Glossary
Cyber security terms, in plain language.
The words you will meet when a client, insurer or auditor asks about your security.
- Attestation
- A sign-off: a named person confirms in writing that something is true, such as that your security measures are in place.
- Control
- A security measure: a single protection a standard asks you to have, such as multi-factor sign-in or regular backups.
- Director-attested
- A certification where a director of the business signs off that the required security measures are in place. Bronze, Silver and Gold work this way.
- EDR and MDR
- Protection on every device, watched around the clock. Endpoint detection and response (EDR) is software that spots attacks on laptops, servers and phones. Managed detection and response (MDR) adds a team that watches it and acts at any hour.
- Evidence
- The proof that a security measure is in place, such as a setting screenshot, a signed policy or a report from one of your tools.
- GRC
- Governance, risk and compliance. In plain terms, managing security, risk and rules in one place.
- Incident response
- What you do when something goes wrong: who is told, what is checked, what is fixed and what is recorded. A plan and a clear record make it faster and less stressful.
- Independently verified
- A certification where an outside assessor checks the evidence. Platinum and Diamond work this way.
- Multi-factor authentication
- Signing in with something more than a password, such as a code on your phone. It makes a stolen password much less useful.
- Proof pack
- The set of records your client or insurer asks for to show your security measures are in place. Also called an evidence pack.
- Readiness assessment
- A free check that gives you a first picture of where you stand. It is a starting point based on your answers. Connecting your tools gives the full picture.
- Security posture
- How well protected your business is right now: what is in place, what is missing and what is most at risk. On this site we call it where you stand.
- SMB1001
- A cyber security certification standard built for small and medium businesses. It is published by Dynamic Standards International (DSI) and has five tiers: Bronze, Silver, Gold, Platinum and Diamond.
- Third-party risk
- The risk that comes from the suppliers and partners you rely on. If a supplier is breached, your data or your clients can be affected too.
Find out where you stand.
The readiness assessment is free and gives you a clear starting point.