1. Year 10 ICT
ECDL/ICDL IT Security

2. What is it about?
This module sets out essential concepts and skills relating to the ability to understand main concepts underlying the secure use of ICT in daily life. It also teaches us to use relevant technologies and applications to maintain a secure network connection, use the internet safely and securely, and manage data and information appropriately.

3. Goals of this Module
Understand the key concepts relating to the importance of secure information and data, physical security, privacy and identity theft.
Protect a computer, device or network from malware and unauthorised access.
Understand the types of networks, connection types and network specific issues including firewalls.
Browse the World Wide Web and communicate on the internet securely.
Understand security issues related to communications including and instant messaging.
Back up and restore data appropriately and safely, and securely dispose of data and devices.

4. 1 Security Concepts 1.1 Data Threats This section will introduce
the main concepts underlying the secure use of ICT in daily
life. It will explain threats to your data, and give you an understanding of measures you
can take to protect it.
1.1
Data Threats
When working with data, it is important to be aware of potential threats that may pose a
security risk through the theft of or loss of the data. Once you are aware of potential
these of
outcome
the
against
data
your
yourself to
easier is it
threats,
and
protect
threats.
Methods of protection will be covered later in this Module.
Distinguish between data and information
1.1.1
Data
are facts, numbers or images that are collected to be examined and considered, in order
to help in decision-making.
Information
is the interpretation of this data in a structured way, in
order to provide knowledge based on study, experience or instruction.
For example, if you conduct a survey to ask 500 people of different ages and different
professions how they use IT in their day-
day lives, the answers these 500 people give to your -
questions are ‘data’. When you analyse this data,
you obtain ‘information’, which gives you
knowledge about how the use of IT is affected by age and profession.

5. Data Threats
When working with Data, it is important to be aware of potential threats that may pose a security risk through theft or loss of data.
Once you are aware of potential threats, it is easier to protect yourself against them.

6. Distinguishing between Data and Info
Data is facts, images and/or numbers that are collected to be examined and considered in order to help make decisions.
Information is the interpretation of this data in a structured way.
Example: You ask 200 people what type of phone they have. The answers you receive are classified as data. When you analyse this date, you get information.

7. Cybercrime
Cybercrime is the use of any computer, or network, to commit a crime.
Financial Scam
Computer Hacking
Downloading Pornographic Images from the Internet
Virus Attacks
Stalking by
Creating Websites that promote racial hatred
Identity theft
Social Engineering.

8. Hacking, Cracking and Ethical Hacking
A hacker is an individual who attempts to bypass the security mechanisms of a network or information system.
A cracker is someone who exploits the weaknesses and security holes with malicious intent such as blocking accounts, or stealing information.

9. Hacking, Cracking and Ethical Hacking
Ethical hackers are computer security experts. They are employed by a company to attempt to bypass the security of said company’s information systems. The company can then act on this information, making their network safer.

10. Threats to Data
Force majeure relates to unforeseen events beyond the control of the company. Items include war, natural disasters, system crashes and corruption.
Employees can pose a risk to confidential information. They could pass information on to other people, or use it for their own advantage. They could even accidentally delete it.

11. Value of Information
Personal Information is any info or combination of information that enables the identification of an individual.
Personal information must be protected to prevent:
Internet based fraud
Identity Theft

12. Value of Information Commercially Sensitive Information includes:
Statements of financial information
Information of a company’s pricing structure
Information in the nature of operating and financial information
Current client lists, production costs, hourly rates etc.

13. Value of Information
Commercially sensitive information must be protected to prevent:
Theft
Misuse of client details
Misuse of financial information

14. Preventing Unauthorized Access to Data
Using a username and have a good password
How strong is your password? (school, social media, home)

15. Protecting Data Data Encryption
The process of transforming information (plaintext) using an algorithm (cipher) to make it unreadable to anyone except those possessing special knowledge. The resulting product is encrypted information (ciphertext).
Reversing the process is called decryption.