A Cyber Security Glossary for Solo Entrepreneurs, Micro Businesses & SMEs

Cybercrime continues rising year on year, and smaller organisations are increasingly in the firing line. This glossary aims to demystify cybersecurity terminology using plain English, for three audiences: solo entrepreneurs (no IT department), micro businesses (2-9 staff), and SMEs (10-249 staff).

A

Access Control

Rules determining who can view or use specific data and applications. Becomes increasingly important as headcount grows.

Antivirus

Software scanning devices for known malicious programs and blocking them before damage occurs. Fundamental protection often built into operating systems.

Authentication

Process proving identity before system access is granted, typically via password, code, or biometric check. Weak authentication represents the most common breach vector for small business accounts.

B

Backup

Separate, current copy of business data stored away from primary systems for restoration after loss, corruption, or encryption attacks. Described as potentially the difference between inconvenience and business closure.

Botnet

Network of infected computers controlled remotely without owner knowledge, commonly used for spam, attacks, or cryptocurrency mining. Unusual device slowness or heat warrants investigation.

Bring Your Own Device (BYOD)

Policy permitting staff to use personal devices for work. Cost-effective but blurs security boundaries. Requires minimum protections like lock screens and encryption.

C

Cloud Security

Practices and tools protecting data and applications on cloud services rather than physical servers. While providers secure infrastructure, organisations remain responsible for access control and password strength.

Credential Stuffing

Attack using stolen username-password pairs across multiple websites, exploiting password reuse. Mitigated by unique passwords managed through password managers.

Cyber Essentials

UK government-backed certification confirming five basic controls: firewalls, secure configuration, access control, malware protection, and patch management. Increasingly required for contracts.

D

Dark Web Monitoring

Service scanning hidden internet sections where stolen data trades, alerting businesses if their information appears for sale. Early-warning system enabling rapid response.

Data Breach

Unauthorised access, theft, or exposure of protected information. Under UK GDPR, breaches involving personal data require ICO reporting within 72 hours.

DDoS (Distributed Denial-of-Service)

Attack flooding websites with junk traffic from multiple sources, overwhelming systems. Targets availability rather than data theft.

E

Email Spoofing

Forging sender addresses to appear from trusted sources. Foundation of most convincing phishing attempts.

Encryption

Scrambling data into unreadable code unlockable only with correct keys, protecting data in transit and at rest. A stolen encrypted laptop presents inconvenience; unencrypted ones risk reportable breaches.

Endpoint Protection

Security software monitoring and defending individual devices rather than entire networks. Modern successor to basic antivirus.

F

Failover

Automatic switching to backup systems when primary ones fail, maintaining business continuity. Pays dividends for transaction-dependent businesses.

Fileless Malware

Malicious software running in computer memory rather than as installed files, evading traditional antivirus detection. Represents growing threat driving adoption of behavioural endpoint protection.

Firewall

Hardware and/or software barrier monitoring and controlling network traffic. Required control under Cyber Essentials.

G

GDPR

Legal framework governing personal data collection, storage, and use in the UK. Applies to virtually every UK business holding customer or employee data. Breaches carry severe penalties regardless of organisation size.

Geofencing

Security setting restricting access based on physical location, blocking logins from unexpected countries. Eliminates substantial automated attack volume with minimal effort.

Guest Wi-Fi

Separate wireless network isolating visitors from main business network. Simple, low-cost security improvement.

H

Hacking

Gaining unauthorised system access. Most attacks on small businesses exploit simple vulnerabilities, unpatched systems or weak passwords, rather than sophisticated techniques.

Hashing

Converting data like passwords into fixed-length scrambled codes that cannot reverse to originals. Enables systems to verify passwords without storing originals.

Honeypot

Decoy system deliberately set up to attract attackers, allowing study of methods. Primarily relevant for managed security providers.

I

Identity Theft

Unauthorised use of personal or business details for fraud. Includes company identity theft defrauding suppliers or customers.

Incident Response

Planned, organised approach when breaches or attacks occur. Even a one-page plan specifying contacts and shutdown procedures dramatically improves outcomes versus improvisation.

IoT (Internet of Things) Security

Protecting internet-connected devices beyond computers and phones. Changing default passwords and updating firmware closes overlooked gaps.

J

Jailbreaking

Removing manufacturer security restrictions on phones or tablets, stripping protections. Increasingly significant as BYOD becomes standard.

Juice Jacking

Compromised USB charging ports or cables installing malware or stealing data when devices connect. Travellers should use personal chargers or charge-only adapters.

Just-in-Time (JIT) Access

Granting elevated permissions only when needed, then automatically revoking them. Shrinks windows attackers can exploit compromised accounts.

K

Keylogger

Malicious software recording keystrokes, capturing passwords and card details. Common mechanism for password theft.

Key Management

Generating, storing, rotating, and retiring encryption keys. Poor management can render strong encryption pointless.

Kill Switch

VPN feature automatically cutting internet connection if VPN drops, preventing unprotected data transmission. Essential for public Wi-Fi work.

L

Lateral Movement

Attacker progression after initial foothold, moving sideways toward valuable systems. Network segmentation and least privilege specifically counter this stage.

Least Privilege

Principle granting users minimum access required for their roles. When compromised, limits attacker movement and provides high-impact, low-cost protection.

Login Monitoring

Tracking sign-in attempts and flagging unusual patterns. Most cloud platforms include this free feature requiring only activation.

M

Malware

Catch-all term for damaging or disruptive software including viruses, ransomware, spyware, and trojans. Staff awareness of unsafe links proves as important as technical tools.

Man-in-the-Middle Attack

Attacker intercepting communication between parties, potentially altering it. Common on public unsecured Wi-Fi; VPN provides standard defence.

MFA (Multi-Factor Authentication)

Requiring two or more independent checks before access. Gold standard for protecting important accounts.

N

Network Monitoring

Ongoing traffic and activity tracking detecting unusual behaviour before full incidents. Critical since breaches often go undetected for weeks.

Network Segmentation

Splitting networks into isolated zones preventing problems from spreading. Containment strategy rather than prevention.

Non-Repudiation

Security ensuring individuals cannot deny sending messages, making transactions, or approving actions. Achieved through digital signatures or audit logs.

O

Open Port

Communication channel available for connections. Necessary for some services but represents potential entry points; closing unnecessary ports reduces exposure.

OSINT (Open Source Intelligence)

Information gathered from public sources like social media and websites. Attackers use this making phishing attempts more convincing.

Outsourced IT / Managed Service Provider (MSP)

Third-party company managing business IT and security remotely. Realistic alternative to in-house IT for most small businesses.

P

Password Manager

Software generating, storing, and auto-filling strong unique passwords. Directly addresses password reuse, the single biggest account compromise cause.

Patch Management

Regularly applying security-fixing software updates. Most breaches exploit previously-patched vulnerabilities not yet applied to targets.

Phishing

Scam emails, texts, or messages tricking recipients into clicking malicious links, downloading malware, or revealing credentials. Most common breach entry point; staff awareness remains primary defence.

Q

Quarantine

Isolation of suspicious or infected files by security software. Safety holding pen rather than final verdict.

Quishing

Phishing through malicious QR codes bypassing link-scanning tools. Harder to spot than traditional links, especially on mobile.

R

Ransomware

Malware encrypting files and systems, demanding payment for decryption keys. Among the most financially damaging small business attacks. Reliable tested backups provide best protection.

Remote Desktop Protocol (RDP) Security

Microsoft tool enabling remote computer access. Frequent attack target when exposed to internet with weak passwords; should sit behind VPN and MFA.

Risk Assessment

Structured review identifying valuable assets, threats, and impact severity. Prioritises security efforts toward genuinely important protections.

S

Social Engineering

Manipulating people rather than systems to break procedures. Phishing represents the most common form; verifying unusual requests through separate channels provides defence.

Spyware

Software installed secretly monitoring activity and sending information to attackers. Unexplained battery drain, data usage, or sluggish device performance warrant investigation.

SSL/TLS Certificate

Encrypts connections between websites and visitors, producing padlock icons and "https" addresses. Without it, entered data including payment details travels unprotected. Affects search ranking.

T

Threat Intelligence

Current information about attack methods and active scam campaigns enabling anticipatory defence. Usually delivered through managed security providers.

Trojan

Malware disguised as legitimate software. Download from official sources only; free versions of paid software represent classic delivery method.

Two-Factor Authentication (2FA)

Requiring second proof beyond passwords, usually codes sent to phones or generated by apps. Among the cheapest, highest-impact upgrades, often free.

U

Unauthorised Access

Any instance of individuals or systems gaining entry without permission. Logging access details enables detection and investigation.

URL Spoofing

Creating fake web addresses resembling genuine ones through letter swaps or hyphens. Foundation of many phishing attacks; always verify full addresses before entering login details.

USB Security

Policies controlling removable device usage, preventing both data theft and malware introduction. Disabling unused ports or restricting to approved devices represents low-cost control.

V

Vishing

Voice phishing scams impersonating banks or authorities. Legitimate organisations won't pressure immediate action or phone payments; hang up and call known numbers if doubtful.

VPN (Virtual Private Network)

Creates encrypted connections between devices and private networks, protecting data over public Wi-Fi. Hides user location and IP addresses.

Vulnerability Scanning

Automated checking for known security weaknesses. Proactive approach fixing vulnerabilities before attackers discover them.

W

Whaling

Targeted phishing at senior executives using detailed impersonation to authorise payments or share sensitive data. Tailored, well-researched approaches prove harder to spot with higher financial stakes.

Wi-Fi Security

Settings and practices protecting wireless networks including strong encryption (WPA3), non-default passwords, and separated guest networks. Non-default router passwords represent immediate priority.

Worm

Self-replicating malware spreading automatically without user interaction. Network segmentation effectively prevents spreading beyond initial points.

X

Cross-Site Scripting (XSS)

Website vulnerability allowing attackers to inject malicious code into pages viewed by others. Relevant for website operators; ask developers about input field protections.

XDR (Extended Detection and Response)

Consolidating endpoint, network, email, and cloud data into unified views spotting threats across systems. Designed to catch multi-stage attacks.

Y

Yearly Security Audit

Scheduled structural security posture reviews preventing drift. Even half-day annual reviews catch significant issues.

YubiKey (Hardware Security Key)

Physical USB device providing hardware-based authentication. Cannot be phished or remotely copied; particularly valuable for solo founders and senior users.

Z

Zero-Day Vulnerability

Software flaw discovered and exploited before fixes release. Underscores why automatic updates and prompt patch management matter significantly.

Zero Trust

Security model verifying every access request regardless of device or location. Replaces outdated "inside network = trusted" assumptions reflecting modern remote work realities.

Want to know what's already out there about your business?

One of the simplest yet most eye-opening steps a small business can take is checking whether their credentials are already circulating on the dark web. Dark web credential monitoring scans the hidden corners of the internet where stolen data is traded, and alerts you the moment your information appears.

It's an early-warning system that gives you the chance to change passwords, close accounts, and tighten security before a breach becomes a crisis. If you'd like to see what's out there, we offer a 30-day dark web monitoring trial through CyberProtect. No jargon, no pressure, just a clear picture of where you stand.