What is Cyber Security?

Cyber Security is the practice of protecting computer systems, networks, programs and data from unauthorised access, modification, disruption or destruction. It combines technology, processes and people to keep an organisation safe.

The cyber-crime industry is projected to cost the world $10.5 trillion in 2026. Every connected app — banking, healthcare, IoT, AI — is now part of the attack surface.

A cyber-security programme rests on three pillars working together. Failing any one of them breaks the whole programme.

The attack surface is every place an attacker can interact with your system: ports, APIs, employee laptops, vendor accounts, social media of your CFO.

                ┌───────────────────────┐
   Internet ───►│  Public Web App        │◄─── Bug-bounty researchers
                ├───────────────────────┤
   VPN ────────►│  Internal Apps         │◄─── Insiders
                ├───────────────────────┤
   Email ──────►│  Workstations          │◄─── Phishing
                └───────────────────────┘

        OFFENSE                   DEFENSE
   ┌────────────────┐         ┌────────────────┐
   │  Attacker      │ ──────► │  Perimeter      │
   │  (human + AI)  │         │   ↓ Network     │
   └────────────────┘         │   ↓ Host (EDR)  │
                              │   ↓ App         │
                              │   ↓ Data        │
                              └────────────────┘

Defence in depth — never trust a single layer.

• Treating cyber security as a one-off project, not a continuous discipline.
• Buying tools without process or training.
• Skipping the people pillar — the weakest by far.

"Tech alone never wins. Combine prevent → detect → respond → recover."

1. Cyber security protects the C-I-A of every digital asset.
2. The attack surface grows with every new feature, vendor and user.
3. Modern defence is layered and AI-augmented.

1. Draw the attack surface of your favourite mobile app on paper.
2. List five cyber-security roles you would target as a first job.
3. Read the latest CISA Alerts page and summarise the top 3 advisories.

1. Always remember the CIA triad (Confidentiality, Integrity, Availability) as the core goal of all security efforts.
2. Cyber security is an ongoing process of adaptation and improvement, not a one-time project.
3. Embrace defense-in-depth, layering multiple security controls to create robust protection.
4. Human error is a major vulnerability; prioritize security awareness training for all users.
5. Stay current with emerging threats and technologies; the threat landscape constantly evolves.