Introduction to Security Operations Management
Introduction to Cybersecurity
What Is Cybersecurity?
Cybersecurity is the practice of protecting computers, networks, and data from digital attacks, damage, or unauthorised access. Think of it as the digital equivalent of locking your house, installing an alarm system, and keeping your valuables in a safe.
In today's world, nearly everything we do is connected to the internet. We bank, shop, communicate, and work online. This digital life creates a huge amount of data about us, from our financial details to our personal conversations. Cybersecurity ensures this information stays private and safe.
Without cybersecurity, our personal information, financial systems, and even critical infrastructure like power grids would be vulnerable to attack.
Common Threats to Look Out For
The digital world has its share of dangers. Malicious actors use various methods to try and steal information or cause disruption. Understanding the most common threats is the first step towards protecting yourself.
Malware
noun
Short for malicious software, it is any software intentionally designed to cause disruption to a computer, server, client, or computer network.
Malware is an umbrella term for many types of harmful software, including:
- Viruses: These attach themselves to clean files and spread through a computer system, often corrupting or destroying data.
- Ransomware: This type of malware encrypts your files, making them inaccessible. The attacker then demands a ransom, usually in cryptocurrency, to restore access.
Another common threat is phishing, which relies on deception rather than technical tricks.
Phishing
noun
The fraudulent practice of sending emails or other messages pretending to be from reputable companies to trick individuals into revealing personal information, such as passwords and credit card numbers.
Imagine you get an email that looks like it's from your favourite online shop. It says your account has been compromised and you need to click a link to reset your password immediately. You click the link, enter your old password and a new one, and think the problem is solved. But the website was fake, and you just gave your credentials to a scammer.
The Three Pillars of Security
To protect against these threats and others, cybersecurity professionals focus on three core principles. They are known as the CIA Triad: Confidentiality, Integrity, and Availability. These three pillars form the foundation of any strong security strategy.
The three foundational principles of the cybersecurity domain are confidentiality, integrity, and availability.
Let's break them down.
Confidentiality is about keeping secrets. It ensures that data is accessible only to authorised users. It's like sending a sealed letter; only the intended recipient should be able to open it and read the contents. Encryption is a key tool for maintaining confidentiality.
Integrity is about ensuring that data is trustworthy and has not been tampered with. The information you access must be accurate and reliable. Imagine a bank transfer. Integrity ensures that the amount you send is the exact amount that is received, with no modifications along the way.
Availability means that systems and data are accessible to authorised users when they need them. If a service like online banking or a company's website is down because of an attack, it fails the availability test. The goal is to ensure continuous operation of critical systems.
What is the primary purpose of cybersecurity?
A hacker successfully alters a bank transaction record, changing the amount of money transferred from £100 to £10,000. Which principle of the CIA Triad has been violated?
Understanding these basic concepts is the first step on the journey into cybersecurity. They provide the framework for thinking about how to protect our digital lives.