Glossary of IT Terms

A Microsoft tool that manages who can log into your network, what they can access, and what devices are connected. Think of it as a digital gatekeeper for your business systems.

Software that detects and removes malicious programs from your devices. A basic but essential layer of protection for any business.

A copy of your data stored separately so it can be restored if something goes wrong — whether that’s a cyber attack, hardware failure, or accidental deletion.

The amount of data that can be transmitted over your internet connection at one time. Low bandwidth means slow speeds, especially when multiple people are online.

A digital file that proves your website is secure and trustworthy. It enables the padlock icon in your browser’s address bar and encrypts data sent between your site and its visitors. Without one, browsers may flag your site as “not secure.”

Storing and accessing data or software over the internet rather than on a local computer or server. Examples include Microsoft 365, Google Drive, and Azure.

A UK government-backed certification scheme that helps businesses protect against common cyber threats. Holding this accreditation shows clients and partners that your security meets a recognised standard.

The practice of protecting your computers, networks, and data from digital attacks, unauthorised access, or damage.

The system that translates a website address (like www.sprintintegration.co.uk) into an IP address that computers can understand. If your DNS is misconfigured, your website or emails may stop working.

Your website address — for example, sprintintegration.co.uk. A domain is registered and renewed annually.

A type of cyber attack where a website or network is flooded with traffic to make it crash or become unavailable.

The process of converting data into a code so that only authorised people can read it. Used to protect sensitive information during storage and transmission.

Any device connected to your network — laptops, desktops, smartphones, tablets. Each endpoint is a potential entry point for attackers.

A security system that monitors and controls incoming and outgoing network traffic. It acts as a barrier between your internal network and the outside world.

A UK and EU law that governs how businesses collect, store, and use personal data. Non-compliance can result in significant fines.

A support service that assists users with IT issues — whether by phone, email, or remote access. A good helpdesk resolves problems quickly and keeps your business running.

HTTP is the protocol used to transfer data between a browser and a website. HTTPS is the secure version — the S stands for secure. Any website handling sensitive data should use HTTPS.

A unique numerical label assigned to every device on a network. It allows devices to communicate with each other and is used to identify where internet traffic is coming from.

An email security process that identifies and blocks spam, phishing emails and unwanted messages.

A type of malicious software or hardware that records keystrokes, potentially exposing passwords, login details and sensitive business information.

A cybersecurity principle that gives users only the access and permissions they need to perform their jobs, helping reduce security risks and unauthorised access.

A network that connects computers, printers and other devices within a limited area, such as an office or building, allowing them to communicate and share resources.

A security method that requires more than one way to verify your identity before granting access — for example, a password plus a code sent to your phone. It significantly reduces the risk of unauthorised access.

An outsourced service where an IT provider takes responsibility for managing and maintaining your technology on an ongoing basis, rather than only helping when something breaks.

An advanced cybersecurity service that monitors your systems 24/7 for threats and responds to them in real time. Goes beyond standard antivirus protection.

The continuous monitoring of business networks to identify connectivity issues, performance problems and potential security threats before they cause major disruptions.

The technologies and practices used to protect business networks, systems and data from cyberattacks, unauthorised access and security threats.

A cloud-based productivity and collaboration platform offering tools such as Outlook, Teams, Word and Excel, along with business email, cloud storage and security features, depending on the subscription.

The main software that manages a computer’s hardware, applications and system resources, such as Windows or macOS.

A modern, more secure alternative to passwords. A passkey uses cryptographic technology stored on your device to verify your identity without typing a password. Microsoft is moving to passkeys as a default.

An update to software or an operating system that fixes bugs or security vulnerabilities. Keeping systems patched is one of the most important steps in cybersecurity.

A type of cyber attack where criminals send fraudulent emails or messages pretending to be a trusted source, in order to steal credentials or install malware.

A cybersecurity process that isolates suspicious files, emails or devices to prevent potential threats from spreading or causing harm to business systems.

Malicious software that locks or encrypts your files and demands payment to restore access. One of the most damaging types of cyber attack for businesses.

A tool that allows someone to access and control a computer from a different location. Used by IT support teams to fix issues without visiting on site.

Software delivered over the internet on a subscription basis rather than installed locally. Microsoft 365 and Salesforce are common examples.

A powerful computer that stores data, runs applications, and provides services to other computers on a network.

A team or service that monitors an organisation’s IT systems around the clock for signs of security threats or breaches.

Email authentication methods that help prove your emails are genuinely coming from you.

• SPF (Sender Policy Framework) tells email servers which servers are allowed to send emails on behalf of your domain.
• DKIM (DomainKeys Identified Mail) adds a digital signature to your emails so recipients can verify they haven’t been tampered with. Without these, your emails are more likely to end up in spam — or be spoofed by attackers.

A formal agreement between a service provider and a client that outlines expected response times, uptime guarantees, and service standards.

See MFA. A security step that requires a second form of verification in addition to your password.

A battery backup device that keeps computers and servers running during a power cut, allowing for a safe shutdown and preventing data loss.

Phone calls made over the internet rather than traditional phone lines. Cost-effective and flexible for modern businesses.

A secure, encrypted connection over the internet. Commonly used to allow remote workers to safely access company systems as if they were in the office.

Wireless internet connectivity. For businesses, securing your Wi-Fi with strong passwords and the right settings is an important security step.

A cybersecurity solution that collects and analyses data from multiple security systems to detect, investigate and respond to potential cyber threats.

A physical security key used for secure authentication, helping protect business accounts from unauthorised access and phishing attacks.

A software or hardware security weakness that is discovered before a security patch or fix is available, potentially allowing attackers to exploit it.

A cybersecurity approach that requires users and devices to be verified and authorised before accessing business systems and resources, regardless of their location.