Security, Privacy and Risk
Identifying assets, threats and vulnerabilities, then selecting layered technical and organisational controls that are proportionate to risk.
How to study A-level Computer Science
Define the problem and representation, trace the state change, justify the algorithm or architecture, then test the result against requirements, evidence and constraints.
Core concepts
Concept 1
Security protects confidentiality, integrity and availability against threats exploiting vulnerabilities.
Exam cue: Name the asset, threat, vulnerability, impact and proposed control.
Concept 2
Authentication, authorisation, encryption, secure design, monitoring, backup and user practice address different risks.
Exam cue: Explain what a control reduces and what residual risk remains.
Concept 3
Privacy concerns appropriate collection, access, use, retention and disclosure, not merely secrecy.
Exam cue: Distinguish identity verification, permission checking and cryptographic protection.
Risk pitfalls and guardrails
Saying encryption prevents every kind of attack.
Guardrail: Do not substitute a memorised definition or generic advantage until you have identified the input, state, stakeholder and constraint in the task.
Confusing authentication with authorisation.
Guardrail: Do not substitute a memorised definition or generic advantage until you have identified the input, state, stakeholder and constraint in the task.
Recommending a control without considering usability, cost or the threat model.
Guardrail: Do not substitute a memorised definition or generic advantage until you have identified the input, state, stakeholder and constraint in the task.
Memory anchors
Confidentiality
Confidentiality limits information access to authorised parties.
Integrity
Integrity protects data and systems from unauthorised or accidental alteration.
Availability
Availability keeps authorised services and data accessible when needed.
Authentication
Authentication establishes a claimed identity.
Authorisation
Authorisation determines what an authenticated identity may do.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
What does the confidentiality part of the CIA triad protect?
What does integrity protect?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 247 UK exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”