Map › Systems, Third level
Systems: Third level
Framework pages 17-18 · Cyber sub-strand
Understand
How a system behaves and performs depends on how its people, processes and resources interact.
Know
-
SYS-3-CY-K1
Cyber security keeps data and systems safe from threats such as malware, hacking and viruses.
Learn card: What is cyber security?
Cyber security is about protecting computers, networks and the data on them from people or software that want to steal, change or damage them.
Threats include malware (harmful software such as viruses), hacking (getting into a system without permission) and tricks aimed at people, such as fake emails.
Security protects three things: keeping data private, keeping it correct, and keeping systems working when people need them.
-
SYS-3-CY-K2
Malware is any software made to harm, disrupt or gain unauthorised access to a computer, network or device.
Learn card: Malware
Malware is short for malicious software: any program written on purpose to harm a computer, disrupt it, or let someone in who shouldn't be there.
There are different types. A virus attaches itself to files and spreads when they are shared. A worm spreads across a network by itself. A trojan pretends to be something useful. Spyware secretly watches what you do. Botnet malware lets a criminal control many computers at once. Ransomware locks your files until you pay.
Malware often gets in through email attachments, fake downloads, and computers that have missed security updates.
-
SYS-3-CY-K3
Social engineering is an attack that tricks people into giving away information or access.
Learn card: Social engineering
Social engineering is an attack that tricks a person instead of breaking the technology. It is often easier to fool someone into handing over a password than to crack it.
Attackers pull "levers" on people: pretending to be someone in charge (authority), rushing you (urgency), relying on you being kind (helpfulness), making you curious, or scaring you.
Common examples are phishing emails, fake phone calls from "IT support", and following someone through a locked door. The best defence is to slow down and check through a route you already trust.
-
SYS-3-CY-K4
Defensive cyber security protects users and computer systems.
Learn card: Defending systems
Defensive cyber security is everything done to protect users and systems: stopping attacks, spotting them early and recovering afterwards.
Defences can be technical (updates, firewalls, anti-malware, encryption, backups, two-step verification) or about people and rules (training, strong password habits, only giving people the access they need).
No single defence stops everything, so organisations use several layers. If one fails, another can still help.
Do
-
SYS-3-CY-D1
Outline measures that reduce the effects of cyber threats.
Foundations: FND-DW-E-2, FND-DW-2-3, FND-SYS-2-1
-
SYS-3-CY-D2
Describe the different types of malware.
-
SYS-3-CY-D3
Describe how social engineering can be used to gain access to a computer system.
-
SYS-3-CY-D4
Spot signs that an email, message, website or request may be suspicious.
Foundations: FND-DW-1-2
-
SYS-3-CY-D5
Outline steps to take when an account, device or data has been compromised.
Includes and notes
- Includes: Malware types: viruses, trojans, worms, spyware, botnet malware and ransomware.