GCI Methodology - Cybersecurity
Classification Guide for Sectors, Categories, Subcategories, Types, Subtypes, and Applications
- GCI Sectors
- Artificial Intelligence (AI) and Quantum Computing
- Biotechnology and Biomanufacturing
- Critical Minerals and Advanced Materials
- Cybersecurity, Space, and Defense Technology
- Energy Security
- Food Security and Agricultural Technology
- Manufacturing Advancements and Supply Chain Resilience
- Semiconductors and Microelectronics
- GCI Sectors
- Artificial Intelligence (AI) and Quantum Computing
- Biotechnology and Biomanufacturing
- Critical Minerals and Advanced Materials
- Cybersecurity, Space, and Defense Technology
- Energy Security
- Food Security and Agricultural Technology
- Manufacturing Advancements and Supply Chain Resilience
- Semiconductors and Microelectronics
7. CATEGORY: CYBERSECURITY
Cybersecurity involves the protection of systems, networks, devices, and data from cyber threats, including unauthorized access, attacks, or damage. As digital transformation continues, cybersecurity is becoming increasingly vital across all sectors.
7.9. Subcategory: Application Security
- 7.9.2. Type: DevSecOps: Tools for integrating security practices into the software development lifecycle, ensuring that security is considered at every stage
- 7.9.3. Type: Secure Software Development Lifecycle (SDLC): Tools for ensuring security practices are embedded throughout the design, development, and deployment of software applications
- 7.9.1. Type: Static and Dynamic Application Security Testing (SAST/DAST): Tools for analyzing applications for vulnerabilities, both during development (static) and in runtime (dynamic)
7.5. Subcategory: Cloud Security
- 7.5.1. Type: Cloud Access Security Brokers (CASBs): Solutions that help enforce security policies for cloud services, protecting against data breaches and misuse
- 7.5.2. Type: Cloud Infrastructure Security: Tools such as AWS, Microsoft Azure, and Google Cloud, which are used to secure cloud platforms; protecting them from internal and external threats
- 7.5.3. Type: Identity and Access in the Cloud: Tools which manage access to cloud resources through authentication, identity verification, and authorization
7.6. Subcategory: Cyber Threat Intelligence (CTI)
- 7.6.3. Type: Malware Analysis: Tools which enable investigating malware to understand its functionality, origin, and potential mitigation strategies
- 7.6.1. Type: Threat Hunting: Tools which enable users to proactively search for signs of compromise within networks or endpoints to identify potential threats
- 7.6.2. Type: Threat Intelligence Platforms: Tools that gather, analyze, and disseminate information about emerging threats to help organizations prepare and respond
7.4. Subcategory: Data Protection and Encryption
- 7.4.2. Type: Data Loss Prevention (DLP): Systems designed to detect and prevent the unauthorized transmission or loss of sensitive data
- 7.4.1. Type: Encryption Technology: Methods for securing data in transit and at rest to prevent unauthorized access or breaches
- 7.4.3. Type: Secure Data Storage: Solutions for protecting data storage, ensuring data is encrypted, isolated, and backed up regularly
7.2. Subcategory: Endpoint Security
- 7.2.1. Type: Antivirus and Anti-Malware: Software designed to detect and remove malicious software from computers, mobile devices, and other endpoints
- 7.2.2. Type: Endpoint Detection and Response (EDR): Advanced systems for monitoring, detecting, and responding to threats across endpoints
- 7.2.3. Type: Mobile Device Management (MDM): Tools that manage and secure employees’ mobile devices used in business
- 7.2.4. Type: Patch Management: Technology used to update software and firmware on devices to prevent exploitation of vulnerabilities
7.8. Subcategory: Governance, Risk, and Compliance (GRC)
- 7.8.1. Type: Compliance Management: Tools which facilitate ensuring adherence to standards, regulations, and frameworks such as General Data Protection Regulation (GDPR) and Payment Card Industry Data Security Standard (PCI-DSS)
- 7.8.4. Type: Cyber Insurance: This form of insurance covers a business’ liability for a data breach involving sensitive customer information. It also assists with notifying customers about a data breach, restoring personal identities of affected customers, recovering compromised data, and repairing damaged computer systems.
- 7.8.2. Type: Risk Management: Tools which assist with Identifying and assessing potential risks to the organization and implementing mitigation strategies
- 7.8.3. Type: Security Auditing: Tools that facilitate auditing security measures, controls, and procedures to ensure that they are effective and compliant with regulations
7.3. Subcategory: Identity and Access Management (IAM)
- 7.3.1. Type: Authentication Systems: Technology for verifying user identity, such as multi-factor authentication (MFA), biometrics, and smartcards
- 7.3.4. Type: Privileged Access Management (PAM): Tools to control and monitor privileged accounts that have elevated access to critical systems
- 7.3.3. Type: Role-based Access Control (RBAC): A method of restricting system access to authorized users based on their roles within the organization
- 7.3.2. Type: Single Sign-On (SSO): Solutions that allow users to access multiple applications with one set of credentials, improving security and user experience
7.7. Subcategory: Incident Response and Recovery
- 7.7.3. Type: Disaster Recovery and Business Continuity: Ensuring that organizations can recover critical operations after an attack or disaster, often through backup solutions and resilient infrastructure
- 7.7.2. Type: Incident Response Planning Tools: Tools which facilitate developing processes and teams to handle and mitigate the impact of cyber-attacks
- 7.7.1. Type: Security Incident and Event Management (SIEM): Platforms that aggregate, analyze, and respond to security alerts from different systems in real time
7.1. Subcategory: Network Security
- 7.1.5. Type: Cybersecurity for Data Centers: The practice of protecting the data and infrastructure within a data center from cyber threats such as unauthorized access, malware, and data breaches
- 7.1.1. Type: Firewalls and Intrusion Detection/Prevention Systems (IDS/IPS): Tools to monitor and block malicious traffic or unauthorized access to networks
- 7.1.3. Type: Network Monitoring and Traffic Analysis: Tools and systems for analyzing network traffic to detect anomalies or threats in real-time
- 7.1.2. Type: Virtual Private Networks (VPNs): Encrypted connections to ensure secure communication over the internet
- 7.1.4. Type: Zero Trust Architecture: Security model that assumes no one, inside or outside the organization, is trustworthy until proven otherwise