Business IT terms in plain English

Forty useful definitions

MFA

Multi-factor authentication asks for an additional sign-in factor, not only a password. Read about mfa.

DMARC

An email-domain policy telling receiving systems how to handle messages that fail agreed sender checks. Read about dmarc.

SPF

A domain record identifying systems authorised to send email for that domain. Read about spf.

DKIM

A digital signature used to help a receiving system verify an email's sending domain and integrity. Read about dkim.

EDR

Endpoint detection and response: tools and processes for investigating and responding to suspicious device activity. Read about edr.

Phishing

A deceptive message intended to make someone reveal information, approve access or take an unsafe action. Read about phishing.

Ransomware

Malicious software that can encrypt information or otherwise disrupt access while demanding payment. Read about ransomware.

RTO

Recovery time objective: the target time for restoring a service after disruption, agreed during planning. Read about rto.

RPO

Recovery point objective: how much recent data a business aims to avoid losing, expressed as a time interval. Read about rpo.

Business continuity

Arrangements for keeping essential activities working during an interruption. Read about business continuity.

Disaster recovery

The technical work and arrangements used to restore systems and data after a serious interruption. Read about disaster recovery.

Data sovereignty

The relationship between where data is held and the laws or jurisdictions that can apply to it. Read about data sovereignty.

Tenant

An organisation's Microsoft 365 environment containing its users, settings and subscribed services. Read about tenant.

Patching

Installing software updates that correct faults or security weaknesses. Read about patching.

Antivirus

Software that helps detect or block malicious software and related activity. Read about antivirus.

Endpoint

A device such as a laptop or desktop that connects to business systems. Read about endpoint.

Account hardening

Reviewing and improving account settings to reduce avoidable security weaknesses. Read about account hardening.

Breach monitoring

Watching account activity for signs of unauthorised access or misuse. Read about breach monitoring.

Encryption

Converting information into a protected form that requires an authorised means to read it. Read about encryption.

Quarantine

A holding area where a filter puts messages needing a decision before normal delivery. Read about quarantine.

Mailbox rule

An instruction that automatically handles messages, such as moving or forwarding email. Read about mailbox rule.

Conditional access

Sign-in rules that take account of conditions such as the user, device or location. Read about conditional access.

Administrator

An account with permission to make important changes to a system or service. Read about administrator.

Least privilege

Giving someone only the access needed for their agreed work. Read about least privilege.

Privileged access management

Controls for granting, recording and withdrawing powerful administrator access. Read about privileged access management.

Device management

Central arrangements for applying settings, checking health and managing business equipment. Read about device management.

Selective wipe

Removing managed company information while leaving personal content alone where the platform supports it. Read about selective wipe.

Backup

A separate retained copy used to recover information after a loss or unwanted change. Read about backup.

Retention

Rules controlling how long information is kept before it can be removed. Read about retention.

Archive

Storage for older information that still needs to be retained and found. Read about archive.

Synchronisation

Keeping information aligned between locations, including propagating some changes and deletions. Read about synchronisation.

Failover

Moving operation to an alternative system when the normal one is unavailable. Read about failover.

Restore

Returning information or a system from a retained backup. Read about restore.

Offline copy

A backup copy separated from ordinary live access to reduce the risk of it being changed or attacked. Read about offline copy.

Service level agreement

The written agreement describing service scope, responsibilities and response arrangements. Read about service level agreement.

Response target

The agreed target for an initial response to an incident, not a promised fix time. Read about response target.

DNS

The naming records that help computers find services such as websites and email servers. Read about dns.

Cloud phone system

A business calling service delivered through internet-connected apps or phones. Read about cloud phone system.

Copilot

Microsoft's assistant for supported applications and permitted business information, with outputs needing human review. Read about copilot.

Incident

An event that interrupts a service or may affect the security of systems or information. Read about incident.