Anti-malware · Updates · Backups · Staff Training · Access Control
CSZoneEdexcel GCSE Computer Science 1CP2
Technical Protections
Software & System Defences
Anti-malware/antivirus: detects and removes malicious software; must be kept updated to recognise new threats
Software updates & patches: fix security vulnerabilities that attackers exploit. Keeping OS and applications up to date is critical.
Firewall: blocks unauthorised traffic; essential first line of network defence
Encryption: encrypts sensitive data so it is unreadable if intercepted or stolen
Access control: least privilege principle — users only have access to what they need; reduces damage if account is compromised
Backups
Recovering from an Attack
Regular backups allow recovery from ransomware, hardware failure, or accidental deletion. The 3-2-1 backup rule: keep 3 copies of data, on 2 different media, with 1 copy offsite.
Backup types: full (all data), incremental (changes since last backup), differential (changes since last full)
Backups must be tested regularly to ensure they can actually be restored
Offsite/cloud backups protect against physical disasters (fire, flood)
Policies & Staff Training
The Human Element
Most breaches involve human error — clicking phishing links, using weak passwords, or sharing credentials. Staff training is one of the most effective defences.
Acceptable use policies: define what employees may and may not do with company systems
Password policies: mandate strong, unique passwords and regular changes
Security training: teach staff to recognise phishing, suspicious links, and social engineering
Exam Practice
Have a go at this question
Edexcel-style question
Describe two ways an organisation can reduce the risk of a successful ransomware attack.
4 marks
Keep regular backups stored offsite [1] — even if ransomware encrypts data, systems can be restored without paying the ransom [1]. Train staff to recognise phishing emails [1] — ransomware is often delivered via malicious email attachments, so staff awareness prevents initial infection [1].