The FREE Cybersecurity Glossary by Thor Pedersen!

Substitution cipher: A cryptographic technique that replaces each element in a message with another element using a predetermined key. It is used to secure communication and protect sensitive information from interception, with examples like the Caesar cipher, Vigenère cipher, and Atbash cipher.

Succession planning: The process of identifying and developing potential future leaders to replace existing ones when they leave, retire, or can no longer serve. In the context of security, it ensures leadership continuity, critical for managing and safeguarding an organization's assets. This preparation helps prevent gaps in security operations, ensuring smooth transitions and ongoing protection of vital resources.

Supervisory Control and Data Acquisition (SCADA): A type of industrial control system that is used to monitor and control infrastructure processes. It is widely used in industries like water treatment, energy, oil and gas, and transportation to gather and analyze real-time data. Given the critical nature of these systems, SCADA security is a major concern, as vulnerabilities can lead to significant disruptions in essential services and infrastructure.

Supply Chain Management (SCM): The management of hardware, software, and services sourcing from external suppliers in IT. It involves overseeing supplier relationships, monitoring supply chain risks, ensuring security and reliability of IT components, and protecting against vulnerabilities from third-party vendors.

Supply chain risks: IT supply chain risks involve potential vulnerabilities that can arise from third-party suppliers, such as compromised components or software. These risks require thorough vetting, monitoring, and management strategies to safeguard the integrity and security of IT systems and data across the entire supply chain.

Suppression measures: Actions or techniques designed to prevent, reduce, or eliminate unwanted behavior or occurrences. In a security context, it can include methods used to counteract potential threats or to minimize the impact of a security incident. These measures could range from firewalls and antivirus software that suppress malicious activity to disaster recovery plans that suppress the impact of a major incident.