Lesson Notes By Weeks and Term v5 - Grade 11

Lesson Video

This page supports the lesson note with a companion video and a short classroom-ready summary.

For class groups and homework, share this lesson page so learners also get the summary, objectives, and full lesson context.

Performance objectives

• Define and explain security, ethics, and privacy in IT.
• Identify common threats to security and privacy.
• Apply ethical principles to IT-related scenarios.
• Recommend security measures to protect data.
• Understand the importance of data privacy laws like POPIA.

Lesson summary

This week, we delve into the critical social implications of Information Technology (IT), focusing on security, ethics, and privacy. In today’s interconnected world, where information flows freely and technology permeates every aspect of our lives, understanding these concepts is no longer optional – it’s essential. From online banking to social media interactions, from government databases to corporate networks, our data is constantly being collected, stored, and processed. This presents both opportunities and risks. In South Africa, with its unique socio-economic context and digital divide, these issues are particularly important.

Lesson notes

2. 1. Security Security, in the context of IT, refers to the measures taken to protect computer systems, networks, and data from unauthorized access, use, disclosure, disruption, modification, or destruction. It encompasses a range of practices and technologies aimed at ensuring confidentiality, integrity, and availability of information.

Confidentiality: Ensuring that sensitive information is accessible only to authorized individuals or entities. This can be achieved through techniques like encryption, access controls, and data masking. Imagine someone hacking into your school’s system and leaking exam papers. Confidentiality measures aim to prevent that.

Integrity: Maintaining the accuracy and completeness of data. This involves preventing unauthorized modification or deletion of data. For instance, ensuring that your marks on the school database haven't been changed by someone without permission. Measures include checksums, version control, and audit trails.

Availability: Ensuring that authorized users have timely and reliable access to information and resources when they need them. This means preventing denial-of-service attacks and ensuring systems are resilient to failures. For example, making sure the online banking platform is available when you need to pay your account.

Types of Security Threats: Malware: Malicious software, such as viruses, worms, Trojans, and ransomware, designed to harm or disrupt computer systems.

Example:* Receiving an email attachment claiming to be a bursary application form, but it installs a virus when opened. Always be cautious of suspicious attachments.

Phishing: A type of social engineering attack where attackers attempt to trick users into revealing sensitive information, such as usernames, passwords, and credit card details.

Example:* Receiving a fake SMS from "SASSA" asking you to update your banking details via a link. Never click on links in suspicious messages.

Hacking: Unauthorized access to computer systems or networks with malicious intent.

Example:* A hacker gaining access to a government database and stealing citizens' personal information.

Denial-of-Service (DoS)

Attacks: Overwhelming a system with traffic to make it unavailable to legitimate users.

Example:* A group of hackers flooding a news website with fake requests, making it inaccessible to the public.

Social Engineering: Manipulating individuals into divulging confidential information or performing actions that compromise security.

Example:* Calling a call center pretending to be a technician and asking for a user's password to "fix" a problem.

Data Breaches: Unauthorized access to or disclosure of sensitive data.

Example:* A retailer's customer database being hacked and credit card information being stolen.

Security Measures: Firewalls: Act as a barrier between a network and the outside world, blocking unauthorized access.

Antivirus Software: Detects and removes malware from computer systems.

Strong Passwords: Using complex and unique passwords for different accounts.

Two-Factor Authentication (2FA): Requiring a second form of verification, such as a code sent to your phone, in addition to your password.

Encryption: Converting data into an unreadable format, protecting it from unauthorized access.

Regular Software Updates: Patching security vulnerabilities in software.

Security Awareness Training: Educating users about security threats and best practices. 2.

2. Ethics Ethics in IT refers to the moral principles and values that guide the behavior of individuals and organizations in the use and development of technology. It addresses questions of right and wrong, fairness, responsibility, and accountability in the digital world.

Intellectual Property Rights: Respecting copyright, patents, and trademarks.

Example:* Downloading pirated music or software is unethical and illegal. Paying for content supports the creators.

Privacy: Respecting the privacy of others and protecting their personal information.

Example:* Sharing someone's personal information online without their consent is unethical.

Honesty and Integrity: Being truthful and transparent in all IT-related activities.

Example:* Creating fake online reviews or spreading misinformation is unethical.

Professional Responsibility: Adhering to professional codes of conduct and ethical guidelines.

Example:* An IT professional has a responsibility to report security vulnerabilities to the appropriate authorities.

Accessibility: Ensuring that technology is accessible to people with disabilities.

Example:* Designing websites that are compatible with screen readers for visually impaired users.

Net Neutrality: The principle that all internet traffic should be treated equally, without discrimination based on content, source, or destination.

Example:* An ISP throttling access to a competitor's streaming service is a violation of net neutrality.