Computer Ethics, Security and Safety
This domain covers responsible use of computers, protecting systems and data, and protecting people's health. The exam tests software licensing, data protection, malware types, countermeasures, and ergonomic and electrical safety.
Ethics and law
Respect copyright and licence terms: proprietary software requires purchase and obeys an EULA; freeware is free but the source is closed; shareware is a trial before payment; open source provides source code under a licence. Data protection principles: collect only what is necessary, use it only for the stated purpose, keep it accurate and secure, do not keep it longer than needed, and allow people to see data held about them. Also netiquette, avoiding plagiarism, and awareness of the digital divide.
Threats and countermeasures
- Virus - attaches to a host file and spreads when that file runs.
- Worm - self-replicating, spreads across networks without a host.
- Trojan - disguises itself as useful software.
- Ransomware - encrypts files and demands payment.
- Spyware/keylogger - secretly collects data such as passwords.
- Phishing - fraudulent email or SMS luring you to reveal credentials; pharming redirects to fake sites through DNS; social engineering manipulates people directly. Countermeasures: firewall, antivirus, regular patching, strong unique passwords, two-factor authentication, encryption, access levels, and offline backups.
Safety
Physical: RSI, eye strain, back and neck pain - use an adjustable chair, monitor top at eye level, wrist support and regular breaks. Electrical: no liquids near equipment, never open the power supply unit, use surge protection. Dispose of e-waste through proper recycling.
Worked example
An email from [email protected] asks you to "verify your PIN" through a link. This is phishing: no genuine bank asks for a PIN by email, the domain is not the bank's, and the link text may hide a different address. Correct response: do not click, report it to the bank, then delete it.
Traps that cost marks
- Claiming antivirus software prevents phishing.
- Confusing a worm with a virus.
- Treating a backup as a form of access control.
- Mixing up security (protecting data) with safety (protecting people).