Lesson Notes By Weeks and Term v5 - Grade 11

Lesson Video

This page supports the lesson note with a companion video and a short classroom-ready summary.

For class groups and homework, share this lesson page so learners also get the summary, objectives, and full lesson context.

Performance objectives

• Apply database design principles (SQL) to a real-world scenario.
• Analyze software development methodologies.
• Identify and counter common network security threats.
• Demonstrate proficiency with spreadsheet software.
• Design a basic website using HTML and CSS.

Lesson summary

This week is dedicated to integrated revision and focused exam preparation. This isn't just about memorizing facts; it's about understanding how all the different parts of the IT curriculum fit together.

Imagine building a house: you can't just randomly put bricks together – you need a plan, an understanding of foundations, walls, roofing, and how they all interconnect. Similarly, in IT, database concepts influence system development, which impacts network security, and so on. Why does this matter to you as a South African learner? Because IT skills are increasingly crucial for jobs in virtually every sector, from agriculture and tourism to finance and healthcare.

Lesson notes

This week's revision integrates several key IT concepts. Let's break down each area and revisit the core principles. 2.1 Database Design and SQL: Database Concepts: A database is an organized collection of data, stored and accessed electronically. We use databases to efficiently manage large amounts of information. Key concepts include tables, records (rows), fields (columns), primary keys (unique identifiers), and foreign keys (linking tables).

Normalization: The process of organizing data to reduce redundancy and improve data integrity. We aim for at least 3NF (Third Normal Form). This means ensuring that each non-key attribute depends on the whole primary key and nothing but the primary key. Normalization prevents anomalies (errors) during data insertion, update, and deletion.

Data Types: The type of data that a field can hold (e.g., Text/VARCHAR, Number/INT, Date/DATETIME, Boolean/BOOL). Choosing the correct data type is crucial for data integrity and storage efficiency.

SQL (Structured Query Language): The standard language for accessing and manipulating databases. Key SQL commands include SELECT (retrieve data), INSERT (add data), UPDATE (modify data), DELETE (remove data), CREATE TABLE (define a table), and ALTER TABLE (modify a table structure).

Example (Spaza Shop Database): Let's design a database for a small spaza shop. We need to track products, suppliers, and sales.

Tables: `Products` (ProductID, ProductName, Category, Price, SupplierID) `Suppliers` (SupplierID, SupplierName, ContactPerson, Phone) `Sales` (SaleID, ProductID, Quantity, SaleDate)

Normalization: `Products` table has `SupplierID` as a foreign key referencing the `Suppliers` table. This avoids storing supplier information redundantly in the `Products` table. SQL

Examples: `SELECT ProductName, Price FROM Products WHERE Category = 'Snacks';` (Retrieve the name and price of all snack products) `INSERT INTO Products (ProductName, Category, Price, SupplierID) VALUES ('Cream Biscuits', 'Biscuits', 12.50, 1);` (Add a new product) `UPDATE Products SET Price = 13.00 WHERE ProductID = 5;` (Update the price of a specific product) 2.2 Software Development Methodologies: Waterfall Model: A linear, sequential approach where each phase (requirements, design, implementation, testing, deployment, maintenance) must be completed before the next phase begins. It's simple to understand but inflexible. Not ideal for projects with changing requirements. Agile Methodologies (e.g., Scrum): An iterative and incremental approach that emphasizes flexibility, collaboration, and customer feedback. Projects are broken down into small sprints (short development cycles). Ideal for projects with evolving requirements.

Choosing a Methodology: Consider the project's size, complexity, requirements volatility, and team experience. For a small, well-defined project with stable requirements (e.g., a simple inventory management system), Waterfall might suffice. For a larger, complex project with evolving requirements (e.g., developing a new e-commerce platform), Agile is generally a better choice.

Example (Website for a Tourism Company): If a tourism company wants a website showcasing its services and attractions, and the requirements are likely to change as they receive customer feedback, Agile would be preferable. Short sprints could focus on different sections of the website, allowing for continuous improvement. 2.3 Network Security: Threats and Vulnerabilities: Phishing: Deceptive emails or websites designed to trick users into revealing sensitive information (e.g., usernames, passwords, credit card details). A common phishing tactic in South Africa is impersonating SARS (South African Revenue Service).

Malware (Malicious Software): Includes viruses, worms, trojans, ransomware, and spyware. Malware can damage systems, steal data, or encrypt files, demanding a ransom.

Data Breaches: Unauthorized access to sensitive data, often due to weak passwords, unpatched software, or social engineering.

Denial-of-Service (DoS)

Attacks: Overwhelming a system with traffic, making it unavailable to legitimate users.

Security Measures: Firewalls: Act as a barrier between a network and external threats.

Antivirus Software: Detects and removes malware.

Strong Passwords: Use a combination of uppercase and lowercase letters, numbers, and symbols.

Regular Software Updates: Patch vulnerabilities in operating systems and applications.

Employee Training: Educate employees about security threats and best practices.

Data Encryption: Protects data confidentiality by converting it into an unreadable format.

Two-Factor Authentication (2FA): Requires two forms of identification to access an account. Example (Cybersecurity for a small clinic): A small clinic needs to protect patient data. Measures include a firewall, antivirus software, strong passwords, employee training on phishing awareness, and encryption of patient records.