Glossary

Risk exposure is a quantification of the vulnerability of an individual, organization, or asset to adverse events or uncertainty. It can show how susceptible…

Continuous Threat Exposure Management (CTEM) is a proactive and continuous five-stage program or framework that helps organizations monitor, evaluate, and reduce their level of…

Critical Security Controls (CSCs) are a recommended set of actions for cybersecurity that provide ways to help prevent and stop attacks on critical data…

An attack surface is the sum of all points where an organization is vulnerable to cyber-attackers, including all attack vectors where an adversary can…

The process of cybersecurity performance management helps an organization understand how well it is meeting its cybersecurity objectives. Because conventional performance management metrics (such…

Cloud migration and the popularity of AWS, Azure and other Infrastructure-as-a-Service providers have created myriad new data security challenges for today’s businesses. Cloud security…

Often the best way to defend against a threat is to assume the perspective of an attacker. By modeling how a cyber-adversary is likely…

A cyber attack graph is a representation of all possible paths of attack against a cybersecurity network, illustrating a state where an attacker has…

An attack surface can be defined as anywhere and everywhere an organization is vulnerable to cyber-attacks. This includes all possible attack vectors where an…

Risk-based Vulnerability Management (RBVM) is a cybersecurity strategy designed to help organizations limit risk through the strategic prioritization of vulnerability remediation. To accomplish this,…

The Common Vulnerability Scoring System (CVSS) is an open framework used by organizations across the world to determine the severity of cybersecurity vulnerabilities. These…

Cybersecurity threats and organizational challenges related to information security are becoming more complex by the minute. To understand these elements at a high level…