Confidentiality
Data is available only to authorized people and systems.
BUSINESS CYBERSECURITY
Understand risk.
Build resilience.
Cybersecurity protects people, identities, systems, and data. This page explains how threats work and how layers of control reduce their impact.
Your business
UsersIdentityEndpointsNetworkEmail and appsDetectionTHE FUNDAMENTALS
What is cybersecurity?
It is the discipline of reducing the likelihood and impact of a digital incident. It protects confidentiality, integrity, and availability without preventing the business from operating.Integrity
Information remains accurate and changes are controlled.
Availability
Essential services remain usable or can be restored.
THREAT LIBRARY
Understand the mechanism before choosing the control.
A threat is more than a name. Open each entry to see how it works, warning signs, and measures that reduce risk.01Phishing+
A broad message impersonates a brand to obtain a click, payment, or password.
- SIGNS
- Urgency, unusual sender address, or a link that differs from the claimed domain.
- PREVENTION
- Filtering, awareness, MFA, and simple reporting.
02Spear phishing+
A tailored message uses information about the target to appear credible.
- SIGNS
- An unusual request that appears to know your role or partners.
- PREVENTION
- Out-of-band verification and role-based training.
03Business email compromise+
An attacker impersonates or controls an account to redirect payment or data.
- SIGNS
- A sudden banking change or request for secrecy.
- PREVENTION
- Dual payment approval, MFA, and sign-in monitoring.
04Malware+
Malicious software attempts to disrupt, spy, or provide unauthorized access.
- SIGNS
- Unknown processes, slowdowns, or unexpected changes.
- PREVENTION
- EDR, patching, application control, and least privilege.
05Ransomware+
An attacker encrypts or steals data to demand payment.
- SIGNS
- Renamed files, unusual access, or a ransom note.
- PREVENTION
- Segmentation, EDR, limited access, and tested immutable backups.
06Spyware+
Software quietly collects activity, credentials, or data.
- SIGNS
- Unknown extensions, redirects, or unusual outbound traffic.
- PREVENTION
- Endpoint protection, web filtering, and software control.
07Credential theft+
Passwords or session tokens are captured and reused.
- SIGNS
- Unexpected MFA prompts or sign-ins from an unknown location.
- PREVENTION
- Phishing-resistant MFA, password managers, and conditional access.
08Password attacks+
Guessed, leaked, or reused passwords are tested automatically.
- SIGNS
- Many failed sign-ins or account lockouts.
- PREVENTION
- MFA, breached-password blocking, and rate limiting.
09Social engineering+
Trust, fear, or authority is exploited to bypass a process.
- SIGNS
- Pressure to act quickly, bypass a rule, or keep a secret.
- PREVENTION
- Verification procedures and a culture where slowing down is acceptable.
10Insider threat+
An employee, supplier, or internal account causes harm intentionally or accidentally.
- SIGNS
- Excess access, bulk downloads, or unusual behaviour.
- PREVENTION
- Least privilege, logging, separation of duties, and rapid revocation.
EDUCATIONAL ATTACK SIMULATOR
See where defence in depth interrupts an attack.
Choose a scenario, then select each step. This simulation contains no malicious code and reproduces no actionable exploit technique.01Phishing email
A message impersonates a supplier and creates false urgency.
DEFENCE IN DEPTH
No single control is enough.
Layers complement one another: some prevent, others detect, limit spread, or enable recovery.Users
Awareness and procedures
Identity
MFA • SSO • Conditional Access
Endpoints
EDR • Patching • Encryption
Network
Firewall • Segmentation • VPN
Email and apps
Filtering • Permissions • SaaS
Detection
Logs • Monitoring • Response
Recovery
Immutable backup • Restore tests
Essential security practices
- Enable MFA, prioritizing administrative and remote accounts.
- Update systems on a defined, measured cadence.
- Verify financial or sensitive requests through another channel.
- Use a password manager and avoid password reuse.
- Apply least privilege and review access regularly.
- Encrypt portable devices and support remote wipe.
- Test restores, not only whether backup jobs ran.
- Centralize useful logs and investigate unusual behaviour.
SECURITY IN EVERYDAY LIFE
Cybersecurity does not stop at the office door.
Phones, home networks, and connected devices are part of our digital identity. Strong personal habits also protect business accounts and data.Phones and tablets
WHY IT MATTERS
They often contain email, MFA, documents, and active sessions.
HABITS TO BUILD
Use biometric lock or a strong passcode, encrypt the device, install updates, limit applications, and enable location or remote wipe.
Home router and Wi-Fi
WHY IT MATTERS
An old or poorly configured router can expose every device in the home.
HABITS TO BUILD
Change default credentials, update firmware, use WPA2 or WPA3, disable unnecessary remote administration, and create a guest network.
Connected devices and IoT
WHY IT MATTERS
Cameras, televisions, voice assistants, and smart devices may receive few updates while collecting significant data.
HABITS TO BUILD
Choose products supported by their manufacturer, remove unused accounts, review permissions, update them, and separate these devices from work computers.
Habits across home and work
WHY IT MATTERS
Password reuse, shared devices, and transfers to personal email blur trust boundaries.
HABITS TO BUILD
Separate accounts, use a password manager, avoid shared devices for work, and quickly report loss or unusual activity.
SIGNS NOT TO IGNORE
An unusual signal deserves prompt verification.
Unusually slow computer
Unknown software or extension
Unexpected account lockout
Unsolicited MFA prompts
Emails sent without your knowledge
Missing or renamed files
Browser redirects
Sign-in from an unknown location
A sign does not automatically confirm an attack. Preserve the facts, avoid deleting evidence, and promptly contact the person responsible for security or IT support.
SECURITY ASSESSMENT
Assess controls, configuration, and how they actually operate.
A useful assessment connects technical observations to business risk. It produces priorities, owners, and a roadmap, not merely a list of problems.Microsoft 365
Identity and MFA
Firewall and VPN
Endpoints and patching
Active Directory
Backup and recovery
Wi-Fi
Email security
Permissions and access
Documentation
ESSENTIAL GLOSSARY
Technical terms, explained plainly.
- Antivirus
- Software that primarily identifies and blocks known malicious files or programs.
- Botnet
- A network of compromised devices remotely controlled to send spam, launch attacks, or relay traffic.
- EDR
- Endpoint Detection and Response. Technology that observes endpoint behaviour to detect, investigate, and contain suspicious activity.
- Phishing
- A fraudulent message designed to trigger a click, payment, or disclosure of information.
- IoT
- Internet of Things. Connected devices such as cameras, sensors, televisions, or smart assistants.
- Malware
- Software designed to disrupt, spy, steal data, or provide unauthorized access.
- MFA
- Multi-Factor Authentication. Identity verification using at least two distinct factors.
- Least privilege
- The principle of granting only the access needed, for only as long as needed.
- Firewall
- A control that allows or blocks network communications according to defined rules.
- Ransomware
- Malicious software or criminal activity that encrypts or steals data to demand payment.
- SIEM
- Security Information and Event Management. A platform that centralizes and correlates logs to support detection and investigation.
- SOC
- Security Operations Center. A function of people, processes, and tools responsible for monitoring and responding to security events.
- SSO
- Single Sign-On. A method of accessing multiple services through one centralized identity.
- VPN
- Virtual Private Network. An encrypted channel connecting a device to a remote network or service.
- WPA3
- Wi-Fi Protected Access 3. A modern standard that protects wireless network communications.
- Zero Trust
- An approach that explicitly verifies identity, device, and context rather than trusting network location.
- Privilege escalation
- Obtaining a higher level of access than originally authorized.
- Zero-day
- A vulnerability unknown to the vendor or without an available fix when it is exploited.
FAQ
Common cybersecurity questions.
What is the difference between antivirus and EDR?+
Traditional antivirus mainly looks for known threats. EDR also observes behaviour, retains investigation context, and can help isolate an endpoint. The terms overlap today depending on the product.
Why are backups not enough?+
A backup does not prevent data theft, identity abuse, or disruption. It must be protected, isolated, and tested within a broader recovery plan.
What does a firewall actually do?+
It applies rules to network communications. It reduces exposure, but cannot alone fix a stolen password, compromised device, or poor cloud permission.
Can MFA be bypassed?+
Yes. Some methods can trick a user or steal a session. MFA remains essential, but phishing-resistant methods and contextual controls provide stronger protection.
START WITH REAL RISK