What Is Cybersecurity? A Beginner's Guide
The short definition
Cybersecurity means protecting computers, networks, applications and the data they hold from attacks, accidents and misuse. It combines technology (such as encryption and firewalls), processes (such as patching and incident response) and people (training and good habits).
The CIA triad
Most security goals map to three properties:
| Property | Meaning | Example failure |
|---|---|---|
| Confidentiality | Only authorised people can read the data | A customer database is exposed on the internet |
| Integrity | Data is accurate and unaltered | An attacker changes a bank balance |
| Availability | Systems and data are usable when needed | Ransomware locks a hospital's records |
Common threats
- Phishing and social engineering — tricking people into revealing credentials or running malware.
- Malware and ransomware — malicious software that steals, spies or encrypts data.
- Vulnerability exploitation — abusing software flaws, tracked as CVEs.
- Weak or stolen credentials — see password security and MFA.
- Misconfiguration — for example a cloud storage bucket left public.
How defenders think
The NIST Cybersecurity Framework 2.0 organises security work into six functions: Govern, Identify, Protect, Detect, Respond and Recover. Good programs know what they own, protect it, notice problems quickly and recover well.
Areas you can specialise in
Network security, web application security, digital forensics, incident response, threat intelligence, cloud security and secure software development are all separate career tracks. Many people start with Linux and networking basics.
Where to start
- Learn how computers and networks work.
- Build a safe home lab.
- Practise legally: try our Practice Range and always stay within authorised scope.
Use techniques only on systems you are authorised to test.