This topic covers cyber security awareness, including common threats like social engineering, personal actions that expose systems, safe cyber practices, a
Topic Synopsis
This topic covers cyber security awareness, including common threats like social engineering, personal actions that expose systems, safe cyber practices, and incident reporting.
Key Concepts & Core Principles
- Confidentiality, Integrity, and Availability (CIA) – the three core principles of cyber security: keeping data secret, accurate, and accessible when needed.
- Phishing – fraudulent emails or messages that trick you into revealing sensitive information. Always check the sender's address and avoid clicking suspicious links.
- Malware – malicious software like viruses, ransomware, and spyware. It can infect your device via downloads, email attachments, or compromised websites.
- Social engineering – manipulating people into breaking security procedures, e.g., pretending to be IT support to get your password.
- Password security – using strong, unique passwords for each account, enabling two-factor authentication (2FA), and never sharing passwords.
Exam Tips & Revision Strategies
- Always verify the sender of emails.
- Use strong, unique passwords for different accounts.
- Know your organisation's incident reporting procedure.
Common Misconceptions & Mistakes to Avoid
- Clicking on suspicious links or attachments.
- Using weak passwords or sharing them.
- Delaying reporting of a suspected incident.
Examiner Marking Points
- Identifies common cybersecurity threats and their impacts.
- Explains how personal actions can expose organisational systems.
- Applies basic safe cyber practices in day-to-day work.
- Describes how to raise a suspected cyber incident promptly.