What is cybersecurity?

Cybersecurity comprises practices and processes protecting devices, networks, accounts and information from digital threats. It is more than installing antivirus software: human behaviour, access rules, updates, logging and recovery also matter.

What are confidentiality, integrity and availability?

Confidentiality limits unauthorized disclosure; integrity protects against unauthorized or undetected changes; availability lets authorized users access needed services. Attacks can affect several goals. Phishing deceives users, malware performs unwanted actions, and denial of service exhausts resources. A threat is a possible source of harm, a vulnerability is an exploitable weakness, and risk considers likelihood and impact. Not every failure is an attack: hardware faults also belong in security planning.

How do layered protection and incident plans work?

Unique passwords, appropriate multifactor authentication and restricted privileges protect accounts. Software updates, backups and logs support prevention and investigation. Users need clear ways to report suspicious requests. Plans should establish which devices to isolate, whom to notify and how to restore services. No product guarantees complete security: the aim is reducing risk and limiting consequences. Controls should reflect information value and actual use. Tested restoration provides more concrete assurance than merely possessing a checklist.