This subtopic introduces the fundamental principles of cyber security, equipping learners with the knowledge to protect digital assets in a professional IT
Topic Synopsis
This subtopic introduces the fundamental principles of cyber security, equipping learners with the knowledge to protect digital assets in a professional IT environment. It focuses on the core terminology, key concepts such as the CIA triad, and the importance of understanding cyber threats and vulnerabilities. Practical application is emphasised through the lens of cyber threat intelligence, enabling proactive identification and mitigation of security risks.
Key Concepts & Core Principles
- Academic Integrity and Plagiarism: Understanding the importance of honesty in academic work, how to correctly attribute sources, and the severe consequences of plagiarism.
- Effective Research Skills: Developing strategies for identifying reliable information sources, evaluating their credibility, and extracting relevant data for IT-related assignments.
- Time Management and Organisation: Implementing techniques for planning study schedules, prioritising tasks, setting realistic goals, and managing deadlines efficiently across multiple units.
- Critical Thinking and Problem Solving: Applying analytical skills to evaluate information, identify underlying issues, formulate logical arguments, and develop reasoned solutions, particularly within IT contexts.
- Referencing and Citation: Mastering the appropriate referencing styles (e.g., Harvard, APA, as specified by OTHM) to acknowledge sources accurately and avoid academic misconduct.
Exam Tips & Revision Strategies
- Always support definitions and explanations with real-world examples, such as recent high-profile cyber attacks, to show depth of understanding.
- When addressing scenario-based questions, structure answers using a recognised security framework (e.g., NIST’s Identify, Protect, Detect, Respond, Recover) to demonstrate systematic thinking.
- In written assignments, clearly differentiate between strategic, operational, and tactical threat intelligence, linking each to practical security outcomes.
Common Misconceptions & Mistakes to Avoid
- Confusing the terms vulnerability, threat, and risk; a vulnerability is a weakness, a threat exploits it, and risk is the potential impact.
- Overlooking the human element in cyber security, such as social engineering and insider threats, focusing solely on technical controls.
- Viewing threat intelligence as purely technical indicators of compromise, ignoring its strategic value for business-wide security planning.
Examiner Marking Points
- Award credit for accurately defining core cyber security terminology (e.g., malware, phishing, ransomware) with relevant examples.
- Credit for demonstrating understanding of the CIA triad and applying it to real-world security scenarios.
- Credit for explaining how threat intelligence sources (e.g., open-source, commercial feeds) support risk management.
- Credit for categorising different threat actors (e.g., hacktivists, cybercriminals, insider threats) and their typical motivations.