Cybersecurity là gì?

Cybersecurity operates across multiple layers of an organization's technology stack. Network security protects the infrastructure that transmits data (firewalls, VPNs, intrusion detection systems). Endpoint security protects individual devices — laptops, phones, servers — from malware and unauthorized access (antivirus, EDR platforms, device management). Application security ensures that software is built and configured without exploitable vulnerabilities (code reviews, penetration testing, secure development practices, OWASP Top 10 compliance). Identity and access management (IAM) controls who can access what systems and data (multi-factor authentication, single sign-on, privileged access management). Data security governs how sensitive data is stored, transmitted, and protected (encryption at rest and in transit, data loss prevention).

Common threat vectors include phishing attacks (tricking employees into revealing credentials or installing malware), ransomware (malware that encrypts your data and demands payment for the decryption key), supply chain attacks (compromising a vendor whose software or services you use), credential stuffing (automated testing of stolen username/password pairs against your systems), and social engineering (manipulating people rather than systems). The most common entry point for successful attacks is human error — employees clicking phishing links or using weak passwords — making security awareness training a critical control alongside technical defenses.