https://drive.google

I apologize, but I am unable to access external links, including the Google Drive link you provided. Please share the content directly in the chat so I can assist you with creating or revising notes, or answering your questions.

Lesson 1: You and Your Data - Cybersecurity

Objectives:

  • Explain the difference between data and information.

  • Critique online services regarding data privacy.

  • Identify what happens to data entered online.

  • Explain the need for the Data Protection Act.

Motives Behind Attacks

Cyberattacks often aim to steal or gain access to data.

Cybersecurity Unit Overview

In this unit, you will gain an awareness of:

  • The importance and value of data.

  • How human actions can make data more vulnerable to theft or exploitation.

  • Common cyberattacks.

  • Measures put in place on networks to help protect IT systems from attacks.

Data and Information

  • Data is raw facts and figures: For example, John: 28, Claire: 49.

  • Information is created when data has been processed and becomes meaningful: For example, "These are scores from a test where the pass mark was 35. John needs to resit the test. The average score is 40."

Value of Customer Data

Businesses value customer data because it can be used to build a profile of a customer. For instance, a shopping basket containing a tent, dog toys, and a fitness tracker can lead to assumptions about the customer's interests and habits, converting raw data into valuable information.

Data Social Media Companies Might Collect

Social media companies collect various types of data:

  • Personal info: Name, date of birth.

  • Content: Images, status updates, emojis created.

  • User behaviour: Pages visited, groups joined, content 'liked'.

  • Data you have on others: Names of friends, their numbers.

Social media companies often make money by using and selling this data for targeted advertising, even if their services are free to use.

Privacy Policies: Be Informed

It is important to research and understand what data companies like Snapchat, Instagram, Google, and Facebook collect about their users by reviewing their privacy policies.

Consequences of Data Theft

If cybercriminals successfully steal data from companies, both the users (data subjects) and the companies would suffer:

  • For individuals: Identity theft, financial loss, reputational damage.

  • For companies: Loss of trust, legal penalties, financial losses, damage to brand reputation.

Data Protection Act 2018 Principles

All organizations and people using and storing personal data must abide by principles ensuring data is:

  • Used fairly, lawfully and transparently

  • Used for specified, explicit purposes

  • Adequate, relevant and limited to what is necessary

  • Accurate and, where necessary, kept up to date

  • Kept for no longer than is necessary

  • Handled in a way that ensures appropriate security.

Data Protection Act 2018: Your Rights (as a Data Subject)

As a data subject, you have the right to find out what information organizations store about you. Key rights include:

  • The right to be informed

  • The right of access

  • The right to rectification

  • The right to erasure

  • The right to restrict processing

  • The right to data portability

  • The right to object

  • Rights in relation to automated decision making and profiling

These rights also apply when an organization uses your personal data for:

  • Automated decision-making processes without human involvement (e.g., loan approvals by computer).

  • Profiling, to predict your