TLDR
IT vendors often use technical language that can make simple concepts feel more complicated than they are. This glossary explains the most common IT and cybersecurity terms in plain English, so you can follow conversations with your provider, ask better questions, and make more confident decisions about your technology.
Most Searched IT Terms Explained
- Managed IT / MSP: A company that handles your technology on an ongoing basis for a monthly fee, rather than just fixing things when they break.
- Ransomware: Malware that locks you out of your own files and demands payment to restore access.
- MFA / Two-Factor Authentication: A login process that requires a second form of verification beyond just a password.
- Firewall: A security system that monitors and controls what traffic is allowed in and out of your network.
- Endpoint: Any device connected to your network, including computers, laptops, phones, and tablets.
- Patch / Patch Management: Updates that fix security vulnerabilities in software, and the process of applying them consistently.
If you’ve ever sat through a meeting with your IT company and nodded along while not fully sure what they were talking about, you’re not alone. The technology industry has a habit of using jargon that feels specific and important but rarely gets explained.
This glossary is here to fix that. No condescension, no oversimplification. Just clear definitions for the terms that come up most often in conversations about managed IT and cybersecurity, so you can follow along, ask better questions, and make decisions you actually understand.
Your Network and Infrastructure
Bandwidth
The amount of data that can be transmitted over your internet connection in a given period of time. Higher bandwidth means more data can move at once. When your team complains that the internet feels slow, bandwidth is often part of the conversation.
Cloud / Cloud Storage
Storing files, software, or systems on remote servers accessed over the internet rather than on a physical computer or server in your office. Cloud services are managed by companies like Microsoft, Google, or Amazon. The phrase “it’s in the cloud” essentially means “it’s stored somewhere on the internet, not on your local machine.”
Endpoint
Any device connected to your network. Computers, laptops, phones, tablets, and printers are all endpoints. When an IT company talks about “endpoint security” or “endpoint management,” they’re talking about keeping all of those devices protected and up to date.
Firewall
A security system, either hardware, software, or both, that monitors and controls the traffic coming into and going out of your network. Think of it as a security guard at the door of your building, checking who’s allowed in and what they’re carrying.
VPN (Virtual Private Network)
A tool that creates a secure, encrypted connection between a device and your business network, even when the device is connecting from somewhere else, like a coffee shop or an employee’s home. VPNs are commonly used for remote work to keep business traffic private.
Server
A computer that provides services, data, or resources to other computers on a network. Your email might run through a server. Your shared files might be stored on a server. Some businesses keep a physical server on-site; others use cloud-based servers instead.
Security Terms
Malware
A broad term for any software designed to damage, disrupt, or gain unauthorized access to a computer system. Viruses, ransomware, spyware, and trojans are all types of malware.
Ransomware
A specific type of malware that encrypts your files, making them inaccessible, and then demands payment (a “ransom”) in exchange for the key to unlock them. Ransomware attacks can shut down an entire business and are increasingly common against small and mid-sized companies.
Phishing
A scam delivered by email, text, or phone call that tricks someone into revealing sensitive information, clicking a malicious link, or downloading harmful software. Phishing emails are often designed to look like they’re coming from a trusted source, like a bank, a vendor, or even your own IT company.
MFA / Two-Factor Authentication (2FA)
A login method that requires two forms of verification rather than just a password. The second factor is usually a code sent to your phone or generated by an app. Even if a password is stolen, MFA prevents an attacker from logging in without also having physical access to the second factor.
Zero-Day Vulnerability
A security flaw in software that the developer hasn’t discovered yet or hasn’t released a fix for. It’s called “zero-day” because there have been zero days since the vulnerability became known to develop a patch. These are particularly dangerous because there’s no official fix available while attackers are already exploiting the flaw.
Patch / Patch Management
A patch is an update released by a software company to fix bugs or close security vulnerabilities. Patch management is the process of making sure those updates get applied to all of your systems consistently and on time. Skipping patches is one of the most common reasons businesses get compromised.
Penetration Testing (Pen Test)
A controlled, authorized attempt to hack into a business’s systems in order to find vulnerabilities before real attackers do. A pen test is usually conducted by a cybersecurity professional and followed by a report detailing what they found and how to fix it.
Managed IT and Service Terms
Managed Service Provider (MSP)
A company that manages a business’s technology on an ongoing basis, typically for a flat monthly fee. Rather than calling someone only when something breaks, an MSP monitors your systems proactively, handles updates, provides support, and plans for your technology needs over time.
Help Desk / Service Desk
The support function of an IT company where employees can submit requests or report problems. When someone can’t log in or their computer is running slowly, the help desk is the first point of contact for getting it resolved.
SLA (Service Level Agreement)
A formal agreement between a service provider and a client that defines the expected level of service, including response times, uptime guarantees, and how issues will be prioritized. When you sign a contract with an IT company, the SLA outlines what they’re committing to deliver.
Uptime
The percentage of time that a system or service is operational and available. You’ll often see uptime expressed as a percentage, like “99.9% uptime,” which is sometimes called “three nines.” The closer to 100%, the less downtime you can expect.
Backup and Disaster Recovery (BDR)
A combination of processes and tools designed to create copies of your data (backup) and ensure your business can get back up and running quickly after a major incident like a ransomware attack, hardware failure, or natural disaster (disaster recovery). These two things are related but different: a backup stores your data; disaster recovery is the plan for restoring operations.
RTO and RPO
Two terms that come up in disaster recovery planning. RTO stands for Recovery Time Objective, which is how long it takes to restore operations after a failure. RPO stands for Recovery Point Objective, which is how much data you can afford to lose, measured in time. For example, an RPO of four hours means your backups run every four hours and you could lose up to four hours of work in the worst case.
Compliance
The process of meeting specific regulatory or legal requirements related to how your business handles data. Depending on your industry, you may need to comply with frameworks like HIPAA (healthcare), PCI-DSS (payment card data), or SOC 2 (general data security). Compliance doesn’t automatically mean you’re secure, but it does mean you meet a defined minimum standard.
Using This Glossary in Real Conversations
The next time your IT provider starts talking about patching endpoints or improving your RTO, you’ll have the vocabulary to follow along and push back with good questions. Understanding the language doesn’t mean you need to handle the technical work yourself. It just means you’re informed enough to make good decisions and hold your provider accountable for the things they’re supposed to be doing.
If a vendor is using terms you don’t recognize that aren’t in this list, don’t hesitate to ask them to explain. Any good IT company should be willing to translate for you. If they’re not, that tells you something.
At Complete Computer Solutions, we make a point of speaking in plain language with every client. If you’re trying to figure out where your business stands on any of these topics, we’re happy to have that conversation. Send us a message and we’ll set up a time to talk through it.
Frequently Asked Questions
What is the difference between a virus and ransomware?
A virus is a type of malware that replicates and spreads to other files or systems, often causing damage along the way. Ransomware is a specific type of malware with a clear financial motive: it locks your files and demands payment for the key. Both are serious; ransomware tends to have more immediate and severe business consequences.
What does “the cloud” actually mean for my business?
For most small businesses, the cloud means using software and storage that lives on remote servers you access over the internet, rather than a physical computer or server in your office. Microsoft 365, Google Workspace, and QuickBooks Online are all cloud-based tools. The main advantages are accessibility from anywhere and built-in redundancy, since cloud providers maintain multiple copies of your data in multiple locations.
What is an MSP and is it the same as break-fix IT support?
No. Break-fix is the model where you call someone when something goes wrong and pay for the repair. An MSP (managed service provider) works proactively on an ongoing basis, monitoring your systems, preventing problems, keeping software updated, and providing support as part of a monthly agreement. MSPs generally give you more predictable costs and fewer unexpected crises.
Do I need to understand all of this to work with an IT company?
No. You don’t need to understand the technical details to make good decisions about your technology. What you do need is a provider who explains things clearly and doesn’t hide behind jargon. This glossary is a reference tool, not a prerequisite.
What is compliance and does my small business need to worry about it?
It depends on your industry. If your business handles healthcare data, payment card information, or works with certain government clients, you likely have compliance obligations already. If you’re unsure, it’s worth asking your IT provider to do a quick assessment. Compliance requirements are not just for large companies, and the penalties for non-compliance can be significant.