sensitive information is exposed or stolen.

Data exfiltration

Dataeksfiltrering er uautorisert overføring av data fra virksomhetens systemer.

A data lake stores large amounts of data in its original form.

Data security protects information from loss, change, and exposure.

DDoS attack (Distributed Denial of Service)

DDoS attacks paralyze servers with heavy traffic.

Decryption makes encrypted information readable again.

Deep web is not indexed by search engines like Google.

DevOps (Development and Operations)

DevOps combines development and operations for better collaboration.

DevSecOps (Development, Security and Operations)

DevSecOps means security is part of the full development process

Digital forensics

Digital forensics uncovers what happened during a cyberattack.

Digital identification

Digital identification verifies identity online.

Digital security

Digital security protects systems, data, and users from cyber threats.

Digital twin security

Digital twin security protects virtual models of physical systems.

DLP (Data Loss Prevention)

DLP blocks leaks with proactive security measures.

DORA (Digital Operational Resilience Act)

DORA protects financial companies from digital threats.

DPI (Deep packet inspection)

DPI analyzes and filters network traffic at a deep level.

Dumpster diving

Dumpster diving is searching through trash for sensitive information.

E

East-west traffic

Internal traffic between systems and resources in a network.

Eavesdropping attack

Eavesdropping attacks threaten data confidentiality.

EDR (Endpoint Detection and Response)

EDR monitors and protects endpoints from modern attacks.

Encryption protects data.

Entra ID, formerly Azure AD, provides central authentication with advanced security features.

Expert systems (AI)

Expert systems (AI) follow predefined rules.

Exploit kits exploit vulnerabilities to infect systems with malware.

F

F5 protects applications and APIs from risks and threats.

Feedback loops collect and analyze information.

FIDO2 (Fast IDentity Online 2)

FIDO2 enables authentication with security keys, biometrics, or mobile devices.

Fileless malware

Fileless malware uses system processes without files.

A firewall is a barrier between internal and external networks.

FQDN (Fully Qualified Domain Name)

FQDN is the complete name of a computer or host.

FWaaS (Firewall as a Service)

Cloud-based firewall protecting traffic across locations.

G

GDPR (General Data Protection Regulation)

GDPR gives more control over personal data.

GDPR compliance

GDPR compliance means handling personal data securely and lawfully in the EU.

GIAC (Global Information Assurance Certification)

GIAC certifications are highly recognized in cybersecurity.

Governance defines how decisions are made, controlled and followed up in IT and security.

GPAI (General-purpose AI)

GPAI supports many tasks, but requires control over data and access.

A grayhat finds vulnerabilities without permission but avoids harm.

GSA (Global Secure Access)

GSA combines network, identity, and endpoint security.

H

Hacking is compromising digital devices and networks.

Hacktivism uses hacking for political or social goals.

Hash turns data into a fixed-length string.

Honeytoken uses fake data to reveal unauthorized access.

I

IaC (Infrastructure as Code)

IaC provides repeatable infrastructure with potential for consistent security controls.

IAM (Identity and Access Management)

IAM manages identities and access to systems, applications, and data.

Identity security

Identity security protects resources with identity management, authentication, and access.

IDS (Intrusion Detection System)

IDS detects and alerts on suspicious activity and threats in networks and systems.

IEC 62443 – the standard for structured and mature OT security.

IGA (Identity Governance and Administration)

IGA ensures the right access, at the right time, with proper compliance.

IIoT (Industrial Internet of Things)

IIoT links machines to networks and introduces new risks.

IoT (Internet of Things)

IoT refers to physical devices that communicate via the internet.

IPS (Intrusion Prevention System)

IPS blocks malicious activity in real-time.

IRT (Incident Response Team)

IRT handles security incidents and limits damage.

ISO 27001 (International Organization of Standardization)

ISO/IEC27001 sets requirements for information security.

Standard for quality management and continuous improvement.

IT security is about protecting data, systems, and users.

IT-GRC (IT Governance, Risk and Compliance)

IT-GRC helps organizations govern IT, manage risk, and meet regulatory requirements through a structured and integrated approach.

J

JIT (Just-in-Time)

JIT reduces risk by providing temporary access only when required.

Juice jacking transfers malware via USB charging stations.

K

Kerberos uses tickets for secure communication.

L

Least privilege

Least privilege means users only get access to what they truly need.

Lethal Trifecta

Three weak links – when they connect, the entire security chain breaks.

LLM (Large Language Model)

LLMs are AI models capable of understanding and generating natural language.

Distributes traffic across servers to improve performance and availability.

Logging collects information about events and activities for monitoring, troubleshooting, and security.

M

Machine identities give systems and services secure access to digital resources.

Machine learning (AI)

Machine learning uses data to learn and improve.

Malware is software that harms, steals, or disrupts systems.

Man-in-the-middle (MITM) attack

MITM attacks intercept or manipulate communication.

MDR (Managed Detection and Response)

MDR protects organizations from cyber threats with technology and expertise.

MFA (Multi-factor authentication)

MFA protects against unauthorized access even when passwords are compromised.

Microsegmentation

Microsegmentation limits threats by dividing the network.

Microsoft is known for Windows, Office, Xbox, Azure, and Surface.

Microsoft Intune

Intune protects access and data on devices.

MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge)

MITRE ATT&CK maps tactics and techniques used by adversaries during cyberattacks.

MITRE D3FEND describes defensive techniques that can be used against cyberattacks.

MSP+ (Managed Service Provider Plus)

MSP+ is an extended MSP model with closer customer follow-up.

N

NAC (Network Access Control)

Network Access Control controls who and what can access a network.

A network enables communication between users, devices, systems and services.

Network segmentation

Segmentation divides the network into secure zones that limit the spread of threats.

Network telemetry

Collection of data to understand network state and activity.

Neural networks and deep learning (AI)

Neural networks and deep learning mimic brain functions.

NHI (non-human identities)

NHI are digital identities used by applications, services, and machines that need secure access to an organization’s systems and data.

NIS2 (Network and Information Systems Directive 2)

NIS2 strengthens information security in the EU and EEA.

NIST SP 800-162

Guidance for implementing attribute-based and context-aware access control.

NOC (Network Operation Center)

A NOC ensures stable operations, rapid troubleshooting and continuous network monitoring.

North-south traffic

Traffic between internal systems and external services.

NSM (Norwegian National Security Authority)

NSM strengthens Norway’s digital and national security.

NTLM (New Technology LAN Manager)

NTLM vulnerabilities in Windows are serious and require immediate response.

O

O3 Cyber protects and enhances cloud infrastructure.

OT (Operational technology)

Operational technology (OT) digitally controls machines and processes.

OT security ensures the operation of critical infrastructure.

P

Palo Alto Networks

Palo Alto Networks launched next-generation firewalls.

PAM (Privileged Access Management)

PAM controls and monitors privileged accounts and administrative access.

Password spraying

Password spraying uses common passwords to access accounts.

Passwordless enables secure access without passwords.

PBAC (Policy-Based Access Control)

PBAC governs access through policies and context.

Pentesting finds weak points in computer systems.

Phishing tricks the victim into giving up sensitive information.

PLC (Programmable Logic Controller)

PLC automates operations and needs protection from sabotage.

PQC (Post-quantum cryptography)

PQC protects data against attacks from future quantum computers.

Pre-authentication

Pre-authentication confirms identity before access – seamless with SSO.

Pretexting creates a false story to obtain sensitive information.

Prompt injection

Prompt injection can manipulate AI systems into following unwanted instructions.

Purdue enables control and clarity in OT security.

Purple team improves security through collaboration between blue and red team.

Q

Quishing uses malicious QR codes to steal information.

R

Ransomware encrypts data and demands ransom.

RBAC (Role-Based Access Control)

RBAC provides access management based on roles to implement least privilege.

Red team reveals weaknesses through realistic attacks.

Response time is key to limiting the impact of security incidents

Risk detection identifies suspicious activity before security breaches.

River Security maps vulnerabilities to protect against digital attacks.

Rootkits hide access and conceal other malicious activities.

S

SANS (SysAdmin, Audit, Network, and Security Institute)

SANS is a global leader in cybersecurity training, certification, and threat research.

SASE (Secure Access Service Edge)

SASE unifies networking and security into a single cloud-based model for secure access anywhere.

SD-WAN (Software-Defined Wide Area Network)

SD-WAN optimizes and secures traffic between locations and cloud services.

Secure by design

Secure by Design builds security into digital solutions from the start.

Security audits

Security audits assess risk and increase leadership focus.

Security classification

Security classification controls access to sensitive information based on potential harm.

Security consultant

A security consultant works to protect systems and sensitive data.

Security management

Security management is the governance of information security.

Security training

Security training builds awareness and reduces human error.

Session hijacking

Session hijacking involves stealing the session ID to access sensitive information.

SIEM (Security Information and Event Management)

SIEM detects and responds to threats with centralized security overview.

SLA (Service-Level Agreement)

SLA defines service quality and responsibilities.

SMB (Server Message Block)

SMB shares files, printers, and series between computers.

SOAR (Security Orchestration, Automation and Response)

SOAR automates security processes and helps security teams respond to incidents faster and more efficiently.

SOC (Security Operations Center)

A SOC detects, analyzes, and responds to threats in real-time.

Social engineering

Social engineering exploits human psychology to access sensitive information.

Splunk allows organizations to collect, monitor, and analyze data in real-time.

Spoofing involves falsifying identity to trick the victim into believing it's genuine.

Spyware monitors and steals information without consent.

SSO (Single Sign-On)

SSO provides access to multiple applications with one login.

Stuxnet disrupted Iran's nuclear program and is one of the most advanced cyberweapons.

The supply chain includes external parties that impact cybersecurity.

SWG (Secure Web Gateway)

SWG protects users from internet threats.

Synthetic identity theft

Synthetic identity theft combines real and fake information for financial fraud.

T

Terraform enables secure and versioned cloud infrastructure.

The Aurora platform

Aurora enables fast threat detection and response.

Threat hunting uncovers cyber threats that security tools may have missed.

Threat intelligence

Threat intelligence helps organizations defend against attacks.

Threat modeling

Threat modeling identifies security threats before attacks occur.

Tokens are used for authentication, authorization, and access to digital resources.

TOTP (Time-based One-Time Password)

TOTP enables secure logins with one-time codes.

A trojan horse pretends to be safe but hides malicious code.

U

UPS (Uninterruptible power supply)

A UPS provides temporary power and protects critical systems during power outages and unstable power conditions.

UTC (Coordinated universal time)

UTC provides a common time reference for logs and security incidents.

V

Virtual patching

Virtual patching protects vulnerable systems until a permanent fix is available.

Vishing tricks victims into revealing sensitive information over the phone.

VPN (Virtual Private Network)

VPN secures communication with an encrypted tunnel.

Vulnerability management

Vulnerability management identifies and prioritizes vulnerabilities to reduce risk.

W

WAF (Web Application Firewall)

A WAF protects web applications by detecting and blocking malicious web traffic.

Whaling is targeted phishing attacks on executives to reveal sensitive information.

A whitehat is an ethical hacker who tests security with permission.

Windows Hello for Business

Windows Hello for Business offers safe login without passwords.

X

XDR (Extended Detection and Response)

XDR provides unified insight and faster response across systems and devices.

Y

YubiKey protects users from phishing and account compromise through physical MFA.

Z

Zeek monitors networks and detects threats early.

Zero Trust recognizes that security threats can come from inside and outside.

Zero Trust architecture

Zero Trust enforces access through continuous verification.

Zero-Day vulnerability

A Zero-Day vulnerability is a hidden security gap that attackers can exploit before it's identified.

Leading provider of cloud-based security and Zero Trust architecture.

ZTNA (Zero Trust Network Access)

ZTNA grants access to specific applications, not the full network.