Cybersecurity Glossary · Knowledge Hub

Cybersecurity 101
Explained for Regulated Businesses

Plain-language guides on the threats, regulations and AI risks Swedish organisations need to understand, from DORA and NIS2 to ransomware and shadow AI. Written by the analysts who run our SOC.

64 Guides 5 Pillars

Most Visited Guides

8 topics

AI security

What is AI Red Teaming

The practice of attacking your own AI systems to find their weaknesses before attackers do, and what it takes to do it well.

Compliance & frameworks

What is NIS2?

A plain guide to NIS2 and Sweden's Cybersäkerhetslagen. Who it applies to, what it requires and how to prepare.

Security operations

What is a SOC (Security Operations Centre)?

The business guide to what a SOC is, how it works and how it keeps you inside NIS2 detection and reporting deadlines.

Security operations

What is Third-Party Risk Management?

Your suppliers, software and cloud services are now part of your attack surface. Here is what third-party risk management is, the cases that prove it matters and how to build a program that holds.

Compliance & frameworks

What is Operational Resilience?

A plain-language guide to operational resilience for Swedish and EU organisations, covering DORA, NIS2 and how to build it.

Human layer

What is a Phishing Test?

A phishing test, or phishing simulation, is a safe fake phishing email you send your own staff to measure and improve how they respond. Here is how it works, what to measure and how to run one without damaging trust.

Compliance & frameworks

What is GDPR?

A plain-English guide to GDPR for security teams: what the law requires, how breaches are reported and penalised in Sweden and what it means for AI and data transfers.

Compliance & frameworks

What is TLPT (Threat-Led Penetration Testing)

A plain-language guide to threat-led penetration testing under DORA, the advanced red team test for financial entities. What it is, who must run it and how to prepare.

AI security

16 topics

AI security

Agentic AI Security Risk

Autonomous AI agents capable of executing multi-step workflows introduce profound security risks. Without strict guardrails, compromised or poorly designed agents can inadvertently escalate privileges, modify systems, leak sensitive data across connected APIs, or be manipulated into executing malicious actions on…

AI security

AI Anomaly Detection

AI anomaly detection utilizes machine learning algorithms to establish behavioral baselines across networks and user activities. By continuously monitoring data streams in real-time, it instantly identifies microscopic deviations—such as unusual login patterns or abnormal data transfers—signaling potential zero-day threats, insider…

AI security

AI in Cybersecurity

Artificial intelligence revolutionizes cybersecurity by automating threat detection, analyzing massive data volumes for anomalies, and accelerating incident response. While defenders use AI to predict and mitigate sophisticated attacks faster than humanly possible, adversaries simultaneously weaponize it to scale phishing, automate…

AI security

MCP Security

Model Context Protocol (MCP) standardization requires stringent security controls to govern how AI models securely connect to external data sources. Key MCP security challenges involve enforcing granular access controls, mitigating server-side request forgery (SSRF), authenticating contextual data streams, and preventing…

AI security

Prompt Injection Attack

Prompt injection is a critical vulnerability where attackers craft malicious inputs to manipulate a large language model’s output or behavior. By embedding hidden instructions, adversaries can override system prompts, bypass safety guardrails, exfiltrate private data, or trick the AI into…

AI security

Shadow AI

Shadow AI refers to the unsanctioned or unmonitored use of artificial intelligence tools by employees outside IT department governance. This decentralized adoption introduces severe risks, including accidental sensitive data exposure, compliance violations, intellectual property leakage, and integration vulnerabilities that bypass…

AI security

What is a Prompt Injection Attack

A plain-language guide to prompt injection, the top security risk for AI assistants, with the layered controls that keep it from turning into a breach.

AI security

What is Agentic AI Security Risk?

A plain-English guide to agentic AI security risk. What AI agents can do, how they fail or get hijacked, the real cases and the controls that keep one from becoming a liability.

AI security

What is AI Governance?

A plain-language guide to AI governance in cybersecurity, covering the risks, the EU and Swedish rules and the controls that keep AI lawful, secure and accountable.

AI security

What is AI in Cybersecurity?

How attackers and defenders actually use AI, what the named cases show and which rules apply in Sweden from August 2026.

AI security

What is AI Red Teaming

The practice of attacking your own AI systems to find their weaknesses before attackers do, and what it takes to do it well.

AI security

What is AI-Powered Social Engineering?

AI now writes flawless phishing, clones voices from seconds of audio and fakes live video calls. Here is how AI-powered social engineering works, the real cases and the one habit that stops it.

AI security

What is an AI Security Policy?

The business guide to writing an AI security policy that reduces real risk, not just satisfies an auditor.

AI security

What is MCP Security?

The business guide to Model Context Protocol risk and the controls that keep AI agents from leaking data or running code.

AI security

What is Responsible AI in Security?

The business guide to using AI safely in your security programme, and the controls, principles and laws that keep it accountable.

AI security

What is Shadow AI?

The business guide to shadow AI, the unapproved use of AI tools at work, and the controls that keep your data out of public models.

Threats & attacks

10 topics

Threats & attacks

Deepfakes

A plain-English guide to deepfakes: what they are, how criminals use them to impersonate executives and steal money, and the controls that actually stop them.

Threats & attacks

What is a Data Breach

What counts as a data breach, what one actually costs, how Sweden's two reporting clocks work and the controls that stop one.

Threats & attacks

What is a Supply Chain Attack?

How attackers reach you through the suppliers and code libraries you already trust. Real cases, the EU duties involved and the controls that limit the damage.

Threats & attacks

What is a Zero-Day Exploit?

A plain-language guide to zero-day exploits. We cover how they work, the biggest real-world cases and the controls that limit the damage.

Threats & attacks

What is AI-Powered Phishing ?

A plain guide to AI-powered phishing, the attacks it powers and the one habit that stops them.

Threats & attacks

What is an Advanced Persistent Threat (APT)?

A plain-English guide to advanced persistent threats: what they are, who runs them, the real cases and how to defend your organisation.

Threats & attacks

What is an Infostealer?

An infostealer is malware that silently harvests saved passwords, session cookies and crypto wallets, then sells the logs to criminals. Here is how it works, why it fuels ransomware and how to defend against it.

Threats & attacks

What is Business Email Compromise?

Business email compromise uses a trusted-looking email to trick staff into moving money or changing bank details. Here is how BEC works, and how to stop it.

Threats & attacks

What is Lateral Movement

The business guide to lateral movement: how attackers spread across a network after the first breach, and the controls that stop them.

Threats & attacks

What is Ransomware as a Service

The business guide to ransomware as a service, how the affiliate model works and the controls and reporting duties that limit the damage.

Compliance & frameworks

16 topics

Compliance & frameworks

Cybersäkerhetslagen

Cybersäkerhetslagen is Sweden’s national implementation of the EU’s cybersecurity directives. It establishes rigorous legal frameworks to protect critical societal infrastructure and digital services from escalating cyber threats. The legislation mandates strict risk management practices, mandatory incident reporting, and empowers supervisory…

Compliance & frameworks

DORA (Digital Operational Resilience Act)

DORA is a comprehensive EU regulation mandating that financial entities and their ICT service providers maintain robust operational resilience. It enforces strict requirements for risk management, incident reporting, resilience testing, and third-party risk monitoring to ensure the financial sector can…

Compliance & frameworks

EU AI Act and Cybersecurity

The EU AI Act categorizes artificial intelligence systems by risk, imposing stringent cybersecurity requirements on high-risk applications. It mandates robustness, accuracy, and resilience against adversarial attacks or data poisoning. Developers must implement continuous risk management and logging systems to ensure…

Compliance & frameworks

GDPR in Cybersecurity

Under the General Data Protection Regulation (GDPR), cybersecurity is a fundamental legal obligation. Organizations must implement appropriate technical and organizational measures to ensure data confidentiality, integrity, and availability. Failure to prevent data breaches or report them within 72 hours results…

Compliance & frameworks

ISO 27001 (Assuming ISO 27001)

ISO/IEC 27001 is an internationally recognized standard outlining best practices for establishing, implementing, and maintaining an Information Security Management System (ISMS). It provides a risk-based framework for managing sensitive company data, ensuring continuous security improvements, and demonstrating compliance to stakeholders…

Compliance & frameworks

NIS2 (Network and Information Security Directive 2)

NIS2 expands the EU’s cybersecurity regulations, imposing stricter security and incident reporting mandates on a broader range of critical infrastructure sectors. It introduces high financial penalties and personal accountability for top management, aiming to establish a uniformly high level of…

Compliance & frameworks

What is Cyber Risk Management?

A plain-language guide to cyber risk management, covering the main frameworks, real-world breaches and the steps that turn cyber threats into ranked, owned decisions.

Compliance & frameworks

What is Cybersäkerhetslagen?

A plain-English guide to Sweden's NIS2 law: who it applies to, what it requires and how to prepare.

Compliance & frameworks

What is GDPR?

A plain-English guide to GDPR for security teams: what the law requires, how breaches are reported and penalised in Sweden and what it means for AI and data transfers.

Compliance & frameworks

What is ISO 27001

A plain-English guide to ISO 27001, the international standard for managing information security. What it is, how certification works and how it maps to NIS2 and GDPR in Sweden.

Compliance & frameworks

What is NIS2?

A plain guide to NIS2 and Sweden's Cybersäkerhetslagen. Who it applies to, what it requires and how to prepare.

Compliance & frameworks

What is Operational Resilience?

A plain-language guide to operational resilience for Swedish and EU organisations, covering DORA, NIS2 and how to build it.

Compliance & frameworks

What is the DORA Regulation?

The EU rulebook for keeping banks, insurers and other financial firms running through any ICT failure. Here is what DORA requires, who it covers and how Sweden enforces it.

Compliance & frameworks

What is the EU AI Act?

A plain-English guide to the EU AI Act for Swedish organisations. What it bans, what counts as high-risk, the cybersecurity duties in Article 15 and how it sits on top of NIS2, GDPR and DORA.

Compliance & frameworks

What is the NIST Cybersecurity Framework?

A plain-English guide to the NIST Cybersecurity Framework and CSF 2.0. See what the six functions cover, how tiers and profiles work and where the framework lines up with NIS2 and ISO 27001.

Compliance & frameworks

What is TLPT (Threat-Led Penetration Testing)

A plain-language guide to threat-led penetration testing under DORA, the advanced red team test for financial entities. What it is, who must run it and how to prepare.

Human layer

9 topics

Human layer

What is a Human Firewall?

The business guide to the human firewall, the trained and verifying workforce that stops the social engineering your technology lets through.

Human layer

What is a Phishing Test?

A phishing test, or phishing simulation, is a safe fake phishing email you send your own staff to measure and improve how they respond. Here is how it works, what to measure and how to run one without damaging trust.

Human layer

What is AI Security Awareness Training?

The business guide to training your people for AI-driven attacks and the safe use of AI tools.

Human layer

What is Cyber Fatigue?

A plain guide to cyber fatigue. From alert-weary security teams to staff who approve every prompt, with the controls that cut the load.

Human layer

What is OSINT

How attackers profile your people from public data, and the awareness habits that shrink the target.

Human layer

What is Security Awareness Training?

The business guide to security awareness training. What it covers, what the evidence says works and the duty it now carries under Swedish law.

Human layer

What is Security Culture?

A business guide to security culture, why most breaches come down to people and how to build and measure one that lasts.

Human layer

What is Social Engineering?

The business guide to social engineering, the attacks that target your people instead of your systems, and the controls that actually stop them.

Human layer

What is Vishing?

Voice phishing turns a single trusted-sounding phone call into a breach. This is how vishing works, the real cases and the one habit that stops it.

Security operations

13 topics

Security operations

What is a SOC (Security Operations Centre)?

The business guide to what a SOC is, how it works and how it keeps you inside NIS2 detection and reporting deadlines.

Security operations

What is AI Anomaly Detection?

AI anomaly detection uses machine learning to flag activity that does not fit your normal patterns, catching threats that signature-based tools never see. Here is how it works, where it is used and where it falls short.

Security operations

What is an AI SIEM?

A plain-language guide to AI SIEM: what it is, what it actually improves in a security operations centre, where it still needs people and what it means under NIS2 and Swedish law.

Security operations

What is Attack Surface Management?

Attack surface management is how you find, monitor and shrink everything an attacker could reach. This plain-language guide covers what your attack surface is, why it keeps growing and how to reduce it.

Security operations

What is Cyber Hygiene?

The everyday habits that keep your systems and data secure, the gaps that let attackers in and a checklist your team can act on.

Security operations

What is Incident Response?

A plain-English guide to incident response: the lifecycle, the team, the Swedish reporting rules and how to build a plan before you need one.

Security operations

What is MDR (Managed Detection and Response)?

A plain-language guide to managed detection and response. What MDR is, how it differs from the EDR you may already run and what NIS2 now asks of Swedish organisations.

Security operations

What is MTTD and MTTR

A plain guide to mean time to detect (MTTD) and mean time to respond (MTTR), the two metrics that decide how fast you catch and stop an attack.

Security operations

What is Penetration Testing?

A plain-English guide to penetration testing (pentest): what it is, how it works, the main types and methods, plus what NIS2, DORA, GDPR and PCI DSS now expect.

Security operations

What is Third-Party Risk Management?

Your suppliers, software and cloud services are now part of your attack surface. Here is what third-party risk management is, the cases that prove it matters and how to build a program that holds.

Security operations

What is Threat Hunting?

The proactive search for attackers already inside your network, before any alert fires. What threat hunting is, how the process works, the main types and why it now matters under NIS2.

Security operations

What is Threat Intelligence?

A plain-language guide to threat intelligence, covering the four types, the feeds and how to turn it into action that stops real attacks.

Security operations

What is Vulnerability Management?

The business guide to vulnerability management: how to find, prioritise and fix security weaknesses before attackers exploit them.

You Understand the Risk.
Now See Where You Stand.

Book a 30-minute briefing with one of our analysts, or run the free breach check first to find out what attackers already know about your organisation.

Book a 30-Min Briefing

No sales pitch, just a straight assessment

Cybersecurity 101 Explained for Regulated Businesses

Most Visited Guides

AI security

Agentic AI Security Risk

AI Anomaly Detection

AI in Cybersecurity

MCP Security

Prompt Injection Attack

Shadow AI

What is a Prompt Injection Attack

What is Agentic AI Security Risk?

What is AI Governance?

What is AI in Cybersecurity?

What is AI Red Teaming

What is AI-Powered Social Engineering?

What is an AI Security Policy?

What is MCP Security?

What is Responsible AI in Security?

What is Shadow AI?

Threats & attacks

Deepfakes

What is a Data Breach

What is a Supply Chain Attack?

What is a Zero-Day Exploit?

What is AI-Powered Phishing ?

What is an Advanced Persistent Threat (APT)?

What is an Infostealer?

What is Business Email Compromise?

What is Lateral Movement

What is Ransomware as a Service

Compliance & frameworks

Cybersäkerhetslagen

DORA (Digital Operational Resilience Act)

EU AI Act and Cybersecurity

GDPR in Cybersecurity

ISO 27001 (Assuming ISO 27001)

NIS2 (Network and Information Security Directive 2)

What is Cyber Risk Management?

What is Cybersäkerhetslagen?

What is GDPR?

What is ISO 27001

What is NIS2?

What is Operational Resilience?

What is the DORA Regulation?

What is the EU AI Act?

What is the NIST Cybersecurity Framework?

What is TLPT (Threat-Led Penetration Testing)

Human layer

What is a Human Firewall?

What is a Phishing Test?

What is AI Security Awareness Training?

What is Cyber Fatigue?

What is OSINT

What is Security Awareness Training?

What is Security Culture?

What is Social Engineering?

What is Vishing?

Security operations

What is a SOC (Security Operations Centre)?

What is AI Anomaly Detection?

What is an AI SIEM?

What is Attack Surface Management?

What is Cyber Hygiene?

What is Incident Response?

What is MDR (Managed Detection and Response)?

What is MTTD and MTTR

What is Penetration Testing?

What is Third-Party Risk Management?

What is Threat Hunting?

What is Threat Intelligence?

What is Vulnerability Management?

You Understand the Risk. Now See Where You Stand.

Cybersecurity 101
Explained for Regulated Businesses

You Understand the Risk.
Now See Where You Stand.