Anti-malware, firewalls, encryption, access control, backups, penetration testing. Overlaps with network security but focuses on data protection.
—
Best score
—
Last attempt
Best attempt progress
0
XP earned
Watch first — Craig 'n' Dave
Craig 'n' Dave · Edexcel 1CP2Protecting Digital Systems
Key facts
Data protection measures
Backups — copies of data stored separately. Protects against hardware failure, ransomware, accidental deletion. Should be: regular, stored off-site, tested.
Encryption — data scrambled using a key. Only those with the key can read it. Protects data in transit and at rest.
Access control — only authorised users can access data. Implemented via passwords, 2FA, biometrics, permissions.
Anti-malware — scans files against known virus signatures. Quarantines or deletes threats.
Patching — keeping software updated to fix known vulnerabilities.
Legal and ethical context
Data Protection / GDPR — organisations must store data securely, only collect what is needed, tell users how their data is used
Computer Misuse Act — makes unauthorised computer access, modification and attacks illegal
Copyright — software is protected; licensing controls its use
Audit trails — log who accesses or modifies data. Improves accountability. Allows going back to earlier versions.
Anti-malware — how it works (Jun 2024 Q5(d))
1. Load the virus signature database
2. Scan the target file, comparing against known signatures
3. Decide if a virus signature is detected
4. If detected: quarantine/isolate/fix/delete the file
5. If not detected: no further action required
This was a 6-mark flowchart question in Jun 2024 — know the decision logic.
Exam questions — 4 questions · 11 marks · from real 1CP2 past papers
1 markBackup purpose1CP2 Jun 2022 Q4(a) style
Why is it important for an organisation to keep regular backups of its data?
A To speed up the network by storing data on multiple servers
B To allow data to be restored after loss from hardware failure, ransomware, or accidental deletion
C To encrypt data so attackers cannot read it
D To comply with copyright law
2 marksAudit trail1CP2 Jun 2024 Q4(c) style
Explain how an audit trail improves security in an organisation. (2 marks)
Hint: Two linked marks: what an audit trail does (records changes/access) AND why that improves security (accountability/traceability).
+20 XP
2 marksConsent and data1CP2 Jun 2022 Q4(b) style
When collecting personal data from users, describe two things an organisation must inform users about, under data protection law. (2 marks)
Hint: Two distinct things. These come from GDPR requirements — focus on what users need to KNOW before giving consent.
+20 XP
4 marksDiscuss encryption1CP2 style
Explain how encryption protects data both in transit and at rest. Why is encryption not sufficient on its own to protect an organisation's data? (4 marks)
Hint: Cover: what encryption does + in transit example + at rest example + why it's not sufficient alone (give two other measures still needed).