Glossary
RTO / RPO
Two recovery objectives: how long we can hold out without the service (RTO), and how much data we can lose (RPO).
The RTO is the maximum acceptable time to bring a service back up after an outage. The RPO is the amount of data we accept losing, measured by the age of the last usable backup. Set according to the importance of each activity, they determine the resources to plan for and serve as reference points during tests.
See also
CERT / CSIRTA team specialised in preventing and handling cybersecurity incidents.Defence in depthStacking several independent protections, so that a single flaw is never enough to compromise everything.EncryptionMaking information unreadable without the right key, to protect its secrecy.Hashing (hash)Turning a piece of data into a unique, non-reversible "fingerprint", useful for checking a file or protecting a password.