Cybersecurity is the set of technologies, processes and practices designed to protect networks, devices, programs and data against attacks, damage or unauthorized access.
Cybersecurity encompasses the protection of computer systems, networks and data against digital threats. Unlike information security (which includes information in any format), cybersecurity focuses on the digital environment. Frameworks such as NIST CSF, ISO 27001 and CIS Controls provide auditable structures for managing cyber risk.
Information security protects information in any format (digital, paper, verbal). Cybersecurity is a subset focused exclusively on protecting the digital environment against cyber threats.
ISO 27001 is the main certifiable standard. ISO 27002 provides implementation controls. They complement frameworks like NIST CSF. For continuity, ISO 22301 covers resilience against disruptive incidents.
Need an assessment in this area?