Tech and security folks love their acronyms. MFA, EDR, SIEM, OT... it can sound like alphabet soup. This is my plain-English cheat sheet: what each term means, what it's like in everyday life, and why you should actually care. No computer science degree required.
Software that does things we normally think need a human brain, like recognizing faces, understanding speech, or writing text.
Think of it like: It's less like a robot butler and more like a really fast intern who has read a lot, never sleeps, and still needs someone to check their work.
Why you should care: AI is showing up in almost every tool you use at work. It can save you hours, but it's only as good as what you feed it and how carefully you review what it gives back.
Amazon's cloud platform: computers, storage, databases, and hundreds of other services you can rent by the hour or by the gigabyte.
Think of it like: Same company that delivers your paper towels, except here they'll deliver a server farm. No porch pirates, but you do have to lock the door yourself.
Why you should care: A huge chunk of the internet runs on AWS. If your business uses it, Amazon secures the buildings and hardware, but setting up your accounts and data safely is on you.
Microsoft's cloud platform, where businesses rent computing power, storage, and services instead of buying and running their own servers.
Think of it like: Think of it as Microsoft's giant apartment complex for computers. You rent a unit and furnish it however you want, and they handle the building, power, and plumbing.
Why you should care: If your company uses Microsoft 365, you're already connected to Azure behind the scenes (that's where Microsoft Entra ID, formerly Azure AD, handles your sign-ins). Its settings matter more than most people realize.
A separate copy of your data that you can restore if the original gets deleted, corrupted, or held for ransom.
Think of it like: It's the spare house key you leave with a neighbor. Useless until the day you're locked out, and then it's the best thing you own.
Why you should care: A good rule of thumb is 3-2-1: three copies of your data, on two different types of storage, with one kept off-site. And test your restores, because a backup you've never tested is just a hope.
How much data your connection can move at once, usually measured in megabits per second (Mbps).
Think of it like: It's the number of lanes on the highway. More lanes means more cars can travel at the same time, but it doesn't raise the speed limit.
Why you should care: When everyone in the house is streaming, gaming, and on video calls at once, you're running out of lanes. More bandwidth helps with that, but it won't fix every kind of slowness (see Latency).
A network of infected computers and gadgets that a criminal controls remotely, usually without the owners having any idea.
Think of it like: A zombie army, except the zombies are old routers, smart cameras, and that one PC in the closet nobody has updated since 2015.
Why you should care: Your devices can be drafted into attacks on other people. Changing default passwords and keeping gadgets updated keeps them off the roster.
Using someone else's computers over the internet to store files, run apps, or host services, instead of keeping it all on your own machines.
Think of it like: It's like renting a storage unit instead of building a shed in your backyard. Your stuff still exists in a real building somewhere; you just don't have to maintain it.
Why you should care: There's no magic sky computer. "The cloud" means your data lives in someone else's data center, so who you trust and how you set it up really matter.
When private information like names, passwords, card numbers, or medical records gets accessed or stolen by someone who shouldn't have it.
Think of it like: It's like the filing cabinet at your doctor's office getting rolled out the back door. You didn't do anything wrong, but it's still your info out there.
Why you should care: If a company you use gets breached, change that password (and anywhere you reused it), turn on MFA, and watch your accounts. A credit freeze is free and worth considering.
An attack that floods a website or service with so much junk traffic from so many devices that real users can't get in.
Think of it like: Imagine thousands of people calling a pizza place at the same time just to breathe into the phone. The real customers can't get through to order.
Why you should care: DDoS attacks can knock a business offline for hours. Most businesses get protection from their hosting or network provider rather than fighting it alone.
Fake video, audio, or images created with AI that make it look or sound like a real person said or did something they never did.
Think of it like: It's a digital Halloween mask so good that even the person's mom might be fooled.
Why you should care: Scammers have used cloned voices to impersonate bosses and family members asking for money. If a call or video request feels urgent and unusual, hang up and verify another way.
The system that translates website names like coreyjones.net into the numeric IP addresses computers actually use to find each other.
Think of it like: It's the internet's contacts app. You tap "Mom," and your phone looks up the actual number for you.
Why you should care: When DNS breaks, websites "disappear" even though they're perfectly fine. Attackers also abuse DNS to send people to fake sites, so it's a common place for security filtering.
Security software on laptops, desktops, and servers that watches for suspicious behavior, records what happens, and can stop or isolate a threat.
Think of it like: Old-school antivirus is a bouncer checking IDs against a list of known troublemakers. EDR is the security camera system plus a guard who notices when someone is acting shady, even if they're not on the list.
Why you should care: Modern attacks often don't look like a known virus. EDR catches the weird behavior, like a Word document suddenly trying to run scripts or encrypt files.
Scrambling data so only someone with the right key can read it. To everyone else, it looks like gibberish.
Think of it like: It's writing notes in a secret code you and your best friend made up in grade school, except the code is backed by math that would take a supercomputer far longer than your lifetime to crack.
Why you should care: Encryption protects your data when it's sent (the padlock in your browser) and when it's stored (like a lost laptop with an encrypted drive). Without it, a stolen device is an open book.
A security system that decides which network traffic is allowed in or out, based on a set of rules.
Think of it like: It's the guard at a gated community checking who's on the list. Residents and expected guests get waved through; everyone else gets turned around.
Why you should care: A firewall is one of the most basic layers of defense for any network, but its rules have to be kept up to date. A gate with a guard who waves everybody in isn't doing much.
When an AI tool confidently gives you an answer that sounds right but is partly or completely made up.
Think of it like: It's that friend who never says "I don't know" and will give you detailed directions to a restaurant that closed years ago.
Why you should care: AI can invent facts, quotes, sources, and even legal cases. Double-check anything important before you send it, sign it, or bet your reputation on it.
A numeric label assigned to each device on a network so data knows where to go, like 192.168.1.10.
Think of it like: It's the mailing address for your device. Without it, the internet has no idea where to deliver your cat videos.
Why you should care: IP addresses help identify where traffic is coming from, which is useful for troubleshooting and for spotting suspicious logins. Your home's public IP can reveal your rough location.
The delay between sending data and getting a response, usually measured in milliseconds (ms).
Think of it like: If bandwidth is how many lanes the highway has, latency is how long the drive takes. A 10-lane highway doesn't help if the destination is across the country.
Why you should care: High latency is why video calls lag and online games feel laggy even on a "fast" plan. It's affected by distance, Wi-Fi quality, and how many hops your data takes.
The type of AI behind chatbots like ChatGPT. It's trained on huge amounts of text and learns to predict which words should come next.
Think of it like: It's autocomplete that went to college, read most of the internet, and now writes essays. Impressive, but it's still predicting words, not looking up the truth.
Why you should care: LLMs are great for drafting, summarizing, and brainstorming. Be careful what you paste into them, though, since some tools may store or learn from what you share. Check your company's policy first.
Short for "malicious software": any program designed to harm, spy on, or take control of your device. Viruses, spyware, and ransomware are all types of malware.
Think of it like: Malware is the umbrella term, like "bugs." Viruses, spyware, and ransomware are the specific critters: mosquitoes, termites, and the raccoon that got into the attic.
Why you should care: Malware usually sneaks in through email attachments, sketchy downloads, or unpatched software. Updates, security software, and a healthy dose of suspicion keep most of it out.
A service where an outside team of security experts monitors your systems around the clock and responds to threats for you.
Think of it like: EDR is the security camera system. MDR is hiring a professional security company to actually watch those cameras 24/7 and send someone out when something moves.
Why you should care: Most small and mid-sized businesses can't afford a full in-house security team watching screens at 3 a.m. MDR gives them that coverage without hiring one.
Proving it's you with two or more different things, like your password plus a code from your phone or a fingerprint.
Think of it like: It's like your bank asking for your debit card AND your PIN. A thief who swipes just one of them still can't get your cash.
Why you should care: MFA stops the large majority of account takeovers. If you only do one thing after reading this page, turn on MFA for your email and bank accounts. App-based codes or passkeys beat text messages.
Splitting a network into separate sections so that a problem in one area can't easily spread to the others.
Think of it like: It's a ship with watertight compartments. If one section floods, you close the doors and the whole ship doesn't sink.
Why you should care: Without segmentation, an attacker who gets into one laptop or smart TV can roam freely. At home, even putting guests and smart gadgets on a separate guest Wi-Fi is a simple version of this.
The hardware and software that control physical things in the real world: pumps, valves, factory lines, power grids, and pipelines.
Think of it like: IT runs the office's email and spreadsheets. OT runs the machines on the plant floor. One crashing ruins your afternoon; the other can shut down the plant.
Why you should care: When OT gets hacked, the consequences can be physical: water treatment, power, and fuel supplies. That's why industrial facilities treat OT security so seriously.
An app that creates, stores, and fills in strong, unique passwords for all your accounts, locked behind one master password.
Think of it like: It's a really good safe for all your keys. You only have to remember the combination to the safe, not the shape of every key.
Why you should care: Reusing passwords means one breached site can unlock all your others. A password manager makes unique passwords painless. Protect it with a strong master password and MFA.
Installing updates that fix bugs and security holes in software, apps, and devices.
Think of it like: It's like a recall notice for your car. The manufacturer found a problem, the fix is free, and ignoring it is how you end up on the side of the road.
Why you should care: Many successful attacks exploit holes that already had a fix available. That "Update and restart" button is annoying, but it's one of the cheapest security wins there is.
Fake emails, texts, or messages pretending to be from someone you trust to trick you into clicking a link, sharing a password, or sending money.
Think of it like: It's fishing, with you as the fish. The bait is "Your package couldn't be delivered" or "Your account will be suspended," and the hook is the link.
Why you should care: Phishing is one of the most common ways attacks start. Slow down, check the sender, and when in doubt, go to the website directly instead of clicking the link.
Hiding instructions inside text, a web page, or a document so an AI tool reading it gets tricked into ignoring its rules or doing something it shouldn't.
Think of it like: It's slipping a note into a stack of papers your assistant is filing that says "Also, wire $500 to this account." A careful human would notice. An AI might just do it.
Why you should care: As AI tools start reading your email, browsing the web, and taking actions for you, prompt injection becomes a real security risk. Keep a human in the loop for anything important.
Malware that locks up or encrypts your files and demands payment to unlock them. Many gangs also steal a copy and threaten to leak it.
Think of it like: It's someone breaking into your house, putting a padlock on every room, and leaving a note: "Pay up if you ever want to see your couch again."
Why you should care: Ransomware can shut down businesses, hospitals, and cities for days or weeks. Good backups, patching, MFA, and EDR are the best ways to avoid becoming the next headline.
The device that connects your home or office network to the internet and directs traffic between your devices and the outside world.
Think of it like: It's the mail sorter at the post office, making sure each letter (or data packet) ends up at the right house on the street.
Why you should care: Your router is the front door to your whole network. Change the default admin password, keep its firmware updated, and replace it when the manufacturer stops supporting it.
Software you use through the internet on a subscription instead of installing and maintaining it yourself, like Microsoft 365, Gmail, or Salesforce.
Think of it like: It's Netflix instead of a shelf full of DVDs. You don't own the movies, but you also don't have to dust them.
Why you should care: SaaS is convenient, but your data now lives with that vendor. Use strong sign-in security and know who in your organization has access to what.
A system that collects logs and alerts from across a company's devices and apps, then connects the dots to spot attacks.
Think of it like: Picture one security desk with feeds from every camera, door badge reader, and alarm in the building, plus software that notices when someone badged in at 2 a.m. from two cities at once.
Why you should care: Individual alerts often look harmless on their own. A SIEM puts them together so a real attack doesn't hide in the noise.
Manipulating people, instead of hacking computers, into giving up information or access.
Think of it like: It's the con artist in a hi-vis vest and a clipboard who walks right past the front desk because they look like they belong there.
Why you should care: Attackers often find it easier to fool a person than to break the tech. A polite "Let me call you back to verify" beats a lot of expensive security tools.
Logging in once with one trusted account to get into many different apps, instead of having a separate password for each.
Think of it like: It's a theme park wristband. You show your ticket once at the entrance and then hop on every ride without buying a new ticket each time.
Why you should care: Fewer passwords means fewer weak ones, and IT can shut off all access at once when someone leaves. Because that one login unlocks so much, protect it with MFA.
An encrypted tunnel between your device and another network, so your traffic is protected from snooping along the way.
Think of it like: It's like driving through a private tunnel instead of on the open road. People outside can't see what's in your car or exactly where you're headed.
Why you should care: VPNs are great on public Wi-Fi and are a common way to reach work systems remotely. They aren't an invisibility cloak, though: the VPN provider can see your traffic, so pick a trustworthy one.
A weakness or flaw in software, hardware, or a process that an attacker could take advantage of.
Think of it like: It's the window you didn't realize doesn't latch. Nothing bad has happened yet, but a burglar checking windows would find it.
Why you should care: New vulnerabilities are discovered all the time. Finding and fixing them before the bad guys do is a big part of keeping any organization safe.
Wireless networking that connects your devices to a router using radio waves instead of cables.
Think of it like: It's a walkie-talkie conversation between your phone and your router. Convenient, but anyone nearby with the right gear can try to listen in or butt in.
Why you should care: Use a strong Wi-Fi password and modern security (WPA2 or, better, WPA3). On coffee shop Wi-Fi, assume strangers share the network with you.
A security approach that says "never trust, always verify": every person and device has to prove who they are and only gets access to what they need, even inside the company network.
Think of it like: Old security was a castle with a moat: get past the drawbridge and you can wander anywhere. Zero Trust is a hotel where your key card only opens your room and the gym, and it gets checked every time.
Why you should care: Attackers who steal one password shouldn't get the keys to the whole kingdom. Zero Trust limits how far they can get, and it fits a world where people work from anywhere.
A security flaw that attackers know about before the software maker has a fix available. The vendor has had "zero days" to patch it.
Think of it like: It's a burglar who found a secret way into a house the builder didn't even know existed, so the homeowner can't fix it yet.
Why you should care: Zero-days are why layered security matters. When there's no patch yet, things like EDR, segmentation, and least-privilege access help limit the damage.
No terms match that search. Try a different word, or .
Need help securing your business?
If any of these terms hit a little close to home, let's talk. I'm happy to help you figure out where to start.