Digital Safety, Ethics, Cyber Security and Data Privacy
This domain tests safe and ethical behaviour online, basic security controls, and privacy awareness. Expect malware types, phishing, passwords, encryption, backups, digital footprints, and cyber law.
Core rules and concepts
- The CIA triad: confidentiality, integrity, and availability.
- Malware includes viruses (attach to files), worms (self-spread), trojans (disguise as useful), and ransomware (encrypts data for payment).
- Phishing is deceptive social engineering that steals credentials or data. Red flags include unknown domains, urgency, credential requests, generic greetings, and suspicious links.
- Authentication: use strong unique passwords, a password manager, and two-factor authentication. Never share an OTP.
- Controls: firewall, antivirus, updates, encryption, and regular backups. A 3-2-1 backup keeps three copies, on two media, with one off-site.
- PII is personally identifiable information. Collect only what is needed, obtain consent, and limit access.
- Ethics covers copyright, plagiarism, cyberbullying, and responsible disclosure. In India, the IT Act 2000 provides a legal framework for electronic records and cyber offences.
Worked example
An email from [email protected] says your account will be blocked in two hours and asks you to confirm your PIN through a link. Reasoning: the domain is not the bank's, the deadline creates urgency, and no bank needs a PIN by link. Action: do not click; open the official app or type the known URL; report the message; if credentials were entered, change the password and contact the bank.
Traps that cost marks
A padlock does not prove a site is honest. Antivirus does not replace backups. HTTPS does not make content trustworthy. Spam is unsolicited bulk mail; phishing is deceptive theft. Do not forward hoaxes or share OTPs.