Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

CS 2.10: Three kinds of risk at work

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

50 minutes

The support contract that ran out

A small firm pays for help with its main server. The contract ends on Friday. Nobody has the date in a diary.

On Monday the server breaks. The helpers say: you are no longer covered.

A report on the first of the month could have warned the firm. Today you learn about that report.

By the end of this lesson

Note

I can sort a risk into compliance, safety or information security and name one way to manage it.

Key words

WordWhat it means
Compliance riskharm from not following the rules and procedures
Safety riskharm to people, property or the environment
Information security riskbusiness information is lost, stolen, copied or spoiled
Exception reporta report that warns managers of coming problems
Procedurethe set of steps for doing a job
Audita check that a job is done the way it should be
Network trafficthe data that moves across a network
Access controla rule that decides who may open or change something
Human errora mistake made by a person

The cells students fill in are left blank in this preview.

Starter

Have a go

Starter

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

Three kinds of risk

An organisation meets many risks. Three groups matter here.

A compliance risk comes from not following policies and procedures. A safety risk is harm to people, property or the environment. An information security risk is a loss, theft, copy or change of business information.

The three kinds side by side

Kind of riskAn exampleHow it is managed
ComplianceStaff skip the password policyCheck and update the processes. Use controls that watch for it. Write exception reports
SafetyCables across a corridorCheck for human error often. Audit the maintenance work
Information securityA USB stick of customer data goes missingAccess controls, traffic watching, device rules and training

The cells students fill in are left blank in this preview.

Check

Have a go

Check

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The lesson goes on

8 more parts of this lesson are in the full curriculum, with the tasks, the final check and the labs. A college account gives your students all of it.