IT Security for Users — Skills and Education Group Awards Vocationally-Related Qualification Digital Skills & IT Revision
This subtopic focuses on the practical application of basic IT security measures that everyday users must implement to protect systems and data from common
Topic Synopsis
This subtopic focuses on the practical application of basic IT security measures that everyday users must implement to protect systems and data from common threats. Learners will explore methods such as using strong passwords, recognising phishing attempts, updating software, and controlling access to devices, ensuring they can select and apply the most appropriate techniques in personal and workplace settings.
Key Concepts & Core Principles
- File Management: Understanding how to create, save, organise, and retrieve files and folders using appropriate naming conventions and directory structures.
- Word Processing: Using software like Microsoft Word or Google Docs to create, format, and edit documents, including applying styles, inserting images, and using spell check.
- Spreadsheets: Basic use of spreadsheet software (e.g., Excel) to enter data, use simple formulas (SUM, AVERAGE), create charts, and format cells.
- Online Safety: Recognising risks such as phishing, malware, and identity theft; knowing how to create strong passwords, use secure connections, and protect personal data.
- Email Communication: Composing, sending, replying to, and forwarding emails; attaching files; managing contacts and folders; understanding email etiquette.
Exam Tips & Revision Strategies
- When compiling portfolio evidence, include annotated screenshots or witness statements that clearly show you performing the security action, not just describing it.
- For each security method you present, explicitly state how it minimises risk to both IT systems and data to demonstrate understanding.
- Refer to common sense best practices or a given organisational security policy to justify your choices, even if the scenario is general.
- Keep your evidence simple and focused: a clear practical demonstration of selecting and using a method is more effective at Level 1 than excessive theory.
- Always relate your answers to real-world scenarios, such as protecting a home office or a small business, to show applied understanding.
- When describing procedures, use step-by-step language (e.g., 'First, install updates; second, run a full scan') to demonstrate methodical security practice.
- In coursework, provide before-and-after examples—like a system before and after applying security settings—to evidence risk minimisation.
Common Misconceptions & Mistakes to Avoid
- Believing that a complex password alone is sufficient without considering additional measures like two-factor authentication or regular password changes.
- Using the same password across multiple accounts, increasing vulnerability if one is breached.
- Assuming that IT security is solely the responsibility of the IT department, rather than every user's role in maintaining security.
- Ignoring physical security aspects, such as locking the screen when leaving a device, as part of minimising security risks.
- Believing that a password only needs to be changed if the account is hacked, rather than as a proactive security measure.
- Assuming that free antivirus software provides no real protection, leading to unnecessary payment for premium suites.
Examiner Marking Points
- Award credit for demonstrating the ability to create a strong password with a mix of characters and explain why it reduces security risk.
- Expect evidence of using or updating anti-virus software and describing how it protects against malware.
- Look for correct identification of a phishing email or unsafe website and a description of the appropriate response, such as reporting or deleting it.
- Credit for showing a routine of regular software updates or data backups, explaining how this minimises data loss or system compromise.
- Award credit for demonstrating the ability to create and manage strong passwords that meet complexity guidelines (e.g., length, mixture of characters).
- Award credit for clearly explaining the importance of regular software updates and providing examples of how they minimisse security vulnerabilities.
- Award credit for showing appropriate use of basic security tools, such as scanning a removable drive with antivirus software before use.