IT Security for Users — Institute of Administrative Management Vocationally-Related Qualification Digital Skills & IT Revision
This subtopic equips learners with foundational knowledge and practical skills to identify common security threats to IT systems and data, and implement ba
Topic Synopsis
This subtopic equips learners with foundational knowledge and practical skills to identify common security threats to IT systems and data, and implement basic safeguards. It focuses on routine monitoring practices and the development of simple procedures to reduce risks, ensuring users can contribute to a secure digital working environment in line with organisational policies.
Key Concepts & Core Principles
- File management: Understanding how to create, save, organise, and retrieve files and folders efficiently, including using appropriate file names and formats.
- Word processing: Using software like Microsoft Word to create, edit, and format documents, including inserting images, tables, and applying styles.
- Spreadsheets: Using software like Microsoft Excel to enter data, perform basic calculations (e.g., SUM, AVERAGE), and create simple charts.
- Presentation software: Using tools like PowerPoint to create slides with text, images, and transitions, and delivering presentations effectively.
- Digital safety: Knowing how to protect personal information, recognise phishing attempts, and use strong passwords, as well as understanding copyright and data protection laws.
Exam Tips & Revision Strategies
- In coursework, always reference real-world examples of security breaches to justify your chosen procedures, as this demonstrates applied understanding.
- When describing monitoring procedures, break them down into daily, weekly, and monthly tasks to show thoroughness and routine.
- For assessments, ensure you link your security measures directly to minimising specific risks; avoid vague statements.
- Use technical terms correctly (e.g., 'encryption', 'firewall', 'authentication') to convey competence, but define them if they are above the level to show comprehension.
Common Misconceptions & Mistakes to Avoid
- Learners often confuse malware types or fail to distinguish between a virus and a phishing attack.
- Many believe that strong passwords alone are sufficient, overlooking other measures like physical security and software updates.
- When asked to develop procedures, learners frequently list generic rules without tailoring them to specific risks or contexts.
- Underestimating the importance of regular monitoring, leading to irregular practices that do not effectively minimise risk.
Examiner Marking Points
- Award credit for demonstrating the ability to identify at least three common security threats (e.g., viruses, phishing, unauthorised access) and describe their potential impact.
- Award credit for explaining and applying basic protective measures such as using strong passwords, locking screens when away, and recognising suspicious emails.
- Award credit for outlining a simple routine to monitor security, such as checking for software updates or scanning for malware, and for describing how to report concerns.
- Award credit for creating or following a basic security procedure document that includes steps like regular password changes, data backup, and safe internet use.