Information Technology
Domain focus
Information Technology in CICT tests whether you can explain how data becomes useful information, identify hardware and software components, describe basic networks and databases, and apply confidentiality, integrity and availability (CIA) controls in a small organisation.
Core rules and concepts
- Input–process–output: hardware accepts data, the CPU processes it, and output or storage follows. RAM is volatile working memory; ROM is non-volatile firmware; secondary storage retains data without power.
- System software (operating system, utilities) runs the machine; application software performs user tasks such as payroll or spreadsheets.
- A network shares resources using protocols. A LAN is local; a WAN spans sites. Topology affects cost and resilience: a star depends on the central switch, while a mesh offers alternate paths.
- A database stores related data in tables; a primary key uniquely identifies a row, and a foreign key links tables.
- Security controls should be layered: strong authentication, least privilege, patching, encryption and tested backups.
Worked example
A 20 MB file is sent over an 8 Mbps link. Convert units first: 20 MB = 20 × 8 = 160 megabits. Time = 160 Mb ÷ 8 Mbps = 20 seconds, ignoring overhead. A common error is dividing 20 by 8, which mixes bytes and bits.
Traps
Do not call RAM permanent storage. Do not treat a backup as an archive, or a password as encryption. Distinguish a trial balance from an IT control checklist; in this paper, justify controls by the risk they reduce.