ICDL Cyber Security (ICDL) study plan

Define the core security principles of confidentiality, integrity and availability and give one concrete example of each in a workplace setting

Distinguish between a threat, a vulnerability and a risk, and classify five everyday scenarios into those three categories

List at least six common malware and social-engineering threat types and describe how each typically reaches a user

Identify the three components of the CIA-style risk equation (asset, threat, impact) when reading a short incident description

Analyse five realistic phishing and smishing samples and annotate the specific red flags in each

Explain how ransomware, trojans and spyware differ in behaviour and in the damage they cause

Describe at least four social-engineering tactics (pretexting, urgency, authority, baiting) and match each to a countermeasure

Rank a list of ten threat scenarios by likelihood and impact and justify the top three rankings

Explain how software vulnerabilities and missing updates are exploited and describe the patch-management response

Compare password-based, multi-factor and biometric authentication on strength and usability

Configure (or describe step by step) multi-factor authentication on a personal account and verify it works

Distinguish encryption at rest from encryption in transit and state where each applies

Describe how firewalls, antivirus and anti-malware tools complement each other rather than replace each other

Outline a safe backup routine covering the 3-2-1 principle and test a restore of one file

Differentiate secure disposal of data across devices (wipe, factory reset, physical destruction)

Apply device-hardening steps: screen lock, automatic updates, least-privilege accounts