This element covers the fundamental practices users must adopt to protect IT systems and data from security threats. Learners will explore practical method
Topic Synopsis
This element covers the fundamental practices users must adopt to protect IT systems and data from security threats. Learners will explore practical methods such as password management, physical security measures, and safe online behaviours, ensuring they can apply these in real-world digital environments to minimize risks.
Key Concepts & Core Principles
- File management: organising, saving, and retrieving files using folders and appropriate naming conventions.
- Word processing: creating, formatting, and editing documents, including text alignment, bullet points, and tables.
- Spreadsheets: entering data, using basic formulas (SUM, AVERAGE), and creating simple charts.
- Email and online communication: sending, receiving, and organising emails, attaching files, and understanding netiquette.
- Internet safety: recognising phishing attempts, creating strong passwords, and understanding data protection principles.
Exam Tips & Revision Strategies
- When completing practical assessments, narrate your actions clearly to show the assessor your decision-making process for security choices.
- In written tasks, use real-life examples to illustrate security risks and solutions, such as describing a phishing email you might encounter.
- Always link your answers back to the learning outcome by explicitly stating how a method minimizes a specific security risk.
- For performance-based evidence, provide screenshots or logs of activities like password changes, software updates, or backup confirmations.
Common Misconceptions & Mistakes to Avoid
- Using personal information (e.g., pet names, birthdays) as passwords, making them easy to guess.
- Sharing passwords with colleagues or writing them down in plain sight.
- Leaving devices logged in and unattended, assuming physical security is not part of IT security.
- Clicking on links or downloading attachments from unknown sources without checking their legitimacy.
- Assuming that antivirus software alone provides complete protection, ignoring the need for regular updates and user vigilance.
- Failing to back up data regularly, underestimating the risk of data loss or ransomware.
Examiner Marking Points
- Award credit for demonstrating the creation and use of strong passwords that meet complexity requirements (e.g., length, character mix).
- Award credit for evidence of locking a workstation when unattended, including mention of physical security practices.
- Award credit for correctly identifying and describing at least two methods to protect data from malware (e.g., antivirus software, regular scans).
- Award credit for showing an understanding of the importance of backing up data and describing a basic backup routine.
- Award credit for explaining safe email and internet practices, such as not opening suspicious attachments or links.