Automatic software updates.

The idea

Automatic software updates are a preventive control: the system checks for new versions of its software and installs them without waiting for the user to act. Updates matter because they patch vulnerabilities that attackers exploit, such as a flaw in a browser or operating system that allows malware to run. Because the process is automatic, it removes reliance on users remembering to update, so patches are applied promptly and consistently across many devices. In an exam question you would identify this as a method to prevent threats, explain that it closes known security holes, and contrast it with detection methods such as monitoring logs. A concrete example is a school's computers receiving an operating system security patch overnight so a known exploit no longer works.

What earns the marks

• Identifies automatic software updates as a method to prevent cyber security threats.
• Explains that updates install patches that fix known vulnerabilities or security holes.
• States that the process happens without user action, so patches are applied promptly and consistently.
• Links the method to reducing the risk of malware or attackers exploiting a known flaw.
• Distinguishes prevention (closing a vulnerability) from detection (noticing an attack).

Common mistakes and how to put them right

• Thinking updates only add new features.

  Put it right by stressing that security patches close vulnerabilities attackers could exploit.

• Assuming the user must remember to update.

  Put it right by explaining that automatic updates run without user action.

• Confusing prevention with detection.

  Put it right by noting updates stop a known exploit working rather than spotting an attack in progress.

Exam tips

• Read the question to see whether it asks for a method to prevent or to detect threats, then choose accordingly.
• Name the method precisely as automatic software updates rather than a vague reference to 'updating things'.
• Add one sentence explaining the mechanism: a patch fixes a known vulnerability so it can no longer be exploited.