Cybersecurity
Practices for protecting systems, networks, and information from digital threats.
Cybersecurity is the practice of managing risks to devices, networks, services, and information. It includes governance and preparation as well as technical safeguards and incident response. The NIST Cybersecurity Framework 2.0 groups outcomes under Govern, Identify, Protect, Detect, Respond, and Recover; these functions are a planning structure, not a checklist that guarantees safety.
Identify the systems and information that matter, how they support people's work, and what could happen if they are unavailable, altered, or exposed. Prioritize controls according to likely threats, impact, and available resources. Include suppliers and recovery dependencies, and assign clear responsibility for decisions and reporting.
Keep software maintained, limit access to what each role needs, protect accounts with strong authentication, and test backups. Decide in advance how people can report a suspected incident and who will coordinate a response. After an incident, restore trusted services, communicate with affected people as appropriate, and use lessons learned to improve controls. Framework guidance cannot replace legal or sector-specific requirements.
Take this topic further
Turn “Cybersecurity” into a learning path
The Learning Studio will use this page’s overview and key ideas to shape a guided lesson, practice questions, and a small project around what you want to understand.
Related GiveGigs pages and features
Explore connected GiveGigs pages and tools for context and next steps.