BTEC L3 IT

This pack covers the aspects relating to the legal responsibilities and the required security measures acrosseight topics plus an end-of-unit assessment. It covers Learning Aim A3 of the specification, and also looks at the use and effectiveness of security measures aimed at protecting hardware and software assets, which are part of Learning Aim A4.   

The first topic introduces current legislation relevant to cyber security, specifically the General Data Protection Regulation (GDPR) and the Computer Misuse Act 1990, giving students the opportunity to link concepts to their applications in the real world.  

The second topic looks at physical security measures aimed at protecting buildings, areas within buildings and equipment, enabling students to appreciate the need of multiple layers of security measures.  

The third topic focuses on data resilience and covers the measures that can be adopted to ensure the availability of data in case of hardware failures, cyber-attacks and disasters, so that students can appreciatehow remedial strategies are as important as preventive measures. 

Topic 4 explores the use and effectiveness of antivirus software and firewalls to protect computing systems and networks from malware and cyber-attacks, enabling students to understand how these technologies work and how they are used in real-life situations.  

The fifth and sixth topics cover a wide range of methods used to authenticate users and devices, providing the necessary technical knowledge to support a deeper understanding of the key concepts.  

Topic 7 introduces the methods that can be used to control access to resources, enabling students to understand how organisations and individuals can prevent or limit the impact of threats to computer systems, networks and data.  

The eighth and last topic focuses on security measures aimed at protecting endpoint devices, including the technology used to find lost or stolen devices and the concept, benefits and drawbacks of trusted computing, so that students fully understand that device-based technology is an essential part of a comprehensive security strategy.