Excelsior Life

Disaster recovery is part of business continuity, and is concerned with getting essential services for the organization up and running as fast as possible after a disaster. Business continuity is concerned with the long-term health and growth of the company. James Antonakos of the National Cybersecurity Institute explains.

Passwords are the single most common thing we use to authenticate ourselves to a computer system. But it is surprising how little care people use in choosing and managing their passwords. James Antonakos of the National Cybersecurity Institute explains.

A zero-day attack is a malware attack that is so new it is not recognized by signature-based anti-virus software, and is therefore able to infect a system without detection. James Antonakos of the National Cybersecurity Institute explains.

Computer forensics is a set of processes used to acquire and analyze digital evidence. This is useful in determining how malware entered a system and also for proving or disproving that information of a certain form exists or does not exist on a system. James Antonakos of the National Cybersecurity Institute explains.

A risk assessment is used to identify assets within an organization, determine the threats to those assets, evaluate the probabilities of the asset being compromised, the impact to the organization, and a plan to mitigate or eliminate the risks. James Antonakos of the National Cybersecurity Institute explains.

Encryption is a process where we take information that is readable and make it unreadable. Symmetric encryption uses one key to encrypt and decrypt. Asymmetric encryption uses two keys: one key to encrypt and a second key to decrypt. James Antonakos of the National Cybersecurity Institute explains.

James Antonakos of the National Cybersecurity Institute explains the importance of performing backups on a regular basis, testing the backups to make sure they work, and with storing the backups off site so they are not destroyed during a disaster.

James Antonakos of the National Cybersecurity Institute explains social engineering. This technique is essentially clever lying or deception, where one human tricks another human to obtain information or access to a restricted area.

Security must be built in layers, with each layer providing a different measure of security, such as hardware, software, and even human behavior. James Antonakos of the National Cybersecurity Institute explains.

Authentication is how a human proves who he or she is to a computer, using one or more of the following: something you know, something you have, or something you are. James Antonakos of the National Cybersecurity Institute explains.