A Data Rich World: Third level

Know

• DRW-3-CY-K1

  UK GDPR protects people's personal data by requiring organisations to use security measures and handle data responsibly.

  Learn card: UK GDPR

  UK GDPR (the UK General Data Protection Regulation) is the law that protects personal data: information that identifies a living person, such as a name, address, photo or bank details.

  Organisations that hold personal data must use it fairly and only for clear reasons, keep it accurate, not keep it longer than needed, and protect it with suitable security.

  If an organisation loses personal data through poor security, it can be fined, and it may have to tell the people affected.

  What does UK GDPR protect?

  Copyright on music People's personal data Company profits Computer hardware

  Under UK GDPR, an organisation that holds your personal data must...

  post it online keep it secure and handle it responsibly sell it to partners delete it after one day

  Check my answers

  Foundations: FND-DW-E-1, FND-DW-1-1

• DRW-3-CY-K2

  Data is a frequent target and is stolen for identity theft, extortion, industrial spying or to sell to other criminals.

  Learn card: Why attackers want data

  Data is valuable, so it is often what an attack is really after.

  Stolen data can be used for identity theft (pretending to be you), extortion (demanding money not to publish it), industrial spying (a rival copying secrets such as designs) or simply sold to other criminals.

  Personal details like bank information, passwords and dates of birth, and company information like customer lists and plans, are common targets.

  A criminal uses your stolen details to open a bank account in your name. This is...

  extortion identity theft industrial spying a backup

  Threatening to publish stolen data unless paid is called...

  extortion encryption validation phishing

  Check my answers

  Foundations: FND-DW-1-1

• DRW-3-CY-K3

  Data moving through systems and networks can be intercepted or changed.

  Learn card: Data on the move

  When data travels across a network it is split into packets that pass through many devices, such as routers, on the way.

  On an unsafe network (for example open public wi-fi), someone could intercept those packets and read them, or even change them before they arrive.

  Encryption protects data on the move: even if packets are intercepted, they cannot be read. Look for https and the padlock in a browser.

  Why can data sent across a network be at risk?

  It might be intercepted or changed on the way Networks always delete data Data gets heavier It can only be sent once

  Which makes intercepted data useless to an attacker?

  Sending it twice Encrypting it Making the file bigger Using capital letters

  Check my answers

  Builds on: SYS-3 Computing Science: IP addresses, protocols and packets (p.17-18)

• DRW-3-CY-K4

  Encryption turns readable data into unreadable data to keep it secure.

  Learn card: Encryption

  Encryption scrambles readable data (plaintext) into unreadable data (ciphertext) using a key. Only someone with the right key can decrypt it and read it.

  Old ciphers, like the Caesar cipher, are easy to break because there are only 25 possible keys. Modern encryption uses huge numbers of possible keys, so trying them all would take far too long.

  Encryption protects data stored on devices and data travelling across networks.

  What does encryption do?

  Turns readable data into unreadable data Deletes old files Makes data load faster Prints data

  What do you need to turn ciphertext back into plaintext?

  A faster computer The key A bigger screen Nothing

  Check my answers

Do

• DRW-3-CY-D1

  Discuss the different motives for attacks that steal data.

  Motive Match

• DRW-3-CY-D2

  Encrypt and decrypt data using a simple cipher.

  Cipher Workshop

Includes and notes

• Includes: Ciphers, coded messages and unplugged activities.

Reflect