Overview
Cybersecurity is the practice of protecting computers, networks, software, and data from harm — whether that harm comes from criminals, careless mistakes, or system failures. As more of daily life moves online (banking, healthcare, energy grids, personal messages), the consequences of that protection failing grow larger. This lesson defines what cybersecurity actually covers and why it is a discipline in its own right.
Learning objectives
- Define cybersecurity in practical terms.
- Distinguish security from related ideas like privacy and safety.
- Understand why security is a continuous process, not a product.
Core concept
At its heart, cybersecurity is about managing risk to information and the systems that store, move, and process it. A useful working definition comes from the U.S. National Institute of Standards and Technology (NIST), which describes cybersecurity as the ability to protect or defend the use of cyberspace from attacks.
Notice three things in that idea:
- It is about defense against deliberate attacks and accidental harm. A hard drive that fails and a hacker who steals data both threaten your information.
- It covers people, processes, and technology. A perfectly configured firewall does not help if an employee is tricked into handing over a password.
- It is ongoing. Threats change constantly, so security work is never "finished."
How it works
Security is usually built in layers, an approach called defense in depth. No single control is trusted to stop everything. Instead, overlapping controls — technical (firewalls, encryption), administrative (policies, training), and physical (locked server rooms) — each catch what the others miss. If one layer fails, another still stands between an attacker and the asset.
Underneath this sits the risk management cycle: identify what you have, understand what could go wrong, decide how much risk is acceptable, apply controls, and monitor the result.
Cybersecurity relevance
Every other topic in this curriculum — networking, Linux, web security, offensive testing, defense — is a specialized way of either finding weaknesses or reducing them. Keeping the core definition in mind stops you from mistaking a tool (say, a vulnerability scanner) for the goal (managing risk to real assets).
Common mistakes
- Treating security as a product you buy once. Tools help, but they must be configured, updated, and monitored.
- Confusing security with privacy. Privacy is about who is allowed to see data; security is about enforcing those rules and protecting the data itself. They overlap but are not identical.
- Assuming "we're too small to be a target." Automated attacks do not check company size before probing a system.
Key takeaways
- Cybersecurity is the ongoing practice of protecting systems and data from harm by managing risk.
- It spans people, processes, and technology — not just tools.
- Defense in depth uses layered controls so no single failure is catastrophic.
Check your understanding
- In your own words, why is "install antivirus and you're done" an incomplete view of security?
- Give one example each of a technical, an administrative, and a physical control.