Security, Safety, Ethics and the Law
What you must know
Security threats: malware (virus, worm, Trojan), phishing, pharming, hacking, spyware and social engineering. Protection: strong passwords, encryption, firewalls, antivirus, backups, two-factor authentication and access levels. Safety: repetitive strain injury, eye strain, back problems, electrocution and fire risks, plus ergonomic solutions. Ethics and law: data protection principles, computer misuse, copyright, software piracy and acceptable use policies.
Traps candidates fall into
- Confusing a virus (needs a host file) with a worm (self-replicating).
- Mixing phishing (fake messages) with pharming (redirecting to fake sites).
- Treating encryption as protection against deletion - it protects confidentiality.
- Forgetting backups must be stored off-site and tested.
- Ignoring legal duties when handling personal data.
Rule of thumb
For each threat, name the threat, the protection and the user behaviour that reduces risk - examiners want all three.
Worked example
"How to protect a school network?" Firewall blocks unauthorised access, antivirus scans files, strong passwords and two-factor authentication protect accounts, regular off-site backups allow recovery, and staff training reduces phishing success.