Four problems on one list
A school office has four security worries. A teacher uses the same password everywhere. The server room door does not lock. The old printer still has a default login. Staff may click a fake email.
There is time to fix one this week. Which one goes first, and how do you prove it?
By the end of this lesson
Note
I can score a risk by likelihood and severity and put a list of risks in priority order.
Key words
| Word | What it means |
|---|---|
| Threat | something that could cause harm |
| Vulnerability | a weak point that a threat could use |
| Risk | the chance of harm, and how bad it would be |
| Likelihood | how likely it is to happen, scored 1 to 5 |
| Severity | how bad the harm would be, scored 1 to 5 |
| Priority | how soon something must be dealt with |
| RAG rating | red, amber or green: a colour for how urgent a risk is |
The cells students fill in are left blank in this preview.
Starter
Have a go
Starter
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Threat, vulnerability and risk are different
The core security lessons explain threats, weak points and defences. Here you put them to work.
A threat is the thing that could hurt you. A vulnerability is the weak point it could use. A risk joins the two: how likely the harm is and how bad it would be.
Sorting the office list
| Item | Is it a... | Why |
|---|---|---|
| A person sends fake emails | Threat | It could cause harm |
| Staff who click without thinking | Vulnerability | A weak point the threat can use |
| Money stolen after a fake email works | Risk outcome | The harm, once likelihood and severity are judged |
| A door that does not lock | Vulnerability | A weak point |
The cells students fill in are left blank in this preview.
Check
Have a go
Check
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.