Skip to content

01. Cybersecurity Basics

What is Cybersecurity?

Cybersecurity refers to the practice of protecting systems, networks, and data from digital attacks, unauthorized access, and damage.

Explanation

Cybersecurity ensures that sensitive information is protected from threats such as hackers, malware, and insider misuse. It involves technologies, processes, and policies designed to secure digital assets.

Example

  • A company uses a firewall and antivirus software to protect its internal network.

  • A banking app uses encryption to secure customer transactions.

What Are We Securing?

Cybersecurity focuses on protecting:

  • Personally Identifiable Information (PII)

  • Healthcare Information

  • Financial Data

  • Intellectual Property

  • Business Secrets

  • Business Operations

Explanation

Organizations hold valuable data that attackers want to steal or manipulate. Protecting this data is the main goal of cybersecurity.

Example

  • Protecting Aadhaar details (PII) from data breaches

  • Securing medical records in hospitals

  • Preventing theft of company trade secrets

Securing From Whom?

  • Criminals

  • Competitors

  • Insider Threats

  • Malicious Actors

Explanation

Threats can come from both outside and inside the organization. Insider threats are especially dangerous because they already have access.

Example

  • A hacker stealing credit card data (external threat)

  • An employee leaking confidential company files (internal threat)

Where Do We Begin?

Explanation

Cybersecurity starts with understanding:

  • What assets you have

  • What threats exist

  • What vulnerabilities are present

This process is called risk assessment.

Example

  • Identifying that a server is outdated and vulnerable

  • Recognizing that weak passwords can be exploited

CIA Triad

The CIA Triad is the foundation of cybersecurity:

  • Confidentiality

  • Integrity

  • Availability

Confidentiality

Explanation

Ensures that sensitive data is only accessible to authorized users.

Techniques

  • Encryption

  • Access control

  • Authentication

Example

  • Password-protected files

  • Encrypted WhatsApp messages

Integrity

Explanation

Ensures that data is accurate and not altered without authorization.

Techniques

  • Hashing

  • Digital signatures

  • File integrity monitoring

Example

  • Detecting if a file has been modified using SHA256 hash

  • Banking systems ensuring transaction data is not tampered

Availability

Explanation

Ensures systems and data are available when needed.

Techniques

  • Backups

  • Redundancy

  • Load balancing

Example

  • A website staying online even during high traffic

  • Backup servers during system failure

Balance of CIA

Explanation

All three components must be balanced. Over-prioritizing one can weaken the others.

Example

  • Too much security (confidentiality) may reduce usability (availability)

  • Too much accessibility may reduce confidentiality

Defense in Depth

Explanation

Defense in Depth means applying multiple layers of security controls so that if one fails, others still protect the system.

Layers include

  • Physical security

  • Network security

  • Application security

  • Endpoint security

Example

  • Firewall + IDS + Antivirus + MFA

  • Even if a password is stolen, MFA prevents access

Business Needs

Explanation

Security should align with business goals. Over-securing can reduce productivity, while under-securing increases risk.

Example

  • A startup may prioritize availability over strict security

  • A bank prioritizes confidentiality and integrity

Risk Management

Explanation

Risk management involves identifying, analyzing, and reducing risks to an acceptable level.

Key Steps

  1. Identify risks

  2. Analyze impact

  3. Mitigate risks

  4. Monitor continuously

Example

  • Risk: Weak passwords

  • Impact: Account compromise

  • Mitigation: Enforce strong password policies

Summary

Cybersecurity fundamentals revolve around:

  • Protecting critical data

  • Understanding threats

  • Applying CIA Triad principles

  • Using layered security (Defense in Depth)

  • Aligning with business needs

  • Managing risks effectively

Practical Scenario Example

Scenario

A company stores customer data online.

Security Implementation

  • Confidentiality: Encrypt database

  • Integrity: Use hashing for records

  • Availability: Use backup servers

  • Defense in Depth: Firewall + IDS + MFA

  • Risk Management: Regular vulnerability scans