ICDL IT Security study guide
ICDL IT Security · Work through your exam, one topic at a time.
ICDL IT Security (also referred to as ICDL Cyber Security) is a certification in the ICDL family of digital-skills qualifications. ICDL describes itself as a global social enterprise committed to raising standards of digital competence in the workforce, education and society, with certification available in more than 100 countries through a network of more than 20,000 testing centres. The ICDL Cyber Security syllabus version 3.0 was announced on 12 June 2026, framed around protecting the modern workplace against increasingly sophisticated threats. Candidates typically cover five areas: core security concepts; malware and other threats; network and internet security; access control and data protection; and safe, responsible use of IT. The ICDL IT Security study guide has 5 sections and about 1,587 words.
01Security Concepts
Information security rests on the CIA triad : Confidentiality (only authorised people can read data), Integrity (data is accurate and unaltered), and Availability (systems and data are reachable when needed). A useful extension adds Authentication (proving identity) and Non-repudiation (you cannot later deny an action).
333 words, about 2 min02Malware and Threats
Viruses attach to files and need a host program plus user action to spread. Worms self-replicate across networks without user action.
323 words, about 2 min03Network and Internet Security
A firewall filters traffic by rules between networks; a personal firewall protects a single device. An intrusion detection system (IDS) monitors and alerts; an intrusion prevention system (IPS) can also block.
307 words, about 2 min04Access Control and Data Protection
Authentication proves identity via three factor types: something you know (password, PIN), something you have (token, phone, smart card), and something you are (fingerprint, face). Multi-factor authentication (MFA) combines different types - a password plus a one-time code is true MFA; two passwords are not.
293 words, about 1 min05Safe and Responsible Use of IT
Organisations publish acceptable use policies , password policies , data-handling rules , and social-media guidelines . Following them is part of professional responsibility.
331 words, about 2 min