The CyberGuard field guide / Topics

Business Cybersecurity.

Connect security decisions to business operations, suppliers, leadership, and recovery.

15 published definitionsPractical examples and source links
← Back to the dictionary
General Solutions Group

THE DEFINITIONS

Explore Business Cybersecurity.

Open a term for a plain-language explanation, a technical explanation, and a practical example.

DEFINITION 01

Backup

A separate copy of data kept so it can be restored after loss, corruption, or disruption.

DEFINITION 02

Board Cyber Oversight

Board cyber oversight is a board's governance of material cybersecurity risk through clear accountability, risk appetite, reporting, and follow-up.

DEFINITION 03

Business Continuity

The capability to continue essential operations during and after disruption.

DEFINITION 04

Business Impact Analysis

A business impact analysis identifies important activities and estimates the consequences of their interruption to set recovery priorities.

DEFINITION 05

Continuity Plan

A continuity plan documents how an organization will keep essential activities operating or restore them during a disruption.

DEFINITION 06

Crisis Communication

Crisis communication is the coordinated delivery of accurate, timely information to people affected by a major disruption or security incident.

DEFINITION 07

Cyber Insurance

Cyber insurance is an insurance policy intended to cover specified financial losses or response costs arising from covered cyber events, subject to its terms.

DEFINITION 08

Disaster Recovery

The restoration of technology systems and data after a major disruptive event.

DEFINITION 09

Disaster Recovery Exercise

A disaster recovery exercise is a planned test of people, procedures, and systems used to restore technology after a disruptive event.

DEFINITION 10

Recovery Point Objective

Recovery point objective is the target point in time to which data must be recoverable after a disruption, expressing acceptable potential data loss.

DEFINITION 11

Recovery Time Objective

Recovery time objective is the target maximum time to restore a service or process after a disruption before the outage causes unacceptable impact.

DEFINITION 12

Security Awareness Training

Security awareness training teaches people how to recognize, avoid, and report security risks they may encounter in their work.

DEFINITION 13

Supply Chain Security

Supply chain security manages cyber risks introduced through products, software, services, and organizations an enterprise depends on.

DEFINITION 14

Third Party Risk

Third-party risk is the possibility that an external organization or service affects a business's security, operations, compliance, or customers.

DEFINITION 15

Vendor Risk

Vendor risk is the exposure created when a supplier's products, services, or practices can harm a customer's security or continuity.

KEEP EXPLORING

Follow another topic.

Build context across the connected parts of cybersecurity.

View the full dictionary ↗
Browse all other topics