The practice of controlling and monitoring access to data, resources, and systems within an organization. To enhance security, ensure only authorized individuals have appropriate permissions.
A set of rules and tools for building software applications. APIs are used to exchange data, features, and functionality between systems/applications.
Anything-as-a-Service describes a general category of services related to cloud computing and remote access. It recognizes the vast number of products, tools, and technologies that are now delivered to users as a service over the internet.
A security practice in which user credentials are checked, ensuring they are who they claim to be, before allowing access network resources. This can also be referred to as identity management.
A backup is a copy of data that’s stored in a separate location. Backups are important for protecting data from loss due to accidents, hardware failure, or cyber attacks.
BaaS is a service that is cloud-based, where service providers will manage the storage and protection of your business data.
In the IT world, this is a simple approach where if something breaks, you get it fixed, and you pay for just that service. This approach does not typically look further into the WHY behind the issue that caused the break, rather just the immediate action to fix the issue.
Business Email Compromise (BEC) is a phishing tactic where criminals impersonate a trusted vendor or organization leader, using the position of authority or familiarity, to convince the targeted employee to release sensitive information or transfer funds.
Cloud computing is a model for managing computing resources (such as storage, servers, and software) over the internet. It allows users to access these resources on-demand, from anywhere, as long as there is access to the internet.
Copilot is Microsoft’s AI assistant that helps users with tasks on their devices to improve productivity and efficiency with suggestions and automating repetitive tasks.
A CISSP is an independent information security certification granted by the International Information System Security Certification Consortium, also known as ISC2.
The dark web is a part of the internet that’s only accessible with special software and browsers. The dark web is part of the deep web, which is content that’s not indexed by search engines.
A distributed denial-of-service (DDoS) attack is a cyberattack that makes a website, server, or network unavailable to users.
Endpoints are physical devices that connect to, and exchange information with, a computer network.
Examples: mobile devices, desktop computers, virtual machines, embedded devices, servers
A cybersecurity technology that focuses on detecting and investigating security incidents on endpoints, such as desktops, laptops, servers, and mobile devices.
Hardware-as-a-service is an IT service offering that enables customers to access to critical hardware on a subscription or usage-based (“pay per use”) payment model.
A federal law that protects the security and privacy of health information; HIPAA also gives patients rights over their health information.
May also be referred to as a Service Desk. This team is your quickest way to get assistance with an IT issue, either via phone call, email, or chat assistance. The NetGain Help Desk strives to answer most phone calls within 3 rings.
A human firewall represents the collective force of individuals in an organization trained to guard against cyber threats as a fundamental layer of defense.
Infrastructure as a Service (IaaS) is a cloud computing service that provides IT resources, like storage, networking, and processing power. IaaS is typically offered on demand, and users pay for what they use.
The Internet of Things (IoT) is a network of devices that can connect and share data over the internet. IoT devices can include sensors, wearable devices, appliances, and other hardware.
IT is a broad field that encompasses the usage computers, software, and networks to store, process, and communicate information.
An immutable backup is a copy of data that cannot be changed, deleted, or tampered with. Immutable backups help in the event of ransomware, as your protected backups cannot be encrypted by ransomware. They are also good protection against human error, mitigating accidental deletions and tampering.
An Incident Response Plan is a written document, formally approved by the senior leadership team, that helps your organization before, during, and after a confirmed or suspected security incident.
An Internet service provider (ISP) is an entity that provides broadband (internet) service to subscribers.
A large language model (LLM) is a type of artificial intelligence program that can recognize and generate text, trained on huge sets of data.
Machine learning is a form of artificial intelligence that allows software to review and identify/learn patterns based on sample data.
Malware is short for “malicious software” and it’s software designed to damage, steal, or gain access to a device, network, or data.
Managed detection and response (MDR) is a cybersecurity service to proactively protect organizations from cyberthreats using advanced detection and incident response. MDR services include a combination of technology and human expertise to perform cyberthreat hunting, monitoring, and response.
Managed endpoint detection and response (MEDR) is a cybersecurity service that monitors and responds to threats on an organization’s endpoints. It’s a managed service, which means the security vendor or partner deploys, operates, and supports the solution.
A managed security service provider (MSSP) is a third-party company that monitors and manages a client’s security systems and devices. MSSPs have a security operation center (SOC) to provide 24/7 cybersecurity services for clients. Common services can include managed firewall, intrusion detection, virtual private network, vulnerability scanning, and anti-virus services.
A managed service provider (MSP) is a company that manages a customer’s IT infrastructure, applications, or business processes. MSPs are third party teams that can work remotely or onsite to support their clients.
A type of security software that enables you to secure, monitor, manage, and enforce policies on employee mobile devices.
Multi-factor authentication (MFA) is a security process that requires more than one step to log in to an account; it’s also known as two-step verification.
A centralized location where IT teams can continuously monitor the performance and health of client networks. The NOC serves as a line of defense against network disruptions and failures.
OAuth allows you to authorize one app or service to sign in to another without sharing private information, such as passwords or unlimited access to your data.
Patch management is the process of updating software, drivers, and firmware to fix vulnerabilities and improve performance. Patch management can help protect systems from cyber attacks and data breaches.
A passphrase is a longer, more complex password, consisting of a sequence of words or other text. Passphrases are considered more secure as they are typically more difficult to crack.
Penetration Testing, also known as a “pen test”, is a methodology to identify gaps or weak points in the security features of a system.
A cyber attack technique in which the cyber criminal poses as a legitimate business or reputable person. They will try to steal sensitive data, such as bank account numbers, through a fraudulent email or on a web site.
This is an organizational structure method for remote and field groups of support engineers. At NetGain, they are the first point of contact for all incident tickets, including escalations and dispatch (aka Help Desk and Service Desk).
The members of NetGain’s incident response team are grouped into tiers of support. Tier 1, 2, and 3 engineers will resolve different tickets based on the level of complexity of the IT challenge and their level of expertise to remediate.
An organization may limit access to specific systems and data only to users who have a demonstrable need. PoLP is an effective measure that restricts access to sensitive networks and data, and gives organization’s greater control and insights into who is accessing what, when, and why within their organization.
These engineers are typically focused on IT projects with a series of tasks that need to be completed to reach a specific outcome. Projects typically fall outside of the managed services support agreement.
A series of scheduled tasks to proactively maintain your technology. Proactive maintenance is a measure of protecting your technology investments and mitigating unwanted downtime or breaks that could otherwise be avoided if properly and proactively maintained. May also be referred to as Scheduled Maintenance.
Ransomware is a type of malware which prevents you from accessing your device and the data stored on it (usually by encrypting your files). A cyber criminal will demand a ransom in exchange for decryption. The computer itself may become locked, or the data on it might be encrypted, stolen or deleted.
Ransomware as a service (RaaS) is a cybercrime business model in which ransomware developers sell ransomware code or malware to other hackers ( called “affiliates”) who use the code for ransomware attacks.
During a project proposal, an engineer will create a scope of work that includes step by step insights on what will take place during the proposed project. The scope helps to determine the hours needed to complete the project.
Security Awareness Training is an ongoing educational process to inform people on how to identify and avoid cyber threats to safeguard sensitive information.
SIEM is a cybersecurity solution that helps organizations detect, analyze, and respond to security threat events before they disrupt business operations.
A security operations center (SOC, pronounced “sock”) is a team of security experts that proactively monitor an organization’s ability to operate securely.
Oversees the NetGain POD teams and serves as an escalation point for ticket assistance.
A service level agreement (SLA) is a service provider contract with a customer that outlines a level of service the provider promises to deliver to the customer.
Security Operations Center as a Service (SOCaaS) is a subscription service offering of managed security service providers. They will deliver 24/7/365 threat monitoring, detection and incident response, threat intelligence, and cybersecurity investigations to customers.
This refers to a specific type of audit report that assesses a service organization’s security controls over a period of time evaluating not only the design of those controls but also their operational effectiveness in safeguarding customer data, providing a more comprehensive view of a company’s security posture compared to a SOC 2 Type I report which only looks at a single point in time.
Social engineering is the art of manipulating, influencing, or deceiving you in order to gain control over your computer system. The hacker might use the phone, email, snail mail or direct contact to gain illegal access. Phishing, spear phishing, and CEO fraud are all examples.
A software distribution/subscription model where applications are hosted by a service provider and they provide access to customers over the internet.
Spear phishing is a specific kind of phishing attack where a cyber criminal targets a specific person/organization with email messages that seem to come from someone who knows them or is part of the organization.
Spoofing is when a caller deliberately falsifies the information transmitted to your caller ID, to disguise their identity.
Tabletop planning is an exercise to test an organization’s response to a simulated emergency. This is an informal, discussion session where a team discusses their roles and responses during an emergency, walking through one or more example scenarios.
Threat hunting in cybersecurity refers to actively searching through an organization’s network and systems to identify potential cyber threats that may have evaded traditional security measures.
A technical assessment is an in-depth review of your IT infrastructure. This is a snapshot in time of your IT posture.
A technical review is a business discussion that delves into what was found in a technical assessment. This may also be referred to as a Business Review, Executive Business Review (EBR), or Quarterly Business Review (QBR), depending on the audience and the frequency of the reviews set throughout the year.
This is NetGain’s in-house offering for managed services support. This is the support coverage used to describe your support team members and their action items (such as TOS Agreement, TOS Engineer, TOS Business Review, etc.).
A value-added reseller (VAR) is an organization that is usually part of a sales channel for an original equipment manufacturer (OEM).
A Virtual Chief Information Security Officer provides executive-level security leadership on a fractional or as-needed basis, focusing on securing an organization’s information systems and data.
A Virtual Chief Security Officer provides executive-level security leadership on a fractional or as-needed basis. This role often oversees all aspects of security within an organization, including physical security, information security, and human safety.
A VPN is a service that encrypts your data and hides your IP address while you’re online, which makes your browsing activity and location private.
VoIP refers to a technology that allows users to make phone calls over the internet instead of using traditional phone lines.
A scan of your virtual network to assess physical assets for a personalized report showing your organization’s potential vulnerabilities and remediation guidance.
A Wide Area Network (WAN) is a digital communications network that connects multiple smaller networks over long distances. WANs are used to link computers, devices, or networks across different locations.
Zero Trust is a security strategy approach that follows a set of security principles to verify explicitly, least privilege access, and assume breach.
Zero Trust Architecture (ZTA) is a cybersecurity framework based on the principle of “Never Trust, Always Verify”. It’s about ensuring every access request is authenticated and authorized, and assumes threats can be inside or outside the network.
If you work with the Department of Defense—or plan to—you need to comply with Cybersecurity Maturity Model Certification (CMMC) standards. Navigating these requirements can be challenging, but they are critical for winning and maintaining DoD contracts.
Each quarter, we’re bringing you a roundup of the latest threat intelligence, security trends, and expert guidance to help you stay protected and prepared.
Cybersecurity tabletop exercises are designed to test organizations’ incident response protocols by simulating a real-world cyber incident. Conduct one today.
