Online Safety Lesson TEST

Lesson 1: You and
your data

Year 9 – Cybersecurity

In this lesson, you will

●Explain the difference between data and information

●Critique online services in relation to data privacy

●Identify what happens to data entered online

●Explain the need for the Data Protection Act

Lesson 1: You and your data

2

Objectives

Motives behind attacks

3

What might some of these attacks
be trying to steal or get access to?

Starter activity

DATA

https://threatmap.checkpoint.com

Cybersecurity

4

Starter activity

In this unit you will gain an
awareness of:

●The importance and value of
data

●How human actions can make
data more vulnerable to theft or
exploitation

●Common cyberattacks

●Measures put in place on
networks to help protect IT
systems from attacks

Data is raw facts and figures:

Data and information

5

Activity 1

Information is created when that
data has been processed and
becomes meaningful:

John: 28

Claire: 49

Jade: 40

Ahmed: 45

Chloe: 38

These are scores from a test where
the pass mark was 35.

John needs to resit the test.

The average score is 40.

Why is customer data valuable to businesses?

6

This data is the contents of a
shopping basket for an online
customer.

This data can be used to help
build a profile of this customer
and therefore convert the data
into information.

What assumptions can you
reasonably make about this
customer?

Activity 1

Tent

Dog toys

Fitness
tracker

Complete the mind map by adding
example data next to each category.

Example

Personal information about you:

●Name

●Date of birth

●Etc.

Data social media companies might collect

7

Activity 2

Multiple Choice

Status updates

• Personal Information

• Content you give

• Your user behaviour

• Data you have on other

Multiple Choice

Groups you are a member of

• Personal Information

• Content you give

• Your user behaviour

• Data you have on other

Multiple Choice

The names of your friends

• Personal Information

• Content you give

• Your user behaviour

• Data you have on other

Multiple Choice

Your date of birth

• Personal Information

• Content you give

• Your user behaviour

• Data you have on other

Multiple Choice

The pages you have "liked"

• Personal Information

• Content you give

• Your user behaviour

• Data you have on other

Personal info: Name, date of birth

Content: Images, status updates,
emojis created

User behaviour: What pages you
visited, groups you are a member of,
what you have ‘liked’

Data you have on others: Names of
your friends and their numbers

Data social media companies might collect

8

Activity 2

How do you think social media
companies make money if they are
free to use?

What do they do with your data?

Work in pairs and decide which two
of the companies on the right-hand
side you wish to research. In your
pairs, allocate one each.

Spend five minutes researching the
question, ‘What data do these
companies collect about their
users?’

Add your new findings to your mind
map and spend two minutes
discussing them with your partner.

Privacy policies: Be informed

9

Snapchat
ncce.io/snapchatprivacy

Instagram
ncce.io/instagramprivacy

Google
ncce.io/googleprivacy

Facebook
ncce.io/facebookprivacy

Activity 3

The consequences of data theft

10

Activity 3

Watch this video

If cybercriminals
successfully stole data
from these companies,
who would suffer and in
what way?

All organisations and people using
and storing personal data must
abide by the following principles.

Data must be:

Data Protection Act 2018

11

Activity 5

As a data subject, you have the
right to find out what information the
government and other organisations
store about you.

You have the right to:

Data Protection Act 2018: Your rights

12

Activity 5

You also have rights when an
organisation is using your personal
data for:

●Automated decision-making
processes without human
involvement (for example, when a
computer decides if you should be
approved for a loan)

●Profiling, for example to predict
your behaviour or interests

Data Protection Act 2018: Your rights

13

Activity 5

Complete the exit ticket worksheet.

Exit ticket

14

1.Name three items of data that a
company might hold on you that
would help form your profile.

1.Give one potential consequence to
you if cybercriminals had access to
that data.

1.Give one potential consequence to
the company storing the data if a
cybercriminal gained access to the
data they were storing.

Plenary

In this lesson, you...

Looked at the difference between
data and information

Investigated what data companies
might collect on you, as well as how
that data might be valuable to
cybercriminals

Looked at the need for the law
involving data protection

Next lesson

15

Next lesson, you will…

Look at the risk of data being
compromised through human error,
and strategies that can be put in
place to avoid the dangers

Summary