Cyberattacks do not target only personal computers and servers. Cloud services, mobile devices, network equipment, factory equipment, social infrastructure, and many other systems connected through digital technology can also become targets.

Cybersecurity is the concept of protecting the use of cyberspace from such attacks and maintaining a state in which information and systems can be used safely.

What Is Cybersecurity?

Cybersecurity can be understood as the ability to protect or defend the use of cyberspace from cyberattacks.

What is protected includes not only information itself, but also the computers that store and process it, the networks that carry communications, the applications that provide services, and the systems that control equipment.

For example, not only stealing data from outside, but also altering data, shutting down services, and impersonating legitimate users are all cybersecurity problems.

The goal of cybersecurity is therefore not simply to aim for a state in which no attack is ever received. It also includes reducing the likelihood of being attacked, detecting anomalies, limiting the spread of damage, and being prepared to restore necessary functions.

Relationship with Information Security

Information security is the concept of protecting information and information systems from unauthorized access, use, disclosure, modification, destruction, and similar actions.

Cybersecurity, by contrast, focuses on protecting computers, networks, electronic systems, data, and so on from attacks carried out through cyberspace.

The two overlap considerably. When customer information is stolen over a network, it is both an information leak and a problem caused by a cyberattack.

In this way, the two share common targets, but cybersecurity places its emphasis on protection and defense against attacks through cyberspace.

What Cybersecurity Protects

In cybersecurity, data cannot be considered in isolation. Using data requires devices, servers, software, communication paths, users, credentials, and more.

When cloud services or external providers are used, security may not be complete within the organization alone. Dependencies on external services, contractors, software, communication networks, and so on are also part of what can be attacked. Threat analyses have also pointed out that digital dependencies expand the range of what can be targeted.

In addition, in areas such as factory equipment, transportation, and energy, computer processing leads to the operation of physical equipment. Such cyber-physical systems and operational technology are also targets that cybersecurity must protect.

Confidentiality, Integrity, and Availability

Cybersecurity risk is related to the impact of losing the confidentiality, integrity, or availability of information or systems.

From the initial letters of Confidentiality, Integrity, and Availability, these three elements are called the CIA or the CIA triad.

Confidentiality

Confidentiality means maintaining a state in which only authorized people and systems can access information.

Authentication, access control, and encryption of communications and stored data are measures for protecting confidentiality.

Integrity

Integrity means keeping information and systems accurate and complete, and maintaining a state in which they have not been modified or destroyed without authorization.

Data validation and checking for alterations using hash values help ensure integrity.

Availability

Availability means maintaining a state in which authorized users can use information and systems when they need them.

System redundancy, backups, and similar measures help maintain availability.

The elements of the CIA triad are not independent of one another. If access restrictions are made too strict, even users who need the information may be unable to use it, which can impair availability. Conversely, if ease of use is given top priority, confidentiality and integrity may decline. The three elements need to be considered together according to what is being protected and how it is used.

Threats, Vulnerabilities, and Risks

In thinking about cybersecurity, it is necessary to distinguish between threats, vulnerabilities, and risks.

Table 1 Differences between threats, vulnerabilities, and risks

Term	Meaning
Threat	A circumstance or event with the potential to adversely affect information, systems, organizational operations, and so on
Vulnerability	A weakness in a system, procedure, control, or implementation that could be exploited or triggered by a threat
Risk	The extent of danger, considered in terms of the impact of an undesirable event and its likelihood of occurrence

For example, the possibility that an attacker will attempt unauthorized login is a threat; easily guessed passwords and inappropriate permission settings are vulnerabilities; and the likelihood and impact of resulting information leaks or business disruption are risks.

Even when a threat exists, not every organization faces the same risk. The risks that should be addressed first differ depending on the information held, the system configuration, the extent of external exposure, the users, the controls in place, and the impact an incident would have on operations.

Technology Alone Cannot Prevent Attacks

Cybersecurity measures use technologies such as firewalls, encryption, authentication, and backups.

However, warnings that are hard to distinguish from ordinary notifications tend to be ignored, and even when technical mechanisms are in place, they may not lead users to take appropriate action.

Research on security warnings has outlined the need to consider not only displaying warnings, but also changes in user behavior, the calibration of trust in warnings, and the adjustment of behavior according to risk. Cybersecurity is achieved through a combination of technology, people, and organizational procedures.

AI and the Expansion of Connectivity

AI is involved in both attack and defense in cybersecurity. Generative AI can be misused to create deceptive text and disguised information, while it can also be used to organize large volumes of alerts and threat information, investigate vulnerabilities, and support security operations.

In particular, LLM agents, which use large language models to operate external tools and carry out multiple steps, are being studied for applications such as threat intelligence, vulnerability assessment, penetration testing, and security operations. However, a systematic review has also shown that there is a gap between research results and the evaluation required in actual operational environments.

Furthermore, cyber-physical systems and operational technology have constraints that differ from those of conventional information systems. A systematic review has identified challenges such as the migration to cryptography designed with quantum computing in mind, the scarcity of data obtained from real equipment, and classifications that differ across systems and fields.

In this way, what cybersecurity protects has expanded beyond information and computers to include human judgment, AI processing, connections with external services, and the operation of physical equipment.

Managing Continuously

Because systems, users, external services, and attack methods change, measures that have been introduced once do not necessarily remain effective.

It is therefore necessary to understand what is being protected and its dependencies, check threats and vulnerabilities, select controls according to risk, and continuously evaluate whether they actually work. When an incident occurs, it is also important to review measures based on the results of detection, response, and recovery.

Cybersecurity is not a task that is completed by introducing a particular product. It is an ongoing activity of managing the entire system, including technology, people, organizations, and external connections, in step with change.

Summary

Cybersecurity is the concept of protecting the use of cyberspace from attacks and maintaining a state in which information and systems can be used safely.

Its basic perspective includes the CIA triad of confidentiality, integrity, and availability. It is also necessary to distinguish between threats, vulnerabilities, and risks, and to choose measures according to what is being protected and the impact on operations.

Today, cybersecurity covers not only information and networks but also human judgment, AI agents, dependence on external services, and physical equipment. Rather than relying on technology alone, it is important to continuously check the entire system and manage it in step with change.

About This Article

References

• Eleonora Chiantera, Lorenzo Arciulo, Francesco Di Nocera, “Cybersecurity Warnings as Safety-Relevant Learning Mechanisms: A Scoping Review of Behavioral Adaptation, Trust Calibration, and Risk Regulation”
• George Fatouros, Konstantinos Mavrogiorgos, Georgios Makridis, John K. Soldatos, Dimosthenis Kyriazis, “LLM-Based Agents for Cybersecurity: A Systematic Review of Architectures, Applications, and Open Challenges”
• Siler Amador, César Pardo, Raúl Mazo, “Cybersecurity of Cyber-Physical Systems in the Quantum Era: A Systematic Literature Review-Based Approach”
• Paolo Bailo, Ascanio Sirignano, Giulio Nittari, Giuseppe Visconti, Giuliano Pesel, Tommaso Spasari, Giovanna Ricci, “A Review of Crime at Machine Speed: Criminological Aspects of Artificial Intelligence’s Industrialisation of Deception”
• Ömer Aslan, Semih Serkant Aktuğ, Merve Ozkan-Okay, Abdullah Asim Yilmaz, Erdal Akin, “A Comprehensive Review of Cyber Security Vulnerabilities, Threats, Attacks, and Solutions”
• Dejan Vasović, Goran Janaćković, Žarko Vranjanac, Srećko Stamenković, Bojan Vasović, “Enhancing CIA Triad—Confidentiality, Integrity and Availability in Educational Information Systems Through Next-Generation ISO/IEC 27001:2022-Aligned Security Model”

Sources

• National Institute of Standards and Technology (NIST), “Computer Security Resource Center Glossary”
• European Union Agency for Cybersecurity (ENISA), “ENISA Threat Landscape 2026”

(Last accessed: October 17, 2026)


*This article was compiled based on the author’s understanding, with reference to the literature listed above.