Glossary
Short, clear explanations of terms used in our guides and news.
0–9
- 2FA (two-factor authentication)
Signing in with two independent proofs, such as a password plus a code from an app.
Why it matters A stolen password alone is then no longer enough.
Related guide: Passkeys, MFA and secure passwords
B
- Backup
A copy of data kept separately from the original.
Why it matters After ransomware or hardware failure, often the only way back.
Related guide: Preparing backups against ransomware
C
- Cloud
Storage and services provided over the internet by a provider.
Why it matters Cloud accounts need strong sign-in because they bundle a lot of data.
- CVE
Public identifier for a known security vulnerability, e.g. CVE-2026-12345.
Why it matters Helps match warnings and updates unambiguously.
- Cyber insurance
Insurance that, depending on its terms, covers costs, help and losses after cyber incidents.
Why it matters No substitute for prevention, but can soften the impact.
Related guide: A cyber incident: first steps for your business
- Cyber legal protection
Support with legal disputes related to online incidents, depending on the plan.
Why it matters For example with identity misuse or online shopping fraud.
- Cyber liability
Part of a cyber policy that can cover third-party claims after a cyber incident.
Why it matters Relevant when customer data is affected; scope depends on the terms.
E
- EDR (endpoint detection and response)
Software that monitors devices for suspicious behaviour and can respond.
Why it matters Detects attacks that traditional antivirus misses.
F
- Firewall
A filter that allows or blocks network connections based on rules.
Why it matters Basic protection built into routers and operating systems.
I
- Identity theft
Misuse of personal data to act in another person's name.
Why it matters For example for orders, contracts or fraudulent messages.
- Incident response
A structured process to contain, investigate and resolve a security incident.
Why it matters Good preparation saves time and money when it matters.
Related guide: A cyber incident: first steps for your business
M
- Malware
Umbrella term for malicious software such as viruses, trojans or spyware.
- MDR (managed detection and response)
A service provider monitors systems around the clock and responds to attacks.
Why it matters For small businesses without their own security team.
- MFA (multi-factor authentication)
Signing in with at least two proofs; 2FA is the most common case.
Related guide: Passkeys, MFA and secure passwords
P
- Passkey
Password-free sign-in using a cryptographic key pair bound to the genuine website.
Why it matters Cannot be captured by fake websites.
Related guide: Passkeys, MFA and secure passwords
- Phishing
Fake emails or websites designed to trick you into revealing credentials or making payments.
Related guide: Spotting phishing in emails, texts and QR codes
R
- Ransomware
Malware that encrypts data and demands a ransom.
Why it matters One of the costliest threats for small businesses.
Related guide: Preparing backups against ransomware
S
- Smishing
Phishing via text message or messenger, often posing as parcel or bank notices.
Related guide: Spotting phishing in emails, texts and QR codes
- Social engineering
Manipulating people, for example through time pressure or faked authority.
Why it matters The basis of CEO fraud and invoice scams.
Related guide: Preventing invoice fraud and CEO fraud
V
- VPN
An encrypted connection between a device and a network or server.
Why it matters Useful on public Wi-Fi and for remote access to a company network.