The best firewall is a person
A fake email arrives. A tired worker is about to click the link. Then they remember last month's training: "Check the sender first."
No machine stopped that click. A person did. Directive controls build staff who think about security every day.
Key words
| Word | What it means | Example |
|---|---|---|
| Directive control | A control that tells people what to do and builds a security-minded culture. | |
| Culture | The habits and attitudes people share at work. | |
| Signage | Signs that give a rule or a warning. | |
| ID badge | A card with your photo and name that you wear at work. | |
| Agreement | A written promise that people sign. | a confidentiality agreement |
| Policy | A written rule from the organisation. | |
| Human firewall | Staff trained to spot and stop attacks, such as fake emails. | |
| Phishing | A fake message that tricks you into giving away data. | |
| Network | Computers and devices joined together so they can share data. |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can name directive controls and explain how they shape what staff do.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Cycle 1: signs and badges
Signage tells people what to do. "Authorised staff only." "Close the door behind you." "Visitors must sign in."
Mandatory ID badge display means everyone wears a badge, staff and visitors. A person without one stands out, and anyone may ask who they are.
These do not lock anything. They set the rule and make it normal.
Cycle 2: papers and training
Agreements are signed promises, such as a confidentiality agreement or a network use agreement. General security policies say how to treat passwords, data and equipment.
Regular and compulsory training keeps the rules fresh. Every member of staff takes it, on a timetable. Human firewall training teaches people to spot phishing and other tricks.
Directive controls and what they tell people
| Control | What it tells people |
|---|---|
| Signage | Where not to go and what to do |
| ID badge display | Wear your badge. Challenge people without one. |
| Agreement | What you promise to do or not do |
| Security policy | How to handle passwords, data and devices |
| Compulsory training | How to spot and report attacks |
The cells students fill in are left blank in this preview.
Check: tell people what to do
Have a go
Check: tell people what to do
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.