Your security and compliance glossary

What is cybersecurity?

‍

Cybersecurity is the work of protecting data, information, programs, systems, networks, and devices from unauthorized or malicious access and use by external sources on the internet. 

‍

Cybersecurity programs and policies must consider the interplay of people, processes, and technology in order to support education and compliance with established practices regarding the shared responsibility of protecting data and information. An appropriate cybersecurity approach will implement layers of protection that account for the various devices, networks, programs, and data that an organization aims to protect. The challenge and importance of effective cybersecurity only continues to grow as individuals utilize more devices and organizations engage wider and more complex networks to deliver services. 

‍

Organizations should have plans in place for the proactive protection of systems from external access, as well as for managing what steps to take in the event of a data breach. Companies of all types, and companies that gather or store customer data at any scale, may be susceptible to breaches. Data breaches can be very costly, both financially and reputationally.

‍

Cybersecurity is particularly important for organizations that work within and serve regulated industries like finance, insurance, and healthcare. In addition to meeting regulatory requirements, solid cybersecurity policies and practices serve as important evidence for clients, prospects, partners, employees, and other key audiences that an organization is serious about the security of sensitive data and information.