What is Cyber Security?

🎯

Learning Objectives

Define cyber security in simple and practical terms.
Explain why cyber security is important in modern society.
Identify the major assets that cyber security protects.
Understand the relationship between people, processes, and technology in security.
Identify common environments where cyber security is required.
Understand the difference between cyber security and general computer use.
Explain how cyber security supports organizations and individuals.
Understand the basic responsibilities of a cyber security professional.
Recognize that security is an ongoing process rather than a one-time activity.
Develop a foundational security mindset for further study.

📖

Lesson Content

Introduction

Cyber security is one of the most important areas of modern technology.
Almost every organization, business, government institution and individual
now depends on computers, mobile devices, networks, applications and digital
services.

These technologies make communication and information sharing easier, but
they also create opportunities for unauthorized access, fraud, data theft,
malware infections, service disruption and other forms of cyber abuse.

Cyber security provides the knowledge, technologies, processes and practices
used to protect digital systems and information from unauthorized access,
misuse, damage, disruption or destruction.

Cyber security is the practice of protecting computers,
networks, applications, devices, systems and digital information against
unauthorized access, attacks, damage, disruption and other security risks.

In simple terms:

Cyber security is the protection of digital systems and information
from threats.

Cyber security is not limited to installing antivirus software or creating
a password. It involves people, processes, technologies, policies and
continuous monitoring.

Why Cyber Security Matters

Modern organizations depend heavily on digital information. A school may
store student records electronically. A bank may process transactions
through online systems. A hospital may maintain electronic medical records.
A training organization may store student registrations, courses,
assignments and certificates in an online learning platform.

If these systems are not properly protected, attackers may attempt to steal,
alter, destroy or misuse the information.

Cyber security therefore helps organizations:

Protect sensitive information.
Prevent unauthorized access.
Reduce the risk of cyber attacks.
Keep important services available.
Protect customers and users.
Maintain trust.
Support business continuity.
Meet security and regulatory requirements.

What Does Cyber Security Protect?

Cyber security protects many different types of digital assets.

1. Data

Data includes documents, passwords, financial information, customer
records, student records, photographs, databases and intellectual property.

2. Computers

Desktop computers, laptops and workstations must be protected against
malware, unauthorized access and other threats.

3. Mobile Devices

Smartphones and tablets can contain sensitive personal and organizational
information and therefore require appropriate security controls.

4. Networks

Networks connect computers and other devices. Network security helps
protect communication and prevent unauthorized access.

5. Applications

Websites, mobile applications, desktop software and APIs can contain
security weaknesses if they are not properly designed and maintained.

6. Cloud Systems

Organizations increasingly use cloud platforms to store data and run
applications. These environments also require appropriate security
controls.

7. Digital Accounts

Email accounts, social media accounts, banking accounts, administrator
accounts and other online identities must be protected from unauthorized
access.

Cyber Security Is More Than Technology

A common misconception is that cyber security is only about technology.
In reality, effective security depends on three major areas:

People
Processes
Technology

People

Employees, students, administrators, developers and users all play a role
in security. A technically secure system can still be compromised if a
user carelessly reveals a password or opens a malicious attachment.

Processes

Organizations need policies and procedures for password management,
incident response, software updates, backups, access control and other
security activities.

Technology

Security technologies can include firewalls, encryption, antivirus
software, intrusion detection systems, authentication systems and security
monitoring platforms.

Cyber Security in Everyday Life

Cyber security is not only relevant to large companies or governments.
Individuals encounter cyber security issues every day.

Examples include:

Using strong passwords.
Protecting online banking accounts.
Recognizing phishing messages.
Keeping phones and computers updated.
Using secure Wi-Fi networks.
Protecting personal information on social media.
Backing up important files.
Using multi-factor authentication where available.

Cyber Security in Organizations

Organizations may use a combination of technical and administrative
controls to protect their systems.

Examples include:

Identity and access management.
Firewalls.
Endpoint protection.
Network monitoring.
Security awareness training.
Data encryption.
Backup systems.
Security policies.
Incident response procedures.
Vulnerability management.

Cyber Security and Information Security

Cyber security and information security are closely related concepts.

Information security focuses on protecting information
from unauthorized access, use, disclosure, alteration, disruption or
destruction regardless of whether the information is stored digitally,
physically or communicated verbally.

Cyber security focuses primarily on protecting digital
systems, networks, devices, applications and information in cyberspace.

The two fields overlap significantly, and information security principles
are an important foundation for cyber security.

What is Cyberspace?

Cyberspace is the interconnected digital environment created by computers,
networks, communication systems, applications, devices and digital
services.

The internet is an important part of cyberspace, but cyberspace is broader
than the public internet. Private networks, organizational systems and
other connected digital environments can also form part of cyberspace.

Cyber Threats

A cyber threat is a potential event, action or actor that could cause harm
to a digital system, organization or individual.

Examples of cyber threats include:

Malware.
Phishing.
Password attacks.
Social engineering.
Unauthorized access.
Data theft.
Ransomware.
Denial-of-service attacks.

These threats will be examined in greater detail in later lessons.

Cyber Attack vs Security Incident

A cyber attack is an intentional attempt to compromise,
damage, disrupt or gain unauthorized access to a digital system or resource.

A security incident is an event that may compromise the
confidentiality, integrity or availability of information or systems.
Not every security incident is necessarily a deliberate attack. For example,
a configuration mistake can create a security incident without an attacker
directly causing it.

Security Controls

Security controls are safeguards designed to reduce security risks.

Controls can include:

Preventive controls — designed to prevent unwanted events.
Detective controls — designed to identify suspicious activity.
Corrective controls — designed to help recover from incidents.

For example, access control can prevent unauthorized users from accessing
a system, monitoring can detect suspicious activity, and backups can help
an organization recover after data loss.

The Security Mindset

A security mindset means thinking about how systems can fail or be abused
before problems occur.

A security-minded developer, administrator or user asks questions such as:

Who should have access?
What happens if this password is exposed?
What information is sensitive?
What happens if this service becomes unavailable?
How would we detect suspicious activity?
How would we recover from a security incident?

Security professionals continuously consider both normal operation and
potential misuse of systems.

Cyber Security as a Continuous Process

Cyber security is not something that can be completed once and forgotten.
Technology changes, software is updated, new vulnerabilities are discovered,
new threats emerge and organizations change their systems.

Effective security therefore requires continuous activities such as:

Monitoring.
Testing.
Updating.
Training.
Risk assessment.
Incident response.
Backup and recovery.

Example: Protecting a Dwallnet LMS

Consider an online learning management system used to manage students,
courses, lessons, assignments and certificates.

The system may contain:

Student names.
Email addresses.
Login credentials.
Course records.
Assignment submissions.
Certificates.
Administrative information.

Cyber security principles can be applied to protect these resources through
authentication, authorization, secure coding, database security, encryption,
backups, monitoring and security awareness.

Cyber Security and Web Development

Web developers also have important security responsibilities.

A developer should consider security when creating:

Login forms.
Registration systems.
Database queries.
File uploads.
APIs.
Payment systems.
Administrative dashboards.
WordPress websites.

Security should therefore be considered during the design and development
process rather than added only after a system has been completed.

Basic Cyber Security Principles

Protect sensitive information.
Give users only the access they need.
Keep systems updated.
Use strong authentication.
Monitor important systems.
Maintain reliable backups.
Train users to recognize threats.
Plan how to respond to incidents.
Test security controls.
Continuously improve security practices.

Practical Exercise

Identify five digital assets that you personally use or that an organization
may depend on.

For each asset, answer the following questions:

What information or service does it contain?
Who should have access to it?
What could happen if unauthorized people accessed it?
What could happen if the information was changed?
What could happen if the system became unavailable?
What security control could help protect it?

Class Discussion

Why should cyber security be considered the responsibility of everyone
who uses a digital system rather than only the IT department?

Key Takeaways

Cyber security protects digital systems, devices, networks, applications and information.
Cyber security involves people, processes and technology.
Individuals and organizations both need cyber security.
Cyber security includes prevention, detection, response and recovery.
Information security and cyber security are closely related but not identical.
A security mindset considers how systems could be misused or compromised.
Cyber security is a continuous process.
Security should be considered during system design and development.
Every user has a role to play in protecting digital resources.

💻

Code Example

<?php

/*
 * Simple Cyber Security Asset Check
 *
 * This example demonstrates the idea of identifying
 * important digital assets and assigning basic
 * security controls to them.
 */

$assets = array(
    array(
        'name'    => 'Student Database',
        'risk'    => 'Unauthorized access',
        'control' => 'Access control and strong authentication',
    ),
    array(
        'name'    => 'Learning Website',
        'risk'    => 'Website compromise',
        'control' => 'Secure coding and regular updates',
    ),
    array(
        'name'    => 'Administrator Account',
        'risk'    => 'Account takeover',
        'control' => 'Multi-factor authentication',
    ),
    array(
        'name'    => 'Course Files',
        'risk'    => 'Data loss',
        'control' => 'Regular backups',
    ),
);

foreach ( $assets as $asset ) {

    echo "Asset: " . htmlspecialchars( $asset['name'] );
    echo "<br>";

    echo "Potential Risk: ";
    echo htmlspecialchars( $asset['risk'] );
    echo "<br>";

    echo "Security Control: ";
    echo htmlspecialchars( $asset['control'] );
    echo "<hr>";
}
?>

⭐

Key Takeaways

Cyber security protects digital systems and information from threats.
Cyber security involves people, processes and technology.
Individuals, businesses, schools and governments all depend on cyber security.
Important digital assets include data, devices, networks, applications and accounts.
Security controls can prevent, detect and help recover from security incidents.
A security mindset considers potential misuse and failure before problems occur.
Cyber security is a continuous process.
Security should be considered during system design and development.
Every person using a digital system has a role in security.

Learning Objectives

Lesson Content

Introduction