Related topicPassword Security
Password security combines user-friendly length, protection against reuse and compromise, secure storage, rate limiting, recovery controls, and stronger authentication where needed.
Open article →Related topicMultifactor Authentication
Multifactor authentication strengthens sign-in by requiring independent evidence from different factor categories rather than relying on one credential alone.
Open article →Direct book connectionPhishing
Phishing uses deceptive messages, sites, calls, or prompts to persuade a person to reveal information, approve access, send money, or run malicious content.
Open article →Direct book connectionSocial Engineering
Social engineering manipulates trust, urgency, authority, fear, helpfulness, or curiosity to influence a person into taking an unsafe action.
Open article →Related topicEmail Security Controls
Email security controls combine authentication, filtering, attachment and link analysis, impersonation protection, account security, user reporting, and response workflows.
Open article →Related topicPrivacy and Security
Privacy governs appropriate processing of personal information and effects on people, while security protects information and systems from unauthorized access, change, disclosure, loss, and disruption.
Open article →Direct book connectionPatch Management
Patch management identifies, evaluates, tests, deploys, and verifies updates that correct vulnerabilities, defects, and unsupported components.
Open article →Related topicSecure Web Browsing Controls
Secure web browsing controls reduce exposure from malicious sites, downloads, scripts, browser extensions, sessions, and unsafe content execution.
Open article →Direct book connectionNetwork Segmentation
Network segmentation separates systems and traffic into controlled zones so access can be constrained, monitored, and aligned with risk.
Open article →Direct book connectionFIDO2 and WebAuthn
FIDO2 combines public-key authentication protocols with WebAuthn so users can sign in using phishing-resistant credentials bound to legitimate services.
Open article →Direct book connectionData Subject Rights
Data subject rights are mechanisms through which individuals may request access, correction, deletion, restriction, portability, objection, or other actions under applicable rules and promises.
Open article →Direct book connectionRansomware
Ransomware operations disrupt access to systems or data and may combine encryption with theft, extortion, public pressure, and attacks on recovery systems.
Open article →