ICDL IT Security study plan
ICDL IT Security · Give each week a clear focus.
8 weeks · About 6 hours per week
Security concepts & Malware and threats
Define the CIA triad and classify five everyday scenarios under confidentiality, integrity, or availability
Distinguish between vulnerabilities, threats, and risks using three original examples
List the main malware categories (virus, worm, trojan, ransomware, spyware) and state one distinguishing behavior for each
Explain how social engineering differs from technical attack vectors
Your checkpoint
A one-page glossary of 15 security terms with a self-written example for each
Malware and threats & Security concepts
Describe how ransomware encrypts files and outline the correct response steps for an infected machine
Identify phishing, smishing, and vishing attempts from written message samples
Explain the role of updates and patching in reducing malware exposure
Compare signature-based and behavior-based malware detection
Your checkpoint
A written incident-response checklist of at least 8 steps for a suspected malware infection
Network and internet security & Security concepts
Explain what a firewall does and where it sits in a home or office network
Distinguish HTTP from HTTPS and describe what a TLS certificate proves
Identify the risks of public Wi-Fi and list three mitigations
Describe how a VPN protects traffic in transit
Your checkpoint
A labeled diagram of a small home network showing router, firewall, devices, and encrypted vs unencrypted traffic paths
Network and internet security & Access control and data protection
Explain encryption at rest versus encryption in transit with one example each
Distinguish authentication from authorization
Describe multi-factor authentication and classify three factors as knowledge, possession, or inherence
Explain why password reuse across sites is dangerous and how a password manager reduces that risk
Your checkpoint
A 10-question self-quiz on network and access-control concepts, scored and reviewed for weak areas
Access control and data protection & Malware and threats
Apply the principle of least privilege to a shared-folder permission scenario
Compare role-based and attribute-based access control at a high level
Explain how backups (full, incremental, differential) support recovery from ransomware
Describe the 3-2-1 backup rule and evaluate a given backup setup against it
Your checkpoint
A written access-control policy for a fictional 10-person team covering roles, permissions, and backup schedule
Safe and responsible use of IT & Network and internet security
Evaluate the privacy and security implications of oversharing on social media
Explain what personal data is collected by browsers and apps and how to limit it
Describe safe practices for downloading software and verifying its source
Outline the risks of using unlicensed or pirated software
Your checkpoint
A personal digital-hygiene audit checklist with at least 10 items and a pass/fail rating for your own habits
Safe and responsible use of IT & Access control and data protection
Explain legal and ethical responsibilities when handling other people's personal data
Describe how to recognize and report a data breach internally
Apply safe disposal practices for old devices and storage media
Explain the purpose of data-retention limits and consent
Your checkpoint
A short written procedure (1 page) for reporting a suspected data breach, including who to notify and what to record
Security concepts & Malware and threats & Network and internet security & Access control and data protection & Safe and responsible use of IT
Review all five domains using missed-question logs from prior weeks
Re-explain the ten weakest concepts aloud without notes
Complete two timed mixed-domain practice sets and analyze errors
Consolidate a final one-page summary sheet of key definitions and rules
Your checkpoint
A final one-page summary sheet plus a scored 40-question mixed practice test with a written error analysis
Milestones
Week 2: Can explain the difference between a virus, worm, trojan, and ransomware and name the correct first response to ransomware without notes
Week 4: Scores at least 70% on the self-written network and access-control quiz and can explain MFA factors and encryption in transit vs at rest
Week 6: Can apply least privilege and the 3-2-1 backup rule to a new scenario and has completed the personal digital-hygiene audit
Week 8: Scores at least 80% on the 40-question mixed practice test with all missed items logged and re-explained