What does cyber security do exactly? It protects your networks, devices and data from unauthorized access and criminal use, and it does that by preventing, detecting and responding to attacks. For a small office, that covers the networks, devices and data your team uses every day.
Key takeaways
Cybersecurity prevents attacks, spots them and helps you respond when one gets through.
Before you hire someone or hand over security work, ask for the task list in writing.
CISA and the FTC both point to basic habits such as strong passwords, multi-factor authentication and updates.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) describes cybersecurity as the art of protecting networks, devices and data from unauthorized access or criminal use. NIST, the U.S. standards agency, puts it as the process of protecting information by preventing, detecting and responding to attacks.
Both definitions are short, and NIST’s adds two jobs beyond blocking attacks: detecting them and responding to them. For your own office, that turns into three questions. What are we protecting, how would we notice a problem, and what would we do next?
In short: Prevent, detect, respond. That is how NIST describes the work.
How does cyber security work? The six NIST functions
The NIST Cybersecurity Framework gives a clear answer to how cyber security works. Its core has six functions that are concurrent and continuous. NIST says any organization can use the framework to manage and reduce cybersecurity risk, and that it is not a regulator, so use is mostly voluntary. You can read the details in the NIST Cybersecurity Framework FAQs.
The six NIST functions and a question to ask about your own office
Function
A question to ask
Govern
Who is responsible for security decisions in our company?
Identify
Do we know which devices, accounts and data we have?
Protect
Which safeguards are in place today?
Detect
How would we notice that something is wrong?
Respond
Who do we call, and what is the plan, if an incident happens?
Recover
Could we get our files and systems back, and how?
What do cyber security professionals do day to day?
The U.S. Bureau of Labor Statistics (BLS) describes the daily work of information security analysts, so it is a useful place to see what the tasks look like.
What does a cyber security analyst do?
According to the U.S. Bureau of Labor Statistics, information security analysts plan and carry out security measures to protect an organization’s computer networks and systems. Their day-to-day duties include:
monitoring the organization’s networks for security breaches and investigating when one occurs;
using and maintaining software such as firewalls and data encryption programs;
preparing reports on general metrics, attempted attacks and security breaches;
developing security standards and best practices for the organization.
What about titles like engineer or specialist?
When you see a title such as cyber security engineer or specialist, in a job post or in a provider’s proposal, ask for the task list. Compare it with the analyst duties above, and ask what the person will own, what they will hand off, and how they will report to you.
Not sure who should handle security for your office?
Tell us how your team works today and we will talk through the options.
What is cyber security and why is it important for a small business?
Most small offices rely on email, shared files, a phone system and an internet connection. A useful exercise is to ask what your team could not do if one of them went offline, and who would be responsible for getting it back.
CISA and the FTC both start with basics. CISA lists four actions everyone should take: avoid and report phishing, use strong passwords, use multifactor authentication and a password manager, and update software. The Federal Trade Commission adds advice for small businesses: back up files regularly, encrypt data and require multi-factor authentication.
Use strong passwords and a password manager.
Turn on multi-factor authentication for email and key accounts.
Update software and devices when updates are available.
Think before you click suspicious links, and report phishing.
Back up files regularly.
Encrypt sensitive data.
CFL Technology Source works as an outsourced IT department for small and mid-sized businesses in Orlando and Central Florida. Firewall and antivirus can be part of the offer, along with proactive monitoring to prevent problems before they become emergencies. Not every item applies to every plan, so ask which ones yours includes. There is more on the cybersecurity page.
The purpose is to protect networks, devices and data from unauthorized access and criminal use. NIST frames it as preventing, detecting and responding to attacks, so the work covers both stopping problems and handling the ones that get through.
What does cyber security protect against?
It protects against unauthorized access and criminal use of your systems and data. CISA’s basic advice points to everyday risks such as phishing messages, weak passwords and outdated software. Those are sensible places for a small business to start.
What is the difference between cyber security and IT security?
This guide uses CISA’s definition: protecting networks, devices and data from unauthorized access or criminal use. If a provider or a job post says “IT security,” ask what it covers: which systems, which tasks and who reports to you. The scope in writing matters more than the label.
Is cyber security hard to learn?
As a career, it takes study. The BLS says information security analysts typically need a bachelor’s degree in computer and information technology or a related field, such as engineering or math. For basic habits at your own office, you do not need a degree. Passwords, updates and multi-factor authentication are a good start.
Can cyber security stop every attack?
No. NIST describes its framework as a way to manage and reduce cybersecurity risk. That is why detection, response and recovery sit alongside prevention. Be cautious of anyone who promises zero risk, and ask what the plan is if something does get through.
The Bottom Line: what cyber security does for you
It prevents, detects and responds. NIST describes cybersecurity as protecting information through all three, not only blocking threats at the door.
It is a process, not a product. The six NIST functions are concurrent and continuous, from Govern to Recover.
Ask for the task list. The BLS describes analysts as monitoring, investigating, maintaining tools and reporting. For any other title, ask what the person will actually do.
Basic habits are the place to start. CISA and the FTC point to strong passwords, multi-factor authentication, updates and backups.
It reduces risk, it does not remove it. Plan for recovery as well as prevention.
Your next step
Cyber security comes down to preventing problems, spotting them early and being ready to respond. A good first move is to write down your accounts, devices and data, then check which of the basic habits above are missing.
If you would rather have an outsourced IT department with proactive monitoring and on-site and remote support, see CFL Technology Source’s managed IT services for Orlando and Central Florida and tell us how your office works today.
Ready to talk about protecting your business?
Local support, predictable IT and fewer disruptions start with a conversation.
What Does Cyber Security Do Exactly? A Plain-English Guide
What does cyber security do exactly? It protects your networks, devices and data from unauthorized access and criminal use, and it does that by preventing, detecting and responding to attacks. For a small office, that covers the networks, devices and data your team uses every day.
Key takeaways
In this guide
What does cyber security do exactly?
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) describes cybersecurity as the art of protecting networks, devices and data from unauthorized access or criminal use. NIST, the U.S. standards agency, puts it as the process of protecting information by preventing, detecting and responding to attacks.
Both definitions are short, and NIST’s adds two jobs beyond blocking attacks: detecting them and responding to them. For your own office, that turns into three questions. What are we protecting, how would we notice a problem, and what would we do next?
In short: Prevent, detect, respond. That is how NIST describes the work.
How does cyber security work? The six NIST functions
The NIST Cybersecurity Framework gives a clear answer to how cyber security works. Its core has six functions that are concurrent and continuous. NIST says any organization can use the framework to manage and reduce cybersecurity risk, and that it is not a regulator, so use is mostly voluntary. You can read the details in the NIST Cybersecurity Framework FAQs.
What do cyber security professionals do day to day?
The U.S. Bureau of Labor Statistics (BLS) describes the daily work of information security analysts, so it is a useful place to see what the tasks look like.
What does a cyber security analyst do?
According to the U.S. Bureau of Labor Statistics, information security analysts plan and carry out security measures to protect an organization’s computer networks and systems. Their day-to-day duties include:
What about titles like engineer or specialist?
When you see a title such as cyber security engineer or specialist, in a job post or in a provider’s proposal, ask for the task list. Compare it with the analyst duties above, and ask what the person will own, what they will hand off, and how they will report to you.
Not sure who should handle security for your office?
Tell us how your team works today and we will talk through the options.
Get IT Support
What is cyber security and why is it important for a small business?
Most small offices rely on email, shared files, a phone system and an internet connection. A useful exercise is to ask what your team could not do if one of them went offline, and who would be responsible for getting it back.
CISA and the FTC both start with basics. CISA lists four actions everyone should take: avoid and report phishing, use strong passwords, use multifactor authentication and a password manager, and update software. The Federal Trade Commission adds advice for small businesses: back up files regularly, encrypt data and require multi-factor authentication.
CFL Technology Source works as an outsourced IT department for small and mid-sized businesses in Orlando and Central Florida. Firewall and antivirus can be part of the offer, along with proactive monitoring to prevent problems before they become emergencies. Not every item applies to every plan, so ask which ones yours includes. There is more on the cybersecurity page.
More explainers are in our cybersecurity articles. If you want a closer look at one common safeguard, read what a firewall is and what it does.
Frequently asked questions
What is the purpose of cyber security?
The purpose is to protect networks, devices and data from unauthorized access and criminal use. NIST frames it as preventing, detecting and responding to attacks, so the work covers both stopping problems and handling the ones that get through.
What does cyber security protect against?
It protects against unauthorized access and criminal use of your systems and data. CISA’s basic advice points to everyday risks such as phishing messages, weak passwords and outdated software. Those are sensible places for a small business to start.
What is the difference between cyber security and IT security?
This guide uses CISA’s definition: protecting networks, devices and data from unauthorized access or criminal use. If a provider or a job post says “IT security,” ask what it covers: which systems, which tasks and who reports to you. The scope in writing matters more than the label.
Is cyber security hard to learn?
As a career, it takes study. The BLS says information security analysts typically need a bachelor’s degree in computer and information technology or a related field, such as engineering or math. For basic habits at your own office, you do not need a degree. Passwords, updates and multi-factor authentication are a good start.
Can cyber security stop every attack?
No. NIST describes its framework as a way to manage and reduce cybersecurity risk. That is why detection, response and recovery sit alongside prevention. Be cautious of anyone who promises zero risk, and ask what the plan is if something does get through.
The Bottom Line: what cyber security does for you
Your next step
Cyber security comes down to preventing problems, spotting them early and being ready to respond. A good first move is to write down your accounts, devices and data, then check which of the basic habits above are missing.
If you would rather have an outsourced IT department with proactive monitoring and on-site and remote support, see CFL Technology Source’s managed IT services for Orlando and Central Florida and tell us how your office works today.
Ready to talk about protecting your business?
Local support, predictable IT and fewer disruptions start with a conversation.
Contact Us Today
Archives
Categories
Archives
Recent Post
Categories
Portfolio
Meta
Calender