Networks & security · Both

Cyber Security Threats & Prevention

Security is about protecting data and systems from unauthorised access and damage. Technical and human factors both matter.

Threats

• **Malware** – viruses, worms, trojans, ransomware • **Phishing** – fake messages to steal details • **Social engineering** – tricking people • Brute force, shouldering, insecure networks

Prevention

• Strong authentication and passwords / MFA • Anti-malware and updates/patches • Firewalls and secure configuration • Encryption of sensitive data • User education and acceptable use policies

Worked example

Why is user education part of security?

Solution: Many attacks rely on people clicking links or sharing details – technical controls alone are not enough.

Practice questions

1. Name three types of malware.

2. Give two prevention methods.