CYBER SECURITY GLOSSARY
This glossary contains a list of terms and their definitions commonly used in the field of Cyber Security.
In the cyber security sector, terminology is essential for understanding processes such as risk management, data protection, network defence and incident response. Precise definitions enable effective communication among IT professionals, businesses, regulators and end users. For advisory and outsourcing companies, fluency in cyber security language is a key factor in supporting compliance, incident response planning, cloud migrations, and end-to-end security solutions for clients across industries.
Automated risk modelling — the use of AI and algorithms to predict and simulate cyber risk scenarios.
Botnet — a network of compromised computers controlled remotely by cybercriminals, often used to conduct large-scale attacks.
Breach — an incident involving unauthorised access to data, networks or systems.
Cloud migration — the process of transferring data and applications from on-premises to cloud environments.
Compliance audit — an audit that verifies adherence to security frameworks, such as ISO/IEC 27001.
Continuous learning — regular update of training modules to ensure timely adaptation to emerging cyber threats.
Cyber security outsourcing — the engagement of third parties to manage and monitor security systems.
Cyber risk analyser tool — a solution that assesses and visualises cyber risks.
Cyber security risk assessment — the process of identifying, analysing and prioritising cyber threats and vulnerabilities.
Cyber security systems — technical solutions, such as firewalls, IDS/IPS and endpoint protection.
Cyber security training — programmes designed to educate employees on preventing and responding to cyber threats.
Dashboard reporting — a visual representation of cyber risks for management.
Endpoint protection — security solutions that safeguard devices such as laptops, servers and mobile phones.
Hybrid cloud — a model that integrates on-premises infrastructure with cloud services.
Independent assessment — an external review of SWIFT CSP controls at banking institutions.
Information security audit — a systematic review of information systems to ensure compliance with security standards.
Intrusion detection system (IDS) — a system that monitors network traffic to identify suspicious activity.
Intrusion prevention system (IPS) — a system that actively blocks or prevents detected threats.
Managed security service provider (MSSP) — a company providing outsourced cyber defence services.
Outsourced penetration testing — the engagement of external experts to perform security testing.
Penetration testing — a simulated cyberattack performed to test system resilience and the effectiveness of security measures.
Residual risk — The remaining risk after the implementation of security controls..
Risk assessment — the process of identifying, analysing and evaluating cyber risks that may affect business operations.
Risk register — a documented log of identified cyber risks, their severity and corresponding mitigation measures.
Risk scoring — the assignment of numerical values to risks to guide prioritisation.
Security Information and Event Management (SIEM) — software that aggregates and analyses security data.
SWIFT compliance assessment — a review to determine whether a bank or financial institution meets SWIFT CSP mandatory controls.
SWIFT Customer Security Programme (CSP) — a framework designed to secure global financial messaging services.
SWIFT CSP security assessment — a review ensuring compliance with SWIFT Customer Security Programme.
SWIFT mandatory controls — core security requirements established by SWIFT, including secure access and system monitoring.
Threat modelling — a structured method for predicting potential attack scenarios. OR A structured approach to identifying potential threats, vulnerabilities and attack scenarios.
Vulnerability assessment — the process of identifying weaknesses in systems, networks or applications.
