CYBER SECURITY
Detailed Topic-Wise Study Notes
Module 1 — Introduction to Cyber Security & Digital Citizenship | Beginner Phase | Sessions 1–10 (15 hours)
Topic 1.1 — What Is Cyber Security?
Definition
Cyber security is the practice of protecting systems, networks, devices, and data from digital attacks,
unauthorized access, damage, or theft. It brings together three layers of defence working at once:
• Technology — firewalls, encryption, antivirus software, secure network design
• Processes — policies, procedures, incident response plans, access controls
• Human behaviour — awareness, good habits, resistance to manipulation (social engineering)
The ultimate goal of all three layers is to defend the confidentiality, integrity, and availability of information (the
CIA Triad — covered in detail in Topic 1.2).
Everyday Analogy
Cyber security is about keeping the digital world — your accounts, devices, and data — as safe as your
front door lock keeps your house safe. A lock (technology), a habit of locking it (process), and
remembering to actually use it (behaviour) all have to work together.
Why It Matters — Real-World Context
• Almost every part of daily life — banking, school records, healthcare, communication — now depends on
digital systems.
• A single security failure can expose personal data, cause financial loss, or disrupt critical services such as
hospitals, power grids, and schools.
• Attacks are increasing in both scale and sophistication: from individual scams, to organised cybercrime, to
state-sponsored operations.
Case Study — WannaCry Ransomware (2017)
Aspect Detail
What happened Ransomware spread across 150+ countries within
hours
Root cause A known Windows vulnerability that had not been
patched
Impact Encrypted files on hospital, business, and government
computers
Lesson One unpatched system can cascade into a global
incident
Connects to Module 3 — importance of regular software/device
Aspect Detail
updates
Key takeaway: patch management is not a minor IT chore — delayed updates were the single point of failure that
let WannaCry spread globally in a matter of hours.
Topic 1.2 — The CIA Triad
The CIA Triad is the foundational model used to describe the three core goals of cyber security. Every control,
policy, or tool studied in this course maps back to one or more of these three pillars: Confidentiality, Integrity,
and Availability.
Pillar Meaning Real-World Example What Breaks It
Confidentiality Only authorised people can Your medical records are A data breach
view the information visible only to you and your that leaks
doctor passwords or
personal data
Integrity Information stays accurate and A bank balance that cannot Malware that
unaltered unless changed by an be secretly edited by a silently modifies
authorised action hacker grades in a
school database
Availability Systems and data are accessible A hospital's patient system A Denial-of-
to authorised users when stays online during an Service (DoS)
needed emergency attack that takes
a website offline
Deeper Look at Each Pillar
Confidentiality
• Enforced through access controls, encryption, authentication (passwords, MFA), and permission levels.
• Violated by: data breaches, shoulder surfing, phishing, weak passwords, unencrypted data transfer.
Integrity
• Enforced through checksums, digital signatures, version control, audit logs, and access restrictions on
editing.
• Violated by: malware tampering with records, man-in-the-middle attacks altering data in transit,
unauthorised edits.
Availability
• Enforced through backups, redundancy, disaster recovery plans, and DoS/DDoS protection.
• Violated by: DoS/DDoS attacks, ransomware locking access, hardware failure, natural disasters.
Memory Tip
Think of CIA as a triangle — removing any one corner collapses the whole security posture, even if the
other two pillars remain fully intact. A system can be perfectly confidential and available, but if its data
has been silently altered, it can no longer be trusted.
Topic 1.3 — Digital Footprint & Online Identity
A digital footprint is the trail of data left behind through online activity — every post, like, search, purchase, and
login contributes to it.
Two Types of Digital Footprint
Type Description Examples
Active footprint Data you knowingly and deliberately Posts, comments, profile information,
share uploaded photos
Passive footprint Data collected without direct, IP address logs, browsing history, cookies,
conscious action location metadata
Why Online Identity Matters
• Employers, universities, and even strangers can find and judge you based on your public digital footprint.
• Old posts can resurface years later — "the internet doesn't forget."
• A fragmented identity spread across many platforms increases exposure to impersonation and identity theft.
Key Concept
Every account you create, every app permission you accept, and every public post is a permanent data
point. Together these data points shape how you are perceived and how easily you can be tracked or
targeted.
Topic 1.4 — Being a Responsible Digital Citizen
Digital citizenship means using technology safely, ethically, and responsibly — treating the online world with the
same standards of conduct expected offline.
Core Principles
1. Respect — Treat others online with the same courtesy shown in person; no harassment, hate speech, or
exclusion.
2. Responsibility — Think before you post, share, or forward; you are accountable for your digital actions.
3. Protection — Safeguard your own privacy and that of others; never share someone else's personal
information without consent.
4. Critical Thinking — Verify information before believing or sharing it; recognise misinformation.
5. Balance — Maintain a healthy relationship with technology and screen time.
Expectations in Practice
• Cite sources and respect copyright/intellectual property when reusing content online.
• Obtain consent before posting photos or information about other people.
• Report harmful content instead of engaging with or amplifying it.
Topic 1.5 — Overview of Cyber Threat Actors
Not every attacker has the same motive or skill level. Understanding who is behind an attack helps predict their
methods and likely targets.
Threat Actor Primary Motivation Typical Targets
Hackers (generic term) Varies — curiosity, profit, ideology, Any vulnerable system
challenge
Hacktivists Political or social ideology Governments, corporations, media
outlets
Cybercriminals Financial gain (fraud, ransomware, data Individuals, businesses, banks
theft)
Nation-State Actors Espionage, sabotage, geopolitical Critical infrastructure, defence,
advantage government networks
Insider Threats Revenge, negligence, financial gain, or The organisation they belong to
coercion
Script Kiddies Thrill-seeking, low skill, uses existing Soft / undefended targets
tools
Understanding threat actor profiles helps security teams prioritise defences: a hospital, for example, is more
likely to face cybercriminals seeking ransom payments, while a government network must also plan for nation-
state espionage.
Topic 1.6 — Hands-On Labs & Activities
Case-Study Breakdown
Analyse a publicly reported data breach and map out what went wrong using the CIA Triad as a framework —
identify which pillar failed and why.
Personal Digital Footprint Self-Audit
Search your own name and usernames, and list every publicly visible piece of information you can find about
yourself.
Role-Play Exercises
Act out scenarios — such as being asked to share a friend's photo without consent — and practise a responsible-
digital-citizen response.
Cyber-Hygiene Checklist
Build a personal checklist covering passwords, updates, privacy settings, and safe browsing. This checklist will
be reused and expanded in later modules.
Reflection Journal
Write a short reflection on the most surprising thing learned in Module 1, followed by a wrap-up quiz.
Module 1 — Key Takeaways
• Cyber security protects Confidentiality, Integrity, and Availability (the CIA Triad) — remember this model,
as it reappears throughout the course.
• Every digital action contributes to a permanent digital footprint.
• Responsible digital citizenship is an ethical obligation, not just a technical one.
• Threat actors differ in motivation and sophistication — this shapes the type of defence required.