Why This Guide Matters in 2026

The language of technology has evolved from niche jargon to the universal dialect of global business. Whether you're a cybersecurity analyst defending against advanced persistent threats, a cloud architect designing resilient infrastructure, or a systems administrator keeping the digital world running—your ability to communicate effectively across technical domains is no longer optional. It's essential.

The Challenge of Technical Fluency

The technology landscape is expanding at an unprecedented rate. New frameworks emerge, acronyms multiply, and concepts that were cutting-edge yesterday become foundational knowledge today. Consider this: a single security incident now requires collaboration between network engineers, cloud specialists, developers, and compliance officers—each speaking their own specialized language. The gap between these domains isn't just about terminology; it's about understanding how these pieces fit together to create the digital ecosystems that power modern civilization.

400+ Essential Terms
7 Technical Domains
100% Practical Context Provided

What This Guide Offers You

This comprehensive glossary isn't just a list of definitions—it's a bridge between disciplines. We've curated over 400 essential terms spanning:

  • 🔒 Cybersecurity & Threat Management – From MDR and Zero Trust to MITRE ATT&CK and SIEM
  • 🌐 Network Infrastructure – Understanding the backbone that connects everything
  • ☁️ Cloud Computing – Demystifying the alphabet soup of XaaS offerings
  • 💻 Programming & Development – The language developers use to build the future
  • 🗄️ Database & Data Management – How we store, query, and protect the world's information
  • ⚙️ System Administration & Operations – Keeping the lights on and systems running
  • 🔌 Telecommunications & Fiber Optics – The physical infrastructure of the internet

Who This Is For

Global IT Professionals

Whether you're in London, Singapore, São Paulo, or Sydney—technical fluency transcends borders. This guide speaks the language of global technology.

Career Changers

Entering the IT field? Master the terminology before you master the technology.

Business Leaders

Understanding what your technical teams are saying is the first step to making informed decisions about technology investments and risk management.

Students & Lifelong Learners

The IT landscape never stops evolving, and neither should you.

How to Use This Guide

This isn't meant to be read cover-to-cover (though you certainly can). Use it as:

  1. A Reference Tool – Bookmark it for quick lookups during meetings, documentation, or troubleshooting
  2. A Learning Resource – Identify unfamiliar terms and explore related concepts
  3. A Training Aid – Share with new team members to accelerate their onboarding
  4. A Conversation Starter – Clarify misunderstandings and align communication across teams
"The limits of my language mean the limits of my world." — Ludwig Wittgenstein

In technology, your vocabulary determines your capability.

Ready to dive in? Below you'll find the complete glossary organized by domain. Whether you're preparing for a certification exam, writing technical documentation, or simply want to stay current in your field—this guide is your companion in mastering the language of modern IT.
✦

🔒 CYBER SECURITY TERMS

MDRManaged Detection and Response: combines tech + human threat hunting.
EDREndpoint Detection and Response: monitors laptops, servers for advanced threats.
XDRExtended Detection and Response: unified across endpoints, network, cloud.
NDRNetwork Detection and Response: analyzes raw traffic, detects suspicious behaviours.
SIEMSecurity Information and Event Management: aggregates logs, real-time alerts.
SOARSecurity Orchestration, Automation and Response: automates incident workflows.
UEBAUser and Entity Behavior Analytics: ML to detect anomalies and insider threats.
IDSIntrusion Detection System: monitors and alerts on suspicious activity.
IPSIntrusion Prevention System: actively blocks malicious traffic.
SOCSecurity Operations Center: 24/7 monitoring and response team.
CISOChief Information Security Officer: executive leader for cybersecurity strategy.
IOCIndicator of Compromise: forensic evidence of a breach (e.g. file hash).
IOAIndicator of Attack: behavioral patterns indicating active attack.
TTPTactics, Techniques and Procedures: threat actor methods.
MITRE ATT&CKKnowledge base of adversary TTPs for threat modelling.
DLPData Loss Prevention: monitors and prevents unauthorised data transmission.
CASBCloud Access Security Broker: policy enforcement between users and cloud apps.
CSPMCloud Security Posture Management: monitors misconfigurations & compliance.
CNAPPCloud-Native Application Protection Platform: integrated CSPM + CWPP + CASB.
ZTNAZero Trust Network Access: access based on identity and device health.
SASESecure Access Service Edge: converges networking with security (SD-WAN + SWG).
NGFWNext-Generation Firewall: traditional + deep packet inspection, IPS.
MFAMulti-Factor Authentication: requires two or more verification factors.
SSOSingle Sign-On: one login for multiple applications.
PAMPrivileged Access Management: controls and audits superuser accounts.
PKIPublic Key Infrastructure: framework for digital certificates.
TLSTransport Layer Security: cryptographic protocol for data in transit.
CVECommon Vulnerabilities and Exposures: public identifier for vulnerabilities.
CVSSCommon Vulnerability Scoring System: severity score (0–10).
DDoSDistributed Denial of Service: floods target with traffic to disrupt service.
MitMMan-in-the-Middle: attacker intercepts and alters communications.
SQLiSQL Injection: inserts malicious SQL queries to manipulate databases.
XSSCross-Site Scripting: injects client-side scripts into web pages.
BECBusiness Email Compromise: phishing scam impersonating executives.
GDPRGeneral Data Protection Regulation: EU privacy law for personal data.
HIPAAHealth Insurance Portability and Accountability Act: US health data protection.
PCI DSSPayment Card Industry Data Security Standard: secure cardholder data.
ISO 27001International standard for Information Security Management System.
IRIncident Response: structured methodology to handle and recover from breaches.
RTORecovery Time Objective: max acceptable downtime after disaster.
RPORecovery Point Objective: max acceptable data loss (age of recovered data).
CSIRTComputer Security Incident Response Team: internal incident response team.
ZTAZero Trust Architecture: never trust, always verify.
IAMIdentity and Access Management: manages digital identities and access.
FWFirewall: monitors and filters network traffic.
LANLocal Area Network: connects devices within a limited area.
VPNVirtual Private Network: encrypted tunnel over a public network.

🌐 NETWORK TERMS

LANLocal Area Network: small geographic area (home, office).
WANWide Area Network: broad geographic area, e.g. Internet.
MANMetropolitan Area Network: spans city or campus.
VPNVirtual Private Network: secure encrypted connection over internet.
IP AddressUnique numerical label for each device.
RouterForwards data packets between networks.
SwitchConnects devices within a network using MAC addresses.
FirewallMonitors & controls traffic based on rules.
DNSDomain Name System: translates domain names to IP addresses.
DHCPDynamic Host Configuration Protocol: auto-assigns IP addresses.
NATNetwork Address Translation: maps private IPs to a single public IP.
MAC AddressUnique hardware identifier for network interfaces.
TCPTransmission Control Protocol: reliable, ordered delivery.
UDPUser Datagram Protocol: connectionless, fast, loss-tolerant.
HTTPHypertext Transfer Protocol: foundation of web communication.
HTTPSHTTP Secure: encrypted communication via SSL/TLS.
BandwidthMaximum data transfer rate (bps).
LatencyTime delay between request and arrival (ms).
PacketSmall unit of data with header and payload.
Subnet MaskDivides IP into network and host parts.

☁️ CLOUD COMPUTING TERMS

IaaSInfrastructure as a Service: virtualised compute, storage, network.
PaaSPlatform as a Service: hardware + software tools for app dev.
SaaSSoftware as a Service: subscription-based software delivery.
FaaSFunction as a Service: serverless event-driven code execution.
CaaSContainers as a Service: container-based abstraction.
DaaSDesktop as a Service: virtual desktops over internet.
DBaaSDatabase as a Service: managed cloud database.
NaaSNetwork as a Service: virtual network infrastructure.
STaaSStorage as a Service: scalable cloud storage.
DRaaSDisaster Recovery as a Service: backup & replication.
SECaaSSecurity as a Service: cloud-delivered security solutions.
MBaaS / BaaSMobile/Backend as a Service: pre-built backend services.
AIaaSAI as a Service: AI/ML tools and APIs.
HPCaaSHigh Performance Computing as a Service: powerful compute clusters.
Observability as a ServiceCloud-based monitoring, logging, tracing.

💻 PROGRAMMING & DEVT TERMS

APIApplication Programming Interface: rules for software communication.
AJAXAsynchronous JavaScript and XML: updates pages async.
AWSAmazon Web Services: cloud computing platform.
AgileIterative software development methodology.
ALMApplication Lifecycle Management: from idea to retirement.
ASTAbstract Syntax Tree: tree representation of source code.
Big OAlgorithm efficiency metric (time/space).
BLOBBinary Large Object: stored binary data.
BootstrapFront-end framework for responsive design.
BranchParallel version of code in Git repository.
BugError, flaw, or fault in a program.
BuildConverting source code to standalone executable.
CDNContent Delivery Network: distributed servers for fast delivery.
CI/CDContinuous Integration / Continuous Deployment: automate build & release.
CLICommand Line Interface: text-based interface.
CMSContent Management System: create/manage digital content.
CRUDCreate, Read, Update, Delete: basic database operations.
CSSCascading Style Sheets: presentation of HTML.
CSVComma-Separated Values: plain text table format.
DAOData Access Object: abstracts database operations.
DBMSDatabase Management System: manages databases.
DDLData Definition Language: SQL for structure (CREATE, ALTER).
DLLDynamic Link Library: Windows shared code library.
DMLData Manipulation Language: SQL for data (SELECT, INSERT).
DNSDomain Name System: domain names to IP.
DOMDocument Object Model: programming interface for HTML/XML.
DRYDon't Repeat Yourself: reduce repetition.
DSLDomain Specific Language (e.g. SQL, Regex).
E2EEnd to End: testing the entire flow.
EC2Elastic Compute Cloud: AWS virtual server.
ECSEntity Component System: game dev pattern.
EDAEvent-Driven Architecture: events as core.
ERDEntity Relationship Diagram: database relationships.
ESECMAScript: JavaScript specification.
FaaSFunction as a Service: serverless.
FIFOFirst In, First Out: queue principle.
FOSSFree and Open Source Software.
FPFunctional Programming: avoid mutable state.
FPSFrames Per Second: rendering performance.
FSMFinite State Machine: states and transitions.
FTPFile Transfer Protocol.
GCGarbage Collection: automatic memory management.
GILGlobal Interpreter Lock: CPython threading mutex.
GITDistributed version control system.
GQLGraph Query Language.
GUIGraphical User Interface.
HATEOASHypermedia as Engine of Application State: REST constraint.
HCIHuman-Computer Interaction.
HDFSHadoop Distributed File System.
HMACHash-based Message Authentication Code: API security.
HoistingJS behavior moving declarations to top.
HTMLHyperText Markup Language: web pages.
HTTPHyperText Transfer Protocol.
HTTPSHTTP Secure.
IaaSInfrastructure as a Service.
IDEIntegrated Development Environment.
IoCInversion of Control: framework controls flow.
IPInternet Protocol.
IPCInter-Process Communication.
JAMstackJavaScript, APIs, Markup: modern web arch.
JDBCJava Database Connectivity.
JITJust In Time: compilation at runtime.
JSONJavaScript Object Notation: lightweight data interchange.
JVMJava Virtual Machine.
JWTJSON Web Token: secure info transmission.
K8sKubernetes: container orchestration.
KISSKeep It Simple, Stupid: design principle.
LAMPLinux, Apache, MySQL, PHP: classic stack.
LIFOLast In, First Out: stack principle.
LINQLanguage Integrated Query: .NET querying.
LISPOldest high-level programming language family.
LLVMLow Level Virtual Machine: compiler infra.
LSPLiskov Substitution Principle (SOLID).
LTSLong Term Support: extended maintenance.
MVCModel-View-Controller: architectural pattern.
MVPMinimum Viable Product: core features for early users.
MVVMModel-View-ViewModel: UI architecture.
MERNMongoDB, Express, React, Node.js: JS stack.
MEANMongoDB, Express, Angular, Node.js: alternative JS stack.
MFAMulti-Factor Authentication.
MIMEMultipurpose Internet Mail Extensions.
MQTTMessage Queuing Telemetry Transport: IoT protocol.
MSAMicroservice Architecture: small services.
MTBFMean Time Between Failures: reliability.
MTTRMean Time To Repair: maintainability.
N+1N+1 Query Problem: performance anti-pattern.
NATNetwork Address Translation.
NGINXEngine X: web server and reverse proxy.
NPMNode Package Manager.
OAuthOpen Authorization: token-based authentication.
OCIOpen Container Initiative: container standards.
ODBCOpen Database Connectivity.
OOPObject-Oriented Programming.
ORMObject-Relational Mapping: database to OOP objects.
OSOperating System.
OSSOpen Source Software.
OTPOne-Time Password.
PaaSPlatform as a Service.
PWAProgressive Web App: native-like web.
PHPPHP: Hypertext Preprocessor: server-side scripting.
PIIPersonally Identifiable Information.
PNGPortable Network Graphics: lossless image.
PoCProof of Concept: feasibility demonstration.
POJOPlain Old Java Object: simple Java object.
PRPull Request: code change proposal in version control.
QAQuality Assurance: process ensuring requirements.
RADRapid Application Development: quick prototyping.
RAMRandom Access Memory: fast computer memory.
RDBMSRelational Database Management System: table-based.
RESTRepresentational State Transfer: API architecture.
RFCRequest for Comments: IETF standards.
RPCRemote Procedure Call: call functions on remote systems.
RSARivest-Shamir-Adleman: public-key cryptosystem.
SaaSSoftware as a Service.
SDKSoftware Development Kit: dev tools for platform.
SEOSearch Engine Optimization: improve web visibility.
SLAService Level Agreement: commitment between provider and client.
SMTPSimple Mail Transfer Protocol: email transmission.
SOLIDFive OOP design principles.
SPASingle Page Application: dynamic updates.
SQLStructured Query Language: manage relational databases.
SSHSecure Shell: cryptographic network protocol.
SSLSecure Sockets Layer: superseded by TLS.
SSRServer Side Rendering: render on server.
TDDTest-Driven Development: write tests before code.
TLSTransport Layer Security: cryptographic protocol.
TSTypeScript: typed JavaScript superset.
TTLTime To Live: data lifetime limit.
UATUser Acceptance Testing: final testing.
UDPUser Datagram Protocol: connectionless.
UMLUnified Modeling Language: visual modeling.
URIUniform Resource Identifier: identifies resource.
URLUniform Resource Locator: web address.
UUIDUniversally Unique Identifier: 128-bit unique.
UXUser Experience: interaction/experience.
VCSVersion Control System: manages code changes.
VMVirtual Machine: software emulation.
VPNVirtual Private Network: secure network extension.
VSCodeVisual Studio Code: popular code editor.
VueVue.js: progressive JavaScript framework.
WASMWebAssembly: binary instruction format for web.
WebGLWeb Graphics Library: 3D graphics API.
WebRTCWeb Real-Time Communication: P2P audio/video/data.
XSSCross-Site Scripting: security vulnerability.
YAGNIYou Ain't Gonna Need It: XP principle.
YAMLYAML Ain't Markup Language: human-readable data serialization.
ZAPZed Attack Proxy: security testing tool.
ZMQZeroMQ: high-performance messaging library.

🗄️ DATABASE & DATA TERMS

DBOrganized collection of structured information.
TableSet of data organized in columns and rows.
Column (Field)Vertical set of a single data type.
Row (Record)Horizontal set representing one complete entry.
Primary Key (PK)Unique identifier for each row.
Foreign Key (FK)Refers to primary key in another table.
IndexImproves speed of data retrieval.
QueryRequest for data, typically SQL.
SQLStructured Query Language: manage relational data.
NormalizationReduce redundancy, improve integrity.
ACIDAtomicity, Consistency, Isolation, Durability: transaction properties.
TransactionSequence of operations as a single unit.
ViewVirtual table based on SQL query.
Stored ProcedurePrepared SQL code that can be reused.
JOINCombines rows from two or more tables.
SchemaStructural definition of database.
Data WarehouseCentralised repository for analysis.
ETLExtract, Transform, Load: data to warehouse.
NoSQLNon-relational databases (document, key-value, graph).
ClusterGroup of servers working together for DB.
ShardingHorizontal partitioning across servers.
Data LakeVast raw data repository in native format.
DeadlockTransactions blocking each other.
CursorRow-by-row traversal of result set.
TriggerStored code executed on table events.
ReplicationCopying data across database instances.
ConstraintRule enforced on data columns.

⚙️ SYSTEM ADMIN & OPS TERMS

Bare MetalPhysical servers (not virtual).
HypervisorSoftware that creates VMs (ESXi, KVM, Hyper-V).
RAIDRedundant Array of Independent Disks: data redundancy/performance.
UptimeTime a system has been running without interruption.
Load AverageSystem demand over 1, 5, 15 minutes.
IOPSInput/Output Operations Per Second: storage performance.
InodeMetadata structure in Unix-like file systems.
DaemonBackground process (e.g. sshd).
Zombie ProcessTerminated process still in process table.
Orphan ProcessParent terminated; adopted by init.
CronTime-based job scheduler in Unix-like OSes.
SystemdModern init system and service manager.
Kernel PanicCritical system error forcing restart (Linux).
PortCommunication endpoint (SSH=22, HTTP=80).
FirewallFilters traffic (iptables, nftables, etc).
ProxyIntermediary between client and server.
Reverse ProxySits in front of backend servers (Nginx, HAProxy).
VPNExtends private network across public network.
SSHSecure Shell: remote administration protocol.
TLS/SSLCryptographic protocols for encryption.
CIDRClassless Inter-Domain Routing: IP range notation.
Load BalancerDistributes traffic across multiple servers.
MetricNumeric measurement over time.
LogTimestamped event data.
TraceEnd-to-end request path across systems.
AlertNotification triggered by condition.
SLAService Level Agreement: expected uptime/performance.
SLOService Level Objective: internal target (e.g. 99.9%).
SLIService Level Indicator: measured metric.
Full BackupComplete copy of selected data.
Incremental BackupOnly data changed since last backup.
Differential BackupOnly data changed since last full backup.
RPORecovery Point Objective: max data loss.
RTORecovery Time Objective: max downtime.
Disaster Recovery (DR)Process and tools to recover from major failure.
SnapshotPoint-in-time read-only copy of a system.
IaCInfrastructure as Code: declarative config (Terraform).
CMConfiguration Management: consistent configs (Ansible, Puppet).
IdempotencyOperation multiple times yields same result.
Immutable InfrastructureReplace server; never modify after deployment.
ContainerLightweight isolated environment (Docker).
ImageRead-only template to create containers.
RegistryStorage for container images.
OrchestratorAutomates container deployment (Kubernetes).
Pod (Kubernetes)Smallest deployable unit, one or more containers.
CI/CDContinuous Integration / Delivery: automate build & release.
GitOpsGit as single source of truth for infra.
Shift LeftPerform testing and security earlier in cycle.
Error BudgetAmount of unreliability tolerated (1 – SLO).
MTTRMean Time To Repair.
MTBFMean Time Between Failures.
ToilManual, repetitive, automatable work.
Post-MortemBlameless analysis after incident.

🔌 FIBRE TERMS

ROERight of Entry: permission to install/operate on property.
MDUMulti-Dwelling Unit: apartments, condos, etc.
RingNetwork topology in a closed loop for resilience.
HP (HomePass)Location passed by network, serviceable but not connected.
HHCHomes Connected: actively connected premises.
HCHome Connected: individual activated premises.
FTTHFiber to the Home: direct fiber to residential home.
FTTPFiber to the Premises: fiber to home, office, or building.
FTTBFiber to the Building: fiber to building, internal copper/ethernet.
FTTCFiber to the Cabinet/Curb: fiber to street cabinet, copper last mile.
PONPassive Optical Network: uses passive splitters.
GPONGigabit PON: high-speed broadband standard.
XG-PON10-Gigabit PON: up to 10 Gbps downstream.
XGS-PON10-Gigabit Symmetrical PON: 10 Gbps both directions.
OLTOptical Line Terminal: ISP equipment at exchange.
ONTOptical Network Terminal: customer premises equipment.
ONUOptical Network Unit: terminates PON connection.
POPPoint of Presence: ISP facility with network equipment.
NOCNetwork Operations Center: monitoring facility.
BackboneCore high-capacity network interconnecting infra.
BackhaulLinks connecting access networks to core.
Last MileFinal segment from ISP to customer premises.
Middle MileTransport connecting access infrastructure to core.
SpliceJoining two fiber strands together.
Fiber ClosureProtective enclosure for splices and cable management.
SplitterPassive device dividing fiber signal among subscribers.
ODFOptical Distribution Frame: fiber termination panel.
FDTFiber Distribution Terminal: field cabinet.
FDBFiber Distribution Box: smaller distribution point.
ODNOptical Distribution Network: passive infra between OLT and ONT.
Feeder CablePrimary cable from POP toward distribution.
Distribution CableCable connecting feeder to local areas.
Drop CableFinal cable to customer premises.
WayleaveLegal permission for infrastructure on private/public land.
PermitOfficial authorization for construction/installation.
ROWRight of Way: legal right along roads/utilities.
SurveySite assessment before deployment.
Civil WorksConstruction: trenching, duct installation, poles.
TrenchingExcavating to install ducts/cables.
Micro trenchingNarrow trench for faster fiber deployment.
DuctProtective conduit for fiber cables.
HandholeSmall underground access chamber.
ManholeLarger underground access chamber.
Pole RouteAerial fiber deployment using poles.
Aerial FiberFiber installed above ground on poles.
Underground FiberFiber below ground in ducts or direct-buried.
Dark FiberInstalled fiber not currently carrying traffic.
Lit FiberActive fiber carrying network traffic.
BandwidthMaximum data transmission capacity.
ThroughputActual data successfully transferred.
LatencyTime for data to travel.
JitterVariation in packet delay.
Packet LossPackets that fail to reach destination.
SLAService Level Agreement: performance commitment.
CPECustomer Premises Equipment: routers, ONTs.
PEProvider Edge: ISP router connecting customers.
BNGBroadband Network Gateway: subscriber management.
BRASBroadband Remote Access Server: legacy subscriber platform.
AAAAuthentication, Authorization, Accounting.
PPPoEPoint-to-Point Protocol over Ethernet: subscriber session.
DHCPDynamic Host Configuration Protocol: auto-assigns IPs.
CGNATCarrier Grade NAT: share public IP pool.
IP TransitUpstream internet connectivity purchased.
IXPInternet Exchange Point: networks exchange traffic directly.
ASNAutonomous System Number: unique routing identifier.
BGPBorder Gateway Protocol: routing between ASes.
RedundancyDuplicate paths/equipment for reliability.
FailoverAutomatic switching to backup system.
UptimePercentage of time service is operational.
ChurnRate customers cancel/discontinue.
Take Rate% of serviceable premises that subscribe.
Penetration RateProportion of potential customers who subscribe.
ARPUAverage Revenue Per User: monthly average.
ISPInternet Service Provider.
DWDMDense Wavelength Division Multiplexing: multiple signals on one fiber.