Cyber Security Notes — Modules 1
CYBER SECURITY NOTES
Study Notes — Modules 1
Beginner Phase
Module 1 — Introduction to Cyber Security & Digital Citizenship
Page 1
Cyber Security Notes — Modules 1
MODULE 1 — Introduction to Cyber Security & Digital Citizenship
Sessions 1–10 | Duration: 15 hours | Phase: Beginner
1.1 What Is Cyber Security?
Cyber security is the practice of protecting systems, networks, devices, and data from digital attacks,
unauthorized access, damage, or theft. It combines technology, processes, and human behaviour to defend the
confidentiality, integrity, and availability of information.
In simple terms: cyber security is about keeping the digital world — your accounts, devices, and data — as safe
as your front door lock keeps your house safe.
Why It Matters — Real-World Context
• Almost every part of daily life (banking, school records, healthcare, communication) now depends on
digital systems.
• A single security failure can expose personal data, cause financial loss, or disrupt critical services (hospitals,
power grids, schools).
• Attacks are increasing in scale and sophistication — from individual scams to organised cybercrime and
state-sponsored operations.
Example (Age-Appropriate Case Study):
In 2017, the WannaCry ransomware attack spread across 150+ countries in hours, encrypting files on hospital,
business, and government computers because a known Windows vulnerability had not been patched. It
shows how one unpatched system can cascade into a global incident — the same logic behind "why you must
update your device" (covered again in Module 3).
1.2 The CIA Triad
The CIA Triad is the foundational model used to describe the three core goals of cyber security. Every control,
policy, or tool you will study in this course maps back to one (or more) of these three pillars.
Pillar Meaning Real-World Example What Breaks It
Confidentiality Only authorised people can view Your medical records A data breach that
the information are visible only to you leaks passwords
and your doctor or personal data
Integrity Information stays accurate and A bank balance that A malware attack
unaltered unless changed by an cannot be secretly that silently
authorised action edited by a hacker modifies grades in
a school database
Availability Systems and data are accessible to A hospital's patient A Denial-of-
authorised users when needed system stays online Service (DoS)
during an emergency attack that takes a
website offline
Page 2
Cyber Security Notes — Modules 1
Memory tip: think of CIA as a triangle — removing any one corner collapses the whole security posture, even if
the other two remain intact.
1.3 Digital Footprint & Online Identity
A digital footprint is the trail of data you leave behind through online activity — every post, like, search,
purchase, and login.
Two Types of Digital Footprint
• Active footprint — data you knowingly share (posts, comments, profile information, uploaded photos).
• Passive footprint — data collected without direct action (IP address logs, browsing history, cookies,
location metadata).
Why Online Identity Matters
• Employers, universities, and even strangers can find and judge you based on your public digital footprint.
• Old posts can resurface years later ('the internet doesn't forget').
• Fragmented identity across many platforms increases exposure to impersonation and identity theft.
Key Concept:
Every account you create, every app permission you accept, and every public post is a permanent data point
that shapes how you are perceived and how easily you can be tracked or targeted.
1.4 Being a Responsible Digital Citizen
Digital citizenship means using technology safely, ethically, and responsibly — treating the online world with the
same standards of conduct expected offline.
Core Principles
1. Respect — Treat others online with the same courtesy shown in person; no harassment, hate speech, or
exclusion.
2. Responsibility — Think before you post, share, or forward; you are accountable for your digital actions.
3. Protection — Safeguard your own privacy and that of others (never share someone else's personal
information without consent).
4. Critical Thinking — Verify information before believing or sharing it; recognise misinformation.
5. Balance — Maintain a healthy relationship with technology and screen time.
Expectations in Practice
• Cite sources and respect copyright/intellectual property when reusing content online.
• Obtain consent before posting photos or information about other people.
• Report harmful content instead of engaging with or amplifying it.
1.5 Overview of Cyber Threat Actors
Not every attacker has the same motive or skill level. Understanding who is behind an attack helps predict their
methods and targets.
Page 3
Cyber Security Notes — Modules 1
Threat Actor Primary Motivation Typical Targets
Hackers (generic term) Varies — curiosity, profit, ideology, Any vulnerable system
challenge
Hacktivists Political or social ideology Governments, corporations, media
outlets
Cybercriminals Financial gain (fraud, ransomware, Individuals, businesses, banks
data theft)
Nation-State Actors Espionage, sabotage, geopolitical Critical infrastructure, defence,
advantage government networks
Insider Threats Revenge, negligence, financial gain, or The organisation they belong to
coercion
Script Kiddies Thrill-seeking, low skill, uses existing Soft/undefended targets
tools
1.6 Hands-On Labs & Activities — Module 1
🧪 Hands-On Lab Activities
• Case-Study Breakdown: Analyse a publicly reported data breach and map out what went wrong using
the CIA Triad as a framework (which pillar failed, and why).
• Personal Digital Footprint Self-Audit: Search your own name/usernames and list every publicly visible
piece of information you can find about yourself.
• Role-Play: Act out scenarios (e.g., being asked to share a friend's photo without consent) and practise a
responsible-digital-citizen response.
• Cyber-Hygiene Checklist: Build a personal checklist covering passwords, updates, privacy settings, and
safe browsing — this checklist will be reused and expanded in later modules.
• Reflection Journal: Write a short reflection on the most surprising thing learned in Module 1, followed
by a wrap-up quiz.
Module 1 — Key Takeaways
• Cyber security protects Confidentiality, Integrity, and Availability (CIA Triad) — remember this model; it
reappears throughout the course.
• Every digital action contributes to a permanent digital footprint.
• Responsible digital citizenship is an ethical obligation, not just a technical one.
• Threat actors differ in motivation and sophistication — this shapes the type of defence required.
Page 4