Data Security — common mistakes

In exams, when asked to describe a security measure, be specific and explain how it works. Instead of just saying 'use a firewall', a better answer would be 'use a firewall to block traffic from unrecognised IP addresses on specific ports'. Similarly, for threats, clearly distinguish between different types of malware like viruses and worms. Precision earns marks.

The key difference is how they spread. A virus needs a host program and typically requires human action to propagate (e.g., you opening an infected email attachment). A worm is a standalone piece of malware that can replicate and spread by itself across a network, exploiting vulnerabilities without any human intervention.

No. A firewall is an essential part of security, but it's not a complete solution. It primarily protects against network-based threats by filtering traffic. It won't protect against malware introduced via a USB drive or a user being tricked by a phishing email. A good security strategy is 'defence in depth', using multiple layers like a firewall, anti-virus software, strong passwords, and user education.

Because humans can be tricked or make mistakes that bypass even the most sophisticated technical defences. An employee falling for a phishing scam and giving away their password, using a weak password like '123456', or losing an unencrypted laptop can all lead to major data breaches. This is why staff training is a critical component of data security.