Cyber security is the application of technologies, processes, and controls to protect systems, networks, programs, devices and data from cyber attacks.

It aims to reduce the risk of cyber attacks and protect against the unauthorised exploitation of systems, networks, and technologies.

Why is cyber security important?

The costs of cyber security breaches are rising.

Organisations that suffer cyber security breaches may face significant fines. There are also non-financial costs to be considered, like reputational damage.

Cyber attacks are increasingly sophisticated.

Cyber attacks continue to grow in sophistication, with attackers using an ever-expanding variety of tactics. These include social engineering, malware and ransomware.

Cyber security is a critical, board-level issue.

New regulations and reporting requirements make cyber security risk oversight a challenge. The board needs assurance from management that its cyber risk strategies will reduce the risk of attacks and limit financial and operational impacts.

Cyber crime is a big business.

According to a study by McAfee and the CSIS, based on data collected by Vanson Bourne, the world economy loses more than $1 trillion each year due to cybercrime. Political, ethical, and social incentives can also drive attackers.

Who needs cyber security?

It is a mistake to believe that you are of no interest to cyber attackers. Everyone who is connected to the Internet needs cyber security. This is because most cyber attacks are automated and aim to exploit common vulnerabilities rather than specific websites or organisations.

Security in the Digital World
This must-have guide features simple explanations, examples and advice to help you be security-aware online in the digital age.
Cyber Security: Essential principles to secure your organisation – a pocket guide
This pocket guide takes you through the fundamentals of cyber security, the principles that underpin it, vulnerabilities and threats, and how to defend your organisation againstfrom attacks.

Types of cyber threats

Malware, such as ransomware, botnet software, RATs (remote access Trojans), rootkits and bootkits, spyware, Trojans, viruses, and worms.
Backdoors, which allow remote access.
Formjacking, which inserts malicious code into online forms.
Cryptojacking, which installs illicit cryptocurrency mining software.
DDoS (distributed denial-of-service) attacks, which flood servers, systems, and networks with traffic to knock them offline.
DNS (domain name system) poisoning attacks, which compromise the DNS to redirect traffic to malicious sites.