As an individual who transacts using UPI regularly, has an email account, shops online, stores files in the cloud, and visits several websites daily, cybersecurity is constantly at work to protect your data. Cybersecurity threats exist across the digital world and target several data points. Given the variety of potential threats to data and systems, it is essential to understand the features of cybersecurity. Regardless of your role, whether IT professional, business owner, or everyday internet user, knowing the features of cybersecurity is crucial to protecting your data.
Cybersecurity is not just one application or device. It refers to the countless systems in place to reduce the amount of risk to the organization as a whole. In this article, we will go over the different features of cybersecurity, how they work together, and what they mean for those just beginning to learn about the world of cybersecurity.
What Is Cyber Security?
Cybersecurity refers to the protection of computers, networks, and data from unauthorized access or attacks. For those running an e-commerce website, for instance, cybersecurity will protect the customer data (names, phone numbers, addresses) and payment data from being accessed by those who would like to use that data for inappropriate purposes.
A good way to understand cybersecurity is through its five main components: Identify $\rightarrow$ Protect $\rightarrow$ Detect $\rightarrow$ Respond $\rightarrow$ Recover. These five components are part of the NIST Cybersecurity Framework (NIST CSF 2.0), which focuses on managing cyber risks for organizations.
What Are the Main Features of Cyber Security?
There are several features that must work in unison to provide the best possible security for information systems. These features cannot work independently of one another.
1. Confidentiality
The first of the main features of cybersecurity is confidentiality. This specifically focuses on the idea that sensitive information should only be accessible by those who are authorized to view it. For instance, if you have an online banking account, you want to ensure that your banking credentials and account information is private to you and your bank systems. To maintain confidentiality, organizations use encryption, authentication, and access control systems.
2. Integrity
Data integrity ensures that data is accurate, complete, and protected against tampering. Should an attacker change the amount of a financial transaction from ₹1,500 to ₹15,000, the data is no longer trustworthy. Organizations ensure data integrity within financial, medical, and operational databases using various security tools and techniques.
3. Availability
Availability guarantees that systems and databases are accessible to authorized users whenever they require access to the data. A system with the highest level of security is of no use to an organization if the users cannot access the data. To ensure availability, organizations must use redundant systems, backups, and recovery plans in case of system failures.
Note: Together, these three concepts form the CIA Triad, which is the foundational model for digital security systems around the world.
4. Authentication
The concept of authentication answers the question of “who are you?” When you attempt to log in to a system, the system will perform authentication to ensure that you are the legitimate owner of that account. Beyond usernames and passwords, there are other forms of authentication.
Once you have authenticated to a system to prove who you are, your authorization and access control will dictate what permissions you have on the system.
5. Authorization and Access Control
| Security Controls | Role-Based Access Control |
| Customer | Access to own account details and order history |
| Sales Employee | Access to customer orders and shipping status |
| HR Employee | Access to internal employee files |
| Administrator | Full system configuration and management rights |
Restricting administrator privileges reduces the risk of the system overall by preventing the attacker from gaining access to the entire infrastructure of the system.
6. Encryption
Encryption performs the transformation of plain text to ciphertext, which is unreadable to anyone except those who have access to the cryptographic key. Encryption is used to secure data in transit and data at rest. However, encryption alone is not sufficient to provide security for the system; it is only effective if paired with appropriate user authentication.
7. Multi-Factor Authentication (MFA)
Multi-Factor Authentication provides additional lines of defense to the login process. MFA requires users to provide two or more forms of authentication, such as a password and time-based authentication code. While MFA makes it harder for attackers to access accounts through stolen passwords, users must remain vigilant against phishing attacks that aim to extract authentication codes.
8. Firewall Protection
A firewall inspects network traffic and filters incoming and outgoing traffic based on a set of rules. Firewalls can be deployed on the individual devices in the network or in the cloud. Firewalls control network traffic and can block unauthorized connections while permitting authorized communications. However, firewalls must be paired with anti-malware software to protect the network from threats that arrive through email and while browsing the internet.
9. Antivirus and Malware Protection
Malware, or “malicious software,” refers to viruses, ransomware, trojans, spyware, and worms specifically created to damage devices. Antivirus software protects devices by continuously monitoring for these threats and automatically removing any detected malicious software before it can cause damage to the device.
10. Threat Detection and Security Monitoring
Despite the protections offered by security software, no system is 100% secure against network attacks. In response, threat detection software is vital to any organization’s cybersecurity. Threat detection software continuously monitors the network for suspicious activity or traffic that may indicate a security threat. Security Information and Event Management (SIEM) platforms allow large organizations to collect and investigate security alerts from network devices.
11. Vulnerability Management
A vulnerability is any flaw or misconfiguration in software that an attacker can exploit. Organizations can follow a vulnerability management cycle of Find $\rightarrow$ Assess $\rightarrow$ Prioritize $\rightarrow$ Fix $\rightarrow$ Verify to manage their cybersecurity risks. Critical vulnerabilities on public servers are patched before internal systems’ vulnerabilities are patched.
12. Regular Updates and Patch Management
Software developers regularly issue security patches to fix newly discovered software vulnerabilities. Leaving software unpatched exposes information systems to cyber attacks using these known exploit techniques. Individuals and organizations must establish regular update schedules for software applications and systems.
13. Backup and Disaster Recovery
Maintaining data backups is essential to business and cybersecurity. Data backups should be performed regularly and include defining the data to back up, restricting access to backed up data, storing the backed up data offsite or offline, and regularly testing the ability to restore the data in the event of a cyber attack.
14. Incident Response
Incident response describes the process and steps an organization follows when a security breach takes place. There are six phases of incident response:
- Identify: Detect and verify the security breach.
- Contain: Limit the damage the breach can do to the network.
- Investigate: Determine the cause and how the attacker gained access to the network.
- Remove: Eliminate the malicious software that caused the security breach.
- Recover: Restore the affected systems to their original state.
- Learn: Update the security controls to avoid future security breaches.
15. Security Awareness and Human Protection
As cybersecurity threats target the human mind rather than the technology in use by organizations, security awareness software is vital to training the employees to recognize the dangers of malicious emails, calls from fake customer support, malicious links, and suspicious QR codes.
16. Network Security & Segmentation
Network security ensures that data moving between devices on the network is protected using secure protocols and systems to prevent unauthorized access. Network segmentation helps to separate networks within the connected devices, restricting the movement of attackers should one device within the network be breached.
17. Endpoint Security
Endpoint security protects devices connected to the network. Endpoint detection and response (EDR) software ensures that each device is being monitored for any attempted malicious activity to maintain the security of the network, especially those remotely connected to the organization.
18. Application Security
Application security protects a company’s software. This security is built into the software throughout the development life cycle from concept to the live software in production. Steps in the life cycle include the phases of Design $\rightarrow$ Development $\rightarrow$ Testing $\rightarrow$ Deployment. Using frameworks like the OWASP Top 10 security challenges ensures that developers create software that is less vulnerable to common bugs or flaws.
19. Cloud Security
As organizations move to cloud infrastructure, cloud security works to protect the host resources, storage containers, and software platforms. Both the provider and the customer are responsible for the security of the cloud environment, and the organization has to configure the permissions for identity, data storage, and network routing.
20. Risk Assessment and Management
A critical part of overall cybersecurity management is the performance of regular risk assessments to determine which security controls will best protect the organization at the lowest cost. International standards like the ISO/IEC 27001 security standard provide organizations with the frameworks to assess and manage information security risks effectively.
How Cybersecurity Features Work Together
The security controls that organizations implement are part of an interconnected web that works together to defend the organization’s information assets. For instance, consider the numerous security controls that are in place when a customer makes an online purchase:
To ensure cybersecurity in online transactions, businesses can implement a few key control types:
- Authentication & MFA ensures that the user is who they say they are.
- Encryption ensures that the customer’s payment details are secured during the transaction.
- Access Control ensures that employees cannot have access to sensitive customer data.
- Firewalls & Monitoring will protect the business’s network from cyber threats.
- Backups & Incident Response will ensure that the company can quickly respond in the case of an outage.
By dividing these cyber security controls into the categories of Preventive, Detective, and Corrective controls, businesses can ensure that their systems are protected at every stage of a potential cyber attack.
Cybersecurity Frameworks and Legal Context in India
India uses both the CERT-In and the Digital Personal Data Protection (DPDP) Act to govern its cyber operations and compliance. All organizations must adhere to the regional and industry-specific data regulations.
Cybersecurity Features vs. Cybersecurity Tools
Cybersecurity feature describes the functionalities that should be within a system. Meanwhile, cybersecurity tools are the technology used to implement these described features.
| Security Need (Feature) | Implementation Technology (Tool) |
| Authentication & MFA | Identity Providers (e.g., Okta), Authenticator Apps |
| Network Protection | Next-Generation Firewalls (NGFW) |
| Threat Detection | Security Information and Event Management (SIEM) Platforms, Intrusion Detection Systems (IDS) |
| Endpoint Security | Endpoint Detection and Response (EDR) Software |
| Data Recovery | Automated Offsite Backup Systems |
Common Cybersecurity Mistakes to Avoid
- Reusing Passwords
- Relying Solely on Antivirus
- Delaying Software Patches
- Granting Excessive Privileges
- Neglecting Backup Restores
Simple Cybersecurity Checklist
For Individuals
- Use a password manager to ensure each account has its own unique password.
- Enable Multi-Factor Authentication on all your main accounts.
- Ensure all your devices are automatically updated.
- Backup all important files regularly.
- Verify the details of the sender prior to clicking the links or downloading any email attachments.
For Businesses
- Create access control rules based on job roles.
- Force the use of multifactor authentication for access to company software.
- Use antivirus and security logging software for the company networks.
- Create offsite data backups and perform regular data recovery drills.
- Create a data breach response plan and train employees on cybersecurity practices.
Frequently Asked Questions
What are the 3 basic principles of cybersecurity?
The three basic principles are the concept of confidentiality, integrity, and availability, otherwise known as the CIA Triad.
Is a firewall enough to secure a network?
While firewalls can provide significant protection, they are not enough on their own. They will not protect against phishing or hacker access to networks with stolen passwords. A layered security system is necessary to ensure optimum protection for a company network.
What is Zero Trust in cybersecurity?
Zero trust is a security framework that follows the primary tenet of “never trust, always verify.” This means that no user or device is trusted automatically, even if they are located within the corporate network.
Final Takeaway
Cybersecurity involves more than using antivirus software. It requires implementing various cybersecurity features and practices to protect your systems appropriately.
Protecting critical data, ensuring systems are up to date, properly managing access permissions, and having verified backups in place will go a long way toward reducing the risks associated with cyber threats.
