Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

AC 8.2: Five harms a threat can do

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

40 minutes

One attack on a reporting team

A team of analysts is attacked. What does it lose?

The customer table leaks. A stranger gets into the data warehouse (a big store of data kept for analysis). Sales figures are changed. The dashboard (a screen of live charts) goes down. A thief walks into the drive room.

Each of these is a different harm. Today you learn to tell them apart.

Key words

WordWhat it meansExample
ImpactThe harm that a threat does.
LeakPrivate data gets out to people who should not see it.
Sensitive dataData that would cause harm if it got out.
CorruptionData that has been damaged or changed so it is wrong.
DisruptionWork that is stopped or slowed down.
Restricted areaA place that only some people may enter.a server room
Unauthorised accessGetting in without permission.
Data warehouseA big store of data kept for analysis.
NetworkComputers joined together so they can share data.
MalwareHarmful software.
PhishingA fake message that tricks you into giving away data.
RansomwareMalware that locks files and demands money.
DowntimeThe time a system is not working.

The cells students fill in are left blank in this preview.

By the end of this lesson

Note

I can match a threat or weakness to the impact it has on an organisation.

Starter: what you already know

Have a go

Starter: what you already know

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

Five impacts to know

1. Loss or leaking of sensitive data. Private information gets out or is lost.

2. Unauthorised access to digital systems. A stranger is inside the network or an account.

3. Data corruption. Data is changed or damaged, so it is wrong.

4. Disruption of service. The system is down, so work stops.

5. Unauthorised access to restricted physical areas. Someone enters a room they should not.

Worked example: which threat causes which impact

Threat or weaknessLikely impact
Phishing steals a passwordUnauthorised access to digital systems
Spyware on an analyst laptopLeaking of sensitive data
Malware that changes a results tableData corruption
DDoS attack on the dashboard siteDisruption of service
RansomwareDisruption of service, and often a data leak
Tailgating into the drive roomUnauthorised access to a restricted physical area
A flood in the server roomDisruption of service, and lost data

The cells students fill in are left blank in this preview.

Check: which impact?

Have a go

Check: which impact?

4 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The lesson goes on

9 more parts of this lesson are in the full curriculum, with the tasks, the final check and the labs. A college account gives your students all of it.