A1 Internal threats

A1 Internal threats

1. What does it mean by an internal threat in IT/Computing?
2. Give an example for each point below (first one has been done for you)

• Accidental threats:
• accidental damage to physical equipment caused by employee/user

Example: Laptop accidently dropped on the floor and cracking screen

• accidental loss of data/power, unintentional disclosure of data, authorised user action

Example:

• risk of bring your own device (BYOD)

Example:

• unsafe practices

Example:

• the use of external storage devices/media

Example:

• visiting untrusted websites

Example:

• downloading/uploading files to/from the internet

Example:

• file-sharing applications.

Example:

• Malicious threats:
• malicious damage caused by employee/unauthorised user action

Example:

• intentional deletion/editing of data and intentional disclosure of data

Example:

• dumpster diving and shoulder surfing

Example:

• theft of equipment or data

Example:

• malicious damage to equipment or data

Example:

• unauthorised access by employees to secure areas in a building

Example:

• unauthorised access to administration functions, security levels and protocols,

Example:

• users overriding security controls

Example:

• risk of BYOD

Example:

A2 – External Threats

1. What does it mean by an external threat in IT/Computing?

External threats to computer systems and data:

2. Briefly describe what is malicious software (malware) used to obtain secure information, viruses.

3. For each one write a sentence to describe it (Use only 8 words)

4. What are zero-day attacks?

5. What does it mean by unauthorised access by (10 words)

6. How is social engineering used for (max 10 words)

7. What is the difference between

8. In your own words give an example of malicious damage to equipment or data. (12 words)

A3 – Changing and evolving threats Learners will need to have an awareness that:

Complete the table below in 15 words max for each

A4 – Vulnerabilities Factors that affect the vulnerability of computer systems and data and how each factor impacts on the vulnerability.

1. Describe the different types of system below in 12 words max

2. Describe the connectivity methods below (10 words max)

3. Describe the different connection methods (8 words max)

4. Describe the issues with the terms below in relation to operating systems:

5. Describe the issues with the terms below in relation with software:

6. Describe the issues with the terms below in relation with users: