ICDL Cyber Security (ICDL) study plan
ICDL Cyber Security · Give each week a clear focus.
8 weeks · About 6 hours per week
Security concepts & Malware
Define confidentiality, integrity, and availability and give one concrete workplace example of each
Classify common threat actors (insider, outsider, criminal, hacktivist) by motive and typical attack method
Distinguish between vulnerabilities, threats, and risks using five short scenarios
List the main categories of malware (virus, worm, trojan, ransomware, spyware) and state the defining behavior of each
Your checkpoint
A one-page reference sheet mapping each malware category to its defining behavior and one mitigation, scored 8/10 or better on a self-quiz
Malware & Security concepts
Explain how a worm propagates differently from a trojan and predict which spreads faster in a given scenario
Describe how ransomware encrypts files and outline the correct response steps for an infected machine
Identify social-engineering tactics (phishing, pretexting, baiting) embedded in sample messages
Explain the role of signatures and heuristics in antivirus detection and state one limitation of each
Your checkpoint
A written analysis of three provided attack scenarios identifying the malware type, infection vector, and three containment actions for each
Network security & Security concepts
Label the function of firewall, router, switch, and proxy in a simple network diagram
Compare symmetric and asymmetric encryption and state where each is appropriate
Explain how a VPN protects data in transit and name one thing it does not protect
Distinguish authentication from authorization and give an example of each failing
Your checkpoint
A completed network diagram with all four device roles labeled plus a 150-word explanation of how a VPN tunnel secures traffic
Network security & Communications
Explain how WPA2/WPA3 protects a wireless network and list three weaknesses of open or WEP networks
Describe how public Wi-Fi exposes users and list three protective behaviors
Identify spoofing and man-in-the-middle attacks from a described traffic flow
Explain the security role of email authentication concepts (sender verification, encryption in transit) at a conceptual level
Your checkpoint
A cheat sheet of ten network-security facts (five wired/LAN, five wireless) with a self-scored 15-question practice quiz at 80% or higher
Secure Web Use & Communications
Inspect a URL for deceptive elements (misspelled domains, unusual subdomains, misleading paths) and rank five URLs by trustworthiness
Distinguish secure (HTTPS) from insecure connections and explain what the padlock does and does not guarantee
Identify phishing and smishing red flags in sample emails and text messages
Describe safe practices for browser settings, cookies, and downloads
Your checkpoint
A phishing triage log of ten sample messages, each labeled safe or malicious with at least two supporting red flags
Secure Data Management & Communications
Distinguish hashing from encryption and explain why passwords should be stored as salted hashes
Explain the purpose of backups and the 3-2-1 rule, and design a backup schedule for a small office
Describe how to handle personal and sensitive data responsibly, including disposal of physical and digital records
Explain the security implications of sharing files via cloud links versus email attachments
Your checkpoint
A personal or small-office data-protection plan covering backup schedule, password storage, and secure file-sharing rules
Secure Data Management & Secure Web Use
Apply access-control principles (least privilege, need-to-know) to three workplace roles
Explain how encryption at rest protects lost or stolen devices and name two common implementations
Describe how to recognize and avoid oversharing personal data online and in forms
Explain data-retention and deletion obligations at a conceptual level
Your checkpoint
A role-based access matrix for three roles showing allowed data access, with a one-paragraph justification per role
Security concepts & Malware & Network security & Secure Web Use & Communications & Secure Data Management
Recall key definitions and distinctions across all six domains from memory
Diagnose the weakest two domains from practice results and re-review those specific topics
Work through mixed-domain scenario questions under timed conditions
State a personal action plan for continued security hygiene after the exam
Your checkpoint
A full-length timed practice exam scored at 85% or higher, with a written error log of every missed question and its corrected concept
Milestones
Week 2: Score 80% or higher on a 20-question quiz covering security concepts and malware categories
Week 4: Score 80% or higher on a 20-question quiz covering network security and communications, and explain a VPN and a firewall aloud without notes
Week 6: Score 80% or higher on a 20-question quiz covering secure web use and data management, and submit the phishing triage log with no unlabeled messages
Week 8: Score 85% or higher on the full-length timed practice exam and complete the error log with a corrected concept for each miss