AQA · GCSE · Computer Science
Course version: 8525 · Version from Sept 2020
Students should know that cyber security consists of the processes,…
Full specification wording
Fundamentals of cyber security: Students should know that cyber security consists of the processes, practices and technologies designed to protect networks, computers, programs and data from attack, damage or unauthorised access.
This statement sets out the full definition learners must know.
Checked against the AQA 8525 specification (opens in a new tab) on .
- Point 2 of 2
Study notes
From the checked teaching notes for this specification point.
The idea
This statement sets out the full definition learners must know. Cyber security is not one product but a combination of three elements: processes (the steps and procedures an organisation follows, such as a policy for backing up data or reporting incidents), practices (the everyday habits people adopt, such as choosing strong passwords and locking devices) and technologies (the tools used, such as firewalls, encryption and access controls). Together these are designed to protect four assets: networks, computers, programs and data. The protection is against three threats: attack (deliberate attempts to break in), damage (accidental or malicious harm) and unauthorised access (someone reaching data or systems without permission).
What earns the marks
- Identifies that cyber security consists of processes, practices and technologies.
- Recognises that these are designed to protect networks, computers, programs and data.
- States that protection is against attack, damage or unauthorised access.
- Distinguishes processes and practices from technologies rather than treating cyber security as a single tool.
- Applies the definition to a scenario by identifying which asset and which threat an option addresses.
Common mistakes and how to put them right
Selecting an option that lists only technologies such as firewalls and ignoring processes and practices.
Put it right: Require all three elements.
Assuming cyber security protects only data and forgetting networks, computers and programs.
Put it right: Check every listed asset.
Treating 'damage' as only deliberate harm when it also covers accidental harm.
Put it right: Keep all three threats in view.
Exam tips
- Underline the three elements, four assets and three threats in the question before choosing an option.
- Reject any option that names a single tool as the whole of cyber security.
- For scenario questions, ask which asset is being protected and which threat is being guarded against.
Try the lesson
The start of the Fundamentals of cyber security: Students should know that cyber security consists of the processes, practices and technologies designed to protect networks, computers, programs and data from attack, damage or unauthorised access. lesson, made from checked teaching notes for this specification point.
Have a go first
Which of these is a technology used in cyber security to protect data from unauthorised access?
There is more to this lesson
The full lesson goes on to check your understanding and help you earn the marks. Create a free account to carry on, with your progress saved.
A week of Premium from your first lesson · Then the free plan continues · No card, no charge
Test your understanding of Fundamentals of cyber security: Students should know that cyber security consists of the processes, practices and technologies designed to protect networks, computers, programs and data from attack, damage or unauthorised access.
Active recall beats re-reading. Take an instant quiz now to test what you’ve learned and lock it into long-term memory.
A week of Premium from your first lesson · Then the free plan continues · No card, no charge