IT Vocabulary
Safety Tips
Unsafe Behaviour
Cyberattacks
Miscellaneous
100

A specialist who configures hardware, maintains IT infrastructure and fixes technical problems. 

IT technician

100

A combination of characters, numbers and symbols designed to resist brute-force attacks.

Strong Password

100

You open an attachment from an unknown sender without checking whether it is safe.

Opening a Suspicious Attachment

100

Deceptive emails or messages designed to trick people into revealing sensitive credentials.

Phishing

100

Software designed to detect, quarantine and remove computer viruses and other threats.

Antivirus

200

An automated chronological record of system events, user logins and data transactions.

Network log

200

An authentication method that requires two independent forms of verification.

Two-Factor Authentication

200

You click a link in an unexpected email that may lead to a fraudulent website.

Clicking a Suspicious Link

200

Malicious software that encrypts files and demands money to restore access to them.

Ransomware

200

A person who exploits technical weaknesses to gain unauthorised access to a computer system.

Hacker

300

A weakness in software code that attackers can exploit to compromise a system 

Vulnerability

300

A duplicate copy of important files kept so that lost or corrupted data can be recovered.

Backup

300

You give your login details to someone who pretends to work in IT support.

Social Engineering

300

Malicious software that secretly tracks user activity and collects sensitive information without consent.

Spyware

300

A security incident in which confidential company records are accessed without authorisation.

Data Breach

400

A software release designed to fix bugs and security weaknesses.

Security patch

400

A network barrier that checks incoming and outgoing traffic to block unauthorised access.

Firewall

400

You install malicious software disguised as a legitimate application.

Trojan Horse

400

An attack that overwhelms a server with illegitimate requests to exhaust its resources.

Denial of Service (DoS)

400

The process of isolating an infected computer or malicious file to stop a threat from spreading.

Quarantine

500

The process of scrambling readable data so that only authorised people can read it.

Encryption

500

Physical drives or tape media kept completely disconnected from the internet to protect copies of data.

Offline Storage

500

You delay installing an update even though it fixes a known security weakness.

Ignoring a Security Patch

500

The systematic collection of usernames and passwords, often using fake login pages.

Credential Harvesting

500

A formal protocol that explains how an organisation contains, removes and recovers from a cyberattack.

Incident Response Plan