Computer Security and Cyber Risks

What this topic covers

Candidates should be able to define computer security, identify different types of computer security and their characteristics (Network security, Internet security (cyber), Application Security, Data security, Information security, End user security). They should identify appropriate security tools for different types of computer security (Firewalls, antivirus software, encryption), identify categories of application threats and their characteristics (Input, authorization, session management, parameter tampering), and identify basic dimensions of Information Security (Confidentiality, Integrity, and Availability - CIA). Furthermore, they should mention Network security issues (unauthorized intrusion, rules and configurations that protect confidentiality, integrity, and accessibility using both software and hardware) and Network security methods (antivirus software, application security, behavioral analytics, data loss prevention, email security, firewalls, mobile device security, network segmentation, security and event management (SEIM), Virtual Private Network (VPN), Web security, wireless security, Network Access Control (NAC)). They should also list Types of cyber security threats (Cybercrime, cyber-attack, cyber terrorism, malware, virus, trojans, spyware, Ransomware, Adware, Botnets, SQL injection, Phishing, Man-in-the-middle attack, Denial of Service, Dridex, Romance scams, Emotet malware) and list Cyber security safety tips (Regular software/OS updates, anti-virus software, strong passwords, not opening email attachments from unknown senders, not clicking on links from unknown senders or unfamiliar websites, avoiding unsecure WIFI networks in public places).