Cybersecurity Glossary

A cybersecurity technology that continuously monitors and responds to mitigate cyber threats.

Any software that is intentionally designed to cause damage to a computer, server, client, or computer network.

A set of policies, controls, procedures, and technologies that work together to protect cloud-based systems, data, and infrastructure.

Extortion Trojans, known as ransomware, are a type of malware that aims to block access to a user's data or system. This is usually done by Encrypting the Files.

Security reports for the telematics infrastructure ensure the protection of sensitive health data from cyber threats.

The ePA stores health data digitally and enables networked care through simple management of findings and diagnoses.

The identity provider (IDP service) verifies user identities and provides secure authentication for access to the telematics infrastructure and health data.

Unauthorized copying, transmitting, or retrieving data from a computer or server.

Securing devices that are connected to the Internet and the networks to which they are connected.

A network security device that monitors and filters incoming and outgoing network traffic based on an organization's pre-established security policies.

The art of manipulating people into revealing confidential information.

The process of turning data or information into code to prevent unauthorized access.

A set of instructions to help IT personnel identify, respond to, and recover from network security incidents

Training for employees to make them aware of cybersecurity threats and mitigate them through best practices.

Red Teaming is a security testing process in which a team carries out simulated attacks to uncover vulnerabilities in the IT infrastructure.

The telematics infrastructure connects all players in the healthcare sector and ensures secure data exchange for eGK and ePA.

Insurance policies that mitigate risk by offsetting the costs of recovering from a security breach in cyberspace

The process of managing patches or updates for software applications and technologies.

Malware that encrypts a victim's files and demands a ransom for the decryption key.

A lengthy and targeted cyber attack in which an intruder gains access to a network and remains undetected over an extended period of time.

The gematik product report tests and certifies digital health products in terms of IT security and quality.

The eGK securely stores insurance master data and provides access to health services in the telematics infrastructure.

VSDM updates and manages insurance master data on the eGK for the telematics infrastructure in healthcare.

The Hardware Security Module (HSM) securely stores cryptographic keys and enables authentication and encryption in the telematics infrastructure.

A service that allows you to connect securely to the Internet by routing your connection through a server and hiding your online actions.

A method for testing the effectiveness of security measures by simulating cyber attacks.

Simulated cyber attacks on your computer system to search for exploitable vulnerabilities.

Prioritize the resolution of software vulnerabilities based on the risk they pose.

A method that attempts to collect personal information via fraudulent emails and websites.

Make sure that a person is who they say they are.

A cyber attack that takes place on the same day that a vulnerability in the software is discovered.

A set of practices and technologies that ensure the security and privacy of SaaS applications.

The process of identifying, analyzing, and evaluating risks.

Manage and secure all the various points where an attacker could attempt to break into a system or network.

A security system that requires more than one authentication method from independent categories of credentials to verify the user's identity.