Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

CS 2.7: When a weak point is used

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

55 minutes

One flaw, many victims

A small factory has a flaw in the system that controls its machines. An attacker uses it.

The machines stop. Orders are late. A worker's details are stolen. A customer reads about it and leaves.

One weak point, and harm in many places.

Key words

WordWhat it meansExample
Control systema computer system that runs machines or equipmentfactory machines or a fire alarm
Reputationwhat people think of an organisation
Regulatorthe official body that checks the rules are followedthe ICO
Finemoney an organisation must pay as a punishment
Prosecutiontaking someone to court for a crime
Operationsthe daily work of an organisation
Identity theftusing another person's details to pretend to be them
Psychological harmharm to a person's mind or feelings, such as fear or stress

The cells students fill in are left blank in this preview.

By the end of this lesson

Note

I can name seven impacts of a used weak point and match an event to each.

Starter

Have a go

Starter

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

Five impacts on the organisation

The core lesson on threat impacts gave a first list. Here is how each looks when a weak point is used.

1. Damage to property and resources. A flaw in a control system damages machines or buildings.

2. Financial loss. Income is lost because normal work stops.

3. Reputational damage. Customers lose trust after private data is exposed.

Fines and disruption

4. Fines or prosecution. A court or regulator can fine an organisation that broke the rules. The ICO can fine a firm after a data breach.

5. Operational disruption. The firm cannot do its daily operations. Staff sit idle. Orders wait.

These five hurt the organisation. The next two hurt people.

Check

Have a go

Check

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The lesson goes on

7 more parts of this lesson are in the full curriculum, with the tasks, the final check and the labs. A college account gives your students all of it.