Please enable JavaScript.

Coggle requires JavaScript to display documents.

CyberSecurity - Coggle Diagram

- - - - Transferable Skills
        
        Collaboration
        
        Communication
        
        Problem solvings
      - Technical skills
        
        Programming languages
        
        Security information & event management (SIEM) tools
        
        Computer forensics
      - The importance of Cybersecurity
        
        Personally Identifiable Information (PII)
        
        any infor used to infer an individual's identity
        
        Sensitive Personally Identifiable Information (SPII)
        
        a specific type of PII that faults under stricter handling guidelines
    - - entry-level cybersecurity analyst
        
        Responsible for monitoring & protecting information & system
        
        Protecting computer & network systems
        
        Installing prevention software
        
        Conducting periodic security audits
      - Playbook is a list of how to go through a certain detection, and what the analyst needs to look at in order to investigate those incidents
      - Key cybersecurity terms & concepts
        
        Compliance is the process of adhering to internal standards and external regulations and enables organizations to avoid fines, audits, and security breaches.
        
        Security frameworks are guidelines used for building plans to help mitigate risks and threats to data and privacy.
        
        Security controls are safeguards designed to reduce specific security risks. They are used with security frameworks to establish a strong security posture.
        
        Security posture is an organization’s ability to manage its defense of critical assets and data and react to change. A strong security posture leads to lower risk for the organization.
        
        A threat actor, or malicious attacker, is any person or group who presents a security risk. This risk can relate to computers, applications, networks, and data.
        
        Network security is the practice of keeping an organization's network infrastructure secure from unauthorized access. This includes data, services, systems, and devices that are stored in an organization’s network.
        
        Cloud security is the process of ensuring that assets stored in the cloud are properly configured and access to those assets is limited to authorized users.
        
        The cloud is a network made up of a collection of servers or computers that store resources and data in remote physical locations known as data centers that can be accessed via the internet. Cloud security is a growing subfield of cybersecurity that specifically focuses on the protection of data, applications, and infrastructure in the cloud.
        
        Programming is a process that can be used to create a specific set of instructions for a computer to execute tasks.
      - Cybersecurity - The practice of ensuring confidentiality, integrity, and availability of information by protecting networks, devices, people, and data from unauthorized access or criminal exploitation
      - Network security: The practice of keeping an organization's network infrastructure secure from unauthorized access
      - Benefits of security
        
        Protects against external & internal threats
        
        Meets regulatory compliance
        
        Maintains & improves business productivity
        
        Reduces expenses
        
        Maintain brand trust
  - - - Past cybersecurity attacks
        
        Computer virus
        
        malicious code written to interfere with computer operations & cause damage to data & software
        
        Malware
        
        Software designed to harm devices or networks
        
        1986 the Alvi brothers created the Brain virus
        
        1988 Robert Morris developed a program to assess the size of the internet
      - Attacks in the digital age
        
        Social engineering
        
        a manipulation technique that exploits human error to gain private infor, access, or valuables