Threats and Risks

In cybersecurity, a threat actor is a group or person behind a malicious incident. Which of these is NOT an identified example

• Nation states

• Criminal gangs or individuals

• Sales teams

• Political activists

What is 'phishing'?

• A misspelling of fishing

• pretending to be someone else online

• fake email to try to trick you into giving personal information

• A way of illegally downloading films and games

Which of these are types of malware?

• viruses

• spyware

• trojan

• phishing email

What is 'ransomware'

• When you buy illegal DVDs

• A type of cyber attack when you PC is locked and you have to pay to get access

• A program that tracks your keystrokes

• When someone spies on you via your webcam

Fill in the blanks: ______ is used legitimately in free versions of applications to display advertisements while a program is running but can be classified as ______ if the code records users' information or browsing habits without their consent and authorization.

• Social engineering; malvertising

• Adware; spyware

• Shareware; malware

• Adware; ransomware

You see an app you think will really help your staff. What might be a threat to introducing it?

• Your ability to push through change

• The actual Installation, setup and deployment

• Time to test and evaluate

• Staff enthusiasm

• Training time

The program/app that is being introduced needs to have student data added. How is this usually done at your workplace?

• I type in the details for each manually

• Each teacher has to do their class

• The IT support/someone else will do it

• I can use data exported from the MIS

• don't know

Do your student have individual logins?

• Yes and always use them

• Yes, but not for all devices/at all times

• Yes they have them but not really used

• No

• Not sure

All organisations have to be aware of data protection and GDPR. Which of these are data protection risks (choose all that apply)

• Images on the school website/social media

• USB drives

• Unauthorised access

• Old computers

• Staff devices

One of the biggest risks of trying to introduce new software is staff resistance. Why do you think that is?