THE SHORT ANSWER
Cybersecurity is the practice of managing risks to systems, accounts, devices, networks, applications and data. It combines technology, process and human behaviour so information stays appropriately private, accurate and available.
Security protects business capability
| Objective | Plain meaning | Business example |
|---|---|---|
| Confidentiality | Only appropriate people can see information | Customer records are access-controlled |
| Integrity | Information and actions remain accurate | Payment details cannot be silently changed |
| Availability | Systems and data are usable when needed | Critical operations can continue or recover |
Security includes prevention, detection, response and recovery. A safeguard that blocks work without considering recovery and customer needs can create a different business risk.
Evidence & context: National Institute of Standards and Technology
Technology is only one part
- People who make and verify requests
- Processes for access, change and response
- Technology that authenticates, restricts and logs
- Leadership that prioritizes risk and recovery
Use an operating cycle
Ask what must be protected, who can access it, what could go wrong, how the business would notice, who responds and how operations recover.
Turn guidance into an owned business action
Choose one relevant account, system, data set or workflow. Record the owner, current control, most important failure, detection signal, response step and recovery dependency. Escalate specialist, legal or regulatory questions to qualified advisers for the applicable context.
Sources & further reading
- The NIST Cybersecurity Framework 2.0
National Institute of Standards and Technology. Current outcome-based guidance for governing, identifying, protecting, detecting, responding to and recovering from cybersecurity risk. It does not prescribe one implementation.
Examples and exercises are illustrative unless attributed to a source. No independent expert review is claimed.
A correction, a counterexample or an experience worth sharing?
Join the conversation ↗