Baseline: 
The minimum-security level every organisation should meet. In the UK, Cyber Essentials defines this baseline for business hygiene and compliance. 

BitLocker: 
Microsoft’s disk encryption technology, used to protect data on devices as part of secure configuration. 

Conditional Access: 
Policies that control access to systems and data based on risk factors such as user location, device posture, or role. Used to enforce security standards dynamically. 

Continuous Compliance: 
Ongoing processes and monitoring to ensure security controls, policies, and evidence remain up to date and audit-ready throughout the year. 

Defender for Business/Endpoint: 
Microsoft’s endpoint protection suite, providing behavioural monitoring, EDR/XDR (Endpoint/Extended Detection and Response), ransomware protection, and automated remediation. 

Defender for Office 365: 
Microsoft’s solution for email and link scanning, anti-phishing, and safe attachments, protecting users from common cyber threats. 

Drift Detection: 
Continuous monitoring that flags when system configurations deviate from the established security baseline or policy. 

EDR/XDR: 
Endpoint Detection and Response / Extended Detection and Response—advanced security technologies for identifying and responding to threats across devices and networks. 

Entra ID (Azure AD): 
Microsoft’s identity platform, enabling Multi-Factor Authentication (MFA), Conditional Access, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and passwordless authentication. 

Evidence Pack: 
A collection of documentation—screenshots, logs, Secure Score reports, and policy records—prepared for auditors to demonstrate compliance. 

Firewall: 
A security system that controls incoming and outgoing network traffic based on predetermined rules, protecting against unauthorised access. 
 
IASME:  
Official Cyber Essentials certification body. 

Intune: 
Microsoft’s endpoint management platform, enforcing security policies such as encryption, secure boot, application controls, and removal of unnecessary admin privileges. 

Least Privilege: 
A security principle that ensures users and systems are granted only the minimum permissions necessary to perform their tasks, reducing risk. 

Malware Protection: 
Tools and processes designed to detect, prevent, and remediate malicious software (malware) across endpoints and email. 
 
NCSC: UK’s National Cyber Security Centre defining Cyber Essentials standards. 

PIM (Privileged Identity Management): 
A Microsoft feature that manages, controls, and monitors access to important resources by assigning time-bound and approval-based admin privileges. 

RBAC (Role-Based Access Control): 
A method of restricting system access based on users’ roles within an organisation. 

Secure Configuration: 
The process of setting up devices and systems with security best practices, such as disabling unnecessary features, enforcing encryption, and removing default credentials. 

Secure Score: 
A Microsoft metric that quantifies your organisation’s security posture and recommends improvements. Used as an ongoing Key Performance Indicator (KPI). 

Security Update Management (Patching): 
The process of regularly applying updates to software and systems to fix vulnerabilities and maintain compliance. 
Tempo Differential:  

The accelerating gap between AI-driven attack speed and human response time. 

TimeBack: 
Asygma’s outcome of reducing operational noise and reclaiming hours for your business by making security consistent and automated. 

User Access Control: 
Policies and technologies that manage who can access systems and data, ensuring only authorised users have the appropriate permissions. 

Windows Autopatch / Update Rings: 
Built-in Microsoft services for structured, automated updates and patch management, with reporting to ensure compliance and minimise vulnerabilities. 

Zero Trust: 
A modern security design principle: always assume breach, verify explicitly, and enforce least privilege. Underpins Microsoft’s approach to enterprise security.