My progress log
Log in to see your log.
| Statement | Status | Last activity | Evidence |
|---|---|---|---|
| MIH-3: Make It Happen, Third | |||
| MIH-3-CY-K1 Passive reconnaissance gathers information from public sources without contacting or accessing the target system. | not started | ||
| MIH-3-CY-K2 Open-source intelligence (OSINT) finds useful information in public sources, such as websites, news, social media and satellite images, that can reveal weaknesses. | not started | ||
| MIH-3-CY-K3 Active reconnaissance collects information by communicating with a system directly, for example scanning a network for devices and open ports. | not started | ||
| MIH-3-CY-K4 In security testing an organisation hires someone, such as an ethical hacker, to try to break in so that weaknesses can be found and fixed. | not started | ||
| MIH-3-CY-K5 Security testing has to be repeated regularly because new weaknesses and threats keep appearing. | not started | ||
| MIH-3-CY-K6 Security testing is legal and ethical only when the tester has permission, there are clear boundaries and the purpose is defensive. | not started | ||
| MIH-3-CY-D1 Carry out passive reconnaissance on a system safely and ethically. | not started | ||
| MIH-3-CY-D2 Use OSINT to gather information on a person, organisation or computer system. | not started | ||
| MIH-3-CY-U Reflection: Reliable solutions come from the skilled use of tools, processes and resources within a design and development process. | not started | ||
| MIH-4: Make It Happen, Fourth | |||
| MIH-4-CY-K1 An organisation can employ a security tester to target particular parts of a system and report the weaknesses found. | not started | ||
| MIH-4-CY-K2 Operating systems run on many devices, including phones, cars, supercomputers, home appliances and desktops, and manage the hardware, software and apps. | not started | ||
| MIH-4-CY-K3 A command line lets a user control a computer by typing commands instead of clicking. | not started | ||
| MIH-4-CY-D1 Show that a security test agreement has been followed and present the information gathered to the client. | not started | ||
| MIH-4-CY-D2 Research cases where independent ethical hackers have exposed weaknesses in large tech companies' systems. | not started | ||
| MIH-4-CY-D3 Use the command line, in an operating system or a simulation, for file management or to gather system information. | not started | ||
| MIH-4-CY-U Reflection: Successful solutions need technical skill, precision and informed decisions about how tools, resources and technologies behave and interact. | not started | ||
| SYS-3: Systems, Third | |||
| SYS-3-CY-K1 Cyber security keeps data and systems safe from threats such as malware, hacking and viruses. | not started | ||
| SYS-3-CY-K2 Malware is any software made to harm, disrupt or gain unauthorised access to a computer, network or device. | not started | ||
| SYS-3-CY-K3 Social engineering is an attack that tricks people into giving away information or access. | not started | ||
| SYS-3-CY-K4 Defensive cyber security protects users and computer systems. | not started | ||
| SYS-3-CY-D1 Outline measures that reduce the effects of cyber threats. | not started | ||
| SYS-3-CY-D2 Describe the different types of malware. | not started | ||
| SYS-3-CY-D3 Describe how social engineering can be used to gain access to a computer system. | not started | ||
| SYS-3-CY-D4 Spot signs that an email, message, website or request may be suspicious. | not started | ||
| SYS-3-CY-D5 Outline steps to take when an account, device or data has been compromised. | not started | ||
| SYS-3-CY-U Reflection: How a system behaves and performs depends on how its people, processes and resources interact. | not started | ||
| SYS-4: Systems, Fourth | |||
| SYS-4-CY-K1 Cyber resilience is an organisation's ability to anticipate, withstand, recover from and adapt to attacks and data breaches. | not started | ||
| SYS-4-CY-K2 A resilience framework gives a structured way to identify and assess cyber risks and plan recovery. | not started | ||
| SYS-4-CY-K3 Digital forensics is collecting and analysing digital evidence after a cyber incident. | not started | ||
| SYS-4-CY-D1 Respond to changing cyber-attack scenarios or simulations and explain the decisions made. | not started | ||
| SYS-4-CY-D2 Explain why security has to be balanced against usability, cost and ethics. | not started | ||
| SYS-4-CY-U Reflection: Interactions between technological, social and digital systems can create outcomes that are hard to predict or control. | not started | ||
| PP-3: People and Planet, Third | |||
| PP-3-CY-K1 Old or replaced devices can be vulnerable because they often stop getting security updates. | not started | ||
| PP-3-CY-K2 A device that is not wiped properly can expose personal, financial or organisation data. | not started | ||
| PP-3-CY-K3 Attacks often target sensitive information, such as customer and staff data and intellectual property. | not started | ||
| PP-3-CY-D1 Consider measures to keep older devices secure. | not started | ||
| PP-3-CY-D2 Explore how data and devices are disposed of securely. | not started | ||
| PP-3-CY-D3 Explore real cyber attacks and consider their effects on individuals. | not started | ||
| PP-3-CY-U Reflection: Technology and innovation decisions need to balance the needs of people, communities and the environment. | not started | ||
| PP-4: People and Planet, Fourth | |||
| PP-4-CY-K1 Cyber attacks can cause data breaches and outages that stop production, lose money and damage supply chains. | not started | ||
| PP-4-CY-K2 National-security cyber threats come from groups or individuals who use digital technology to disrupt or get into systems the country depends on: infrastructure, institutions, services, the economy and public safety. | not started | ||
| PP-4-CY-D1 Explore real cyber attacks and consider their effects on organisations. | not started | ||
| PP-4-CY-U Reflection: Responsible technology decisions balance ethical, social, environmental and economic considerations. | not started | ||
| DRW-3: A Data Rich World, Third | |||
| DRW-3-CY-K1 UK GDPR protects people's personal data by requiring organisations to use security measures and handle data responsibly. | not started | ||
| DRW-3-CY-K2 Data is a frequent target and is stolen for identity theft, extortion, industrial spying or to sell to other criminals. | not started | ||
| DRW-3-CY-K3 Data moving through systems and networks can be intercepted or changed. | not started | ||
| DRW-3-CY-K4 Encryption turns readable data into unreadable data to keep it secure. | not started | ||
| DRW-3-CY-D1 Discuss the different motives for attacks that steal data. | not started | ||
| DRW-3-CY-D2 Encrypt and decrypt data using a simple cipher. | not started | ||
| DRW-3-CY-U Reflection: Data has value, and decisions are better informed when data sources, quality and patterns are critically analysed. | not started | ||
| DRW-4: A Data Rich World, Fourth | |||
| DRW-4-CY-K1 UK GDPR requires organisations to think about data security and protection at every stage of handling data. | not started | ||
| DRW-4-CY-K2 End-to-end encryption locks data on the sender's device and unlocks it only on the recipient's, so no third party can read or alter it on the way. | not started | ||
| DRW-4-CY-K3 A digital certificate is an electronic proof of identity for a person or organisation on a network, used to build trust and secure connections. | not started | ||
| DRW-4-CY-K4 Data poisoning attacks AI systems by deliberately adding false or malicious data to the training set. | not started | ||
| DRW-4-CY-D1 Explore the advantages and disadvantages of end-to-end encryption. | not started | ||
| DRW-4-CY-D2 Explore how to identify a digital certificate. | not started | ||
| DRW-4-CY-D3 Identify real-world contexts where a data-poisoning attack could cause serious harm. | not started | ||
| DRW-4-CY-U Reflection: The quality, quantity, structure and balance of data decide how reliable analyses are and how accurate technologies, including AI, can be. | not started | ||
| Foundations (Early to Second level) | |||
| FND-DW-E-1 Ask for and give consent before photos, video or audio are captured or shared. | not started | ||
| FND-DW-E-2 Lock devices with passwords, PINs or face unlock and keep them safe. | not started | ||
| FND-DW-1-1 Recognise personal data and that devices can be secured to protect it. | not started | ||
| FND-DW-1-2 Spot examples of misinformation. | not started | ||
| FND-DW-2-1 Getting into devices or data without permission is hacking, and it is illegal. | not started | ||
| FND-DW-2-2 Organise files in folders, set permissions, and look at a file's metadata and settings. | not started | ||
| FND-DW-2-3 Plan steps to keep familiar devices and a home network secure. | not started | ||
| FND-DW-2-4 Judge how reliable information is (Currency, Relevance, Authority, Accuracy, Purpose) and spot disinformation. | not started | ||
| FND-SYS-2-1 Describe how to protect a home network from people who should not use it. | not started | ||
| FND-PP-2-1 Devices can still hold data when they are no longer used. | not started | ||