Cybersecurity terms.
Without the jargon.

A separate, recoverable copy of important information.

Why it matters: A backup is useful only when it is protected, monitored and tested to make sure it can be restored.

A scam that uses a real or convincing business email account to redirect payments or request sensitive information.

Why it matters: Always confirm unexpected payment or bank-detail changes through a trusted second channel.

Automated attempts to sign in using usernames and passwords stolen from other websites.

Why it matters: Unique passwords stop one breached service from becoming the key to several accounts.

A way of scrambling information so it can only be read with the correct key.

Why it matters: It protects information on devices, in transit and in properly configured backups.

A device that connects to business systems, such as a laptop, desktop, phone or server.

Why it matters: Every endpoint can become an entry point, so it needs updates, protection and sensible access controls.

A security control that decides which network traffic is allowed in or out.

Why it matters: Think of it as a gatekeeper—not a complete security solution on its own.

A broad name for unwanted software designed to damage, disrupt, spy on or gain access to a device.

Why it matters: It can arrive through unsafe downloads, compromised websites, email attachments or stolen accounts.

An extra sign-in check in addition to a password, such as an app prompt or security key.

Why it matters: A stolen password is far less useful when the attacker cannot complete the second check.

An application that creates and safely stores strong, unique passwords.

Why it matters: You remember one strong master password instead of reusing weaker passwords everywhere.

An update that fixes a security weakness, software fault or compatibility issue.

Why it matters: Applying important patches promptly closes known paths attackers commonly use.

A fake message or website designed to make you reveal information, open a file or approve an action.

Why it matters: It often creates urgency or impersonates a trusted organisation, colleague or supplier.

Malicious software that locks or steals information and demands payment.

Why it matters: Paying does not guarantee recovery. Strong backups, endpoint protection and access controls reduce the impact.

Manipulating a person into bypassing normal security steps.

Why it matters: Pressure, secrecy, fear and unusual urgency are warning signs—even when the request looks legitimate.

A security approach that checks every request instead of automatically trusting someone because they are inside a network.

Why it matters: Access is limited to what each person and device genuinely needs.