Glossary

24 / 24

confidentiality

Keeping information private, so only the people who are allowed to see it can.

example: Locking payroll files so only the human resources team can open them.

integrity

Making sure information stays accurate and is not changed without permission.

example: A downloaded file arrives exactly as it was sent, with nothing altered.

availability

Making sure systems and information are there when people need them.

example: Keeping backups so a system can come back quickly after a problem.

threat

Anything that could take advantage of a weakness and cause harm.

example: A wave of scam emails aimed at staff.

vulnerability

A weakness that an attacker could take advantage of.

example: Software that has not been updated to fix a known bug.

risk

The chance of loss, judged by how likely it is and how bad the impact would be.

example: A likely scam email that could reach important data.

authentication

Proving who you are, for example with a password or a code.

example: Signing in with your password and the extra login step.

authorization

Deciding what you are allowed to do once you are signed in.

example: Being allowed to open the finance folder, but not other teams' folders.

SSOsingle sign-on

One login that lets you into many apps at once.

example: One company login that opens your email, chat, and files.

ransomware

Harmful software that locks your files and demands payment to unlock them.

example: Your files suddenly cannot be opened and a payment demand appears.

encryption

Scrambling data with a key so only people who have the key can read it.

example: The padlock in your browser protects data while it travels to a website.

hashingthe data fingerprint

Turning data into a short fixed 'fingerprint' that shows if it changed, but cannot be turned back.

example: Two files with the same fingerprint are identical; a different one means it changed.

AIartificial intelligence

Software that does tasks we link to human thinking, by learning from data.

example: Recognising faces in photos, or writing text from a request.

LLMlarge language model (the tech behind ChatGPT)

AI trained on huge amounts of text to write and answer in words. It powers tools like ChatGPT.

example: A chat assistant that answers your questions in plain language.

hallucination

When an AI gives an answer that sounds right but is actually wrong or made up.

example: An AI inventing a source or a quote that does not exist.

MFAmulti-factor authentication

The extra login step beyond your password: a one-time code or an 'approve' tap that proves it's really you.

example: After your password, you approve the login on your phone.

phishing

Fake messages that try to trick you into clicking a link, opening a file, or sharing information.

example: An email that asks you to 'reset your password' through a fake link.

vishing

A scam phone call that tricks you into sharing information or codes.

example: A caller pretends to be IT support and asks for your login code.

smishing

A scam text message, usually with a link, that tricks you into acting.

example: A text about a 'delivery problem' with a short link to tap.

BECbusiness email compromise

A fake business email, often about payments, that tricks you into sending money or data.

example: An email 'from a supplier' asking you to change their bank details.

tailgating

Following someone through a secure door without a badge or permission.

example: A person with no badge slips in behind you, saying they forgot theirs.

deepfake

A fake video or voice made by AI to copy a real person.

example: A cloned voice of your manager asking for an urgent transfer.

prompt injection

Hidden instructions in text that try to hijack an AI assistant.

example: A document that tells the AI to ignore the rules and reveal secrets.

shadow AI

Using AI tools that your workplace has not approved, which can leak data.

example: Pasting internal company data into a personal AI account.