Focuses on the proper handling and usage of sensitive data—specifically personal information, communication, and conduct—that are generated and transmitted within digital environments.
The cryptographic transformation of data to produce ciphertext.
A virtual network built on top of existing networks that can provide a secure communications mechanism for data and IP information transmitted between networks.
A written statement that tells users what personal information a business collects, how it uses that data, and who else gets access to it.
Hardware, firmware, or software that is intentionally included or inserted in a system for a harmful purpose.
An attempt to trick someone into revealing information (e.g., a password) that can be used to attack systems or networks.
A technique for attempting to acquire sensitive data, such as bank account numbers, through a fraudulent solicitation in email or on a web site, in which the perpetrator masquerades as a legitimate business or reputable person.
Ransomware is a type of malware that holds a victim’s sensitive data or device hostage, threatening to keep it locked—or worse—unless the victim pays a ransom to the attacker.