Community resourceWorksheet
1CP2-P-5.4 Protecting systems and data
Part 4 of 6 · 1CP2-P-5 · Cyber security and robust software
The protection worksheet, layering encryption, policy, backup and anti-malware by the purpose each one serves.
Students will:
- explain what encryption protects and state one limitation
- give suitable acceptable use provisions and say how one reduces risk
- state what restoring from full plus incremental backups requires
- explain why RAID is not a backup
- recommend a layered set of controls for a stated scenario
Inside: 7 explanation cells, 5 multiple-choice questions, 1 fill-in-the-blanks cell and 5 written answers. 20 marks, about 45 minutes.
Series: 1CP2-P-5 · Cyber security and robust software, part 4 of 6.
Shared by Coding PathwayVerified teacher
- 18 cells
- About 45 minutes
- CC BY-SA 4.0
- Shared 17 Aug 2026
Preview
The whole resource, exactly as a class sees it. Answers and marking are held back.
Protecting systems and data
Pearson specifies anti-malware, encryption, acceptable use policies, and backup and recovery procedures. These controls are complementary: prevention and detection reduce the chance of harm, while recovery reduces the lasting impact when an incident occurs.
1. Layer controls by purpose
A good recommendation names a control, explains its mechanism and links it to the scenario. 'Use security' is not enough. No single control prevents every technical fault, malicious program and human mistake.
- acceptable use policy
- backup
- compression
- encryption
2. Protect confidentiality
Encryption encodes readable data into an unreadable form. A decryption key is required to recover the original meaning. If an encrypted device or file is stolen, the data is less useful to someone without the key. Encryption does not stop deletion, corruption or loss, so recovery copies are still needed.
Which risk does encryption most directly reduce?
- AAn unauthorised person reading stolen data
- BA disk becoming physically damaged
- CA user deleting the only copy
- DA worm reaching the network
Explain how encryption protects confidential pupil data on a stolen laptop and give one limitation.
Link unreadable encoding to the key, then state what encryption does not solve.
Students type their answer here.
3. Set expectations through an acceptable use policy
An acceptable use policy (AUP) states permitted and prohibited use, user responsibilities, reporting routes and consequences. It may cover passwords, downloads, personal devices, suspicious messages and access to inappropriate material. A policy guides behaviour and accountability; it does not technically block an action by itself.
Give two suitable provisions for a school's acceptable use policy and explain how one reduces security risk.
Include rules or responsibilities, not technical controls disguised as rules.
Students type their answer here.
Why is an AUP insufficient on its own?
- AIt cannot state consequences.
- BIt relies on people following rules and does not itself detect malware or restore data.
- CIt automatically encrypts data.
- DIt replaces user accounts.
4. Plan backup and recovery
A backup is a separate recovery copy. Full backups copy all selected data; incremental backups copy changes since the previous backup of either type. Backups should be regular, tested and stored separately, including off-site where appropriate.
Recovery restores usable data and operation after loss or disruption. Procedures may include restoring backups, using standby equipment or premises, and redundancy such as RAID. RAID can keep a service available after some disk failures, but it is not a separate historical backup and cannot by itself recover a deleted or corrupted file.
A full backup was made Monday and incrementals Tuesday and Wednesday. What is needed to restore Wednesday's state?
- AWednesday only
- BMonday plus Wednesday
- CMonday, Tuesday and Wednesday in order
- DTuesday and Wednesday only
Explain why RAID may support recovery or availability but should not be treated as the only backup.
Contrast redundant current data with a separate earlier copy.
Students type their answer here.
5. Retrieve anti-malware knowledge
Current anti-malware can detect known signatures and suspicious behaviour, quarantine items and remove threats. It should be kept updated. This is a detection/protection layer, not a substitute for encryption, user rules or recovery procedures.
A school stores confidential records and has suffered phishing attempts and accidental deletion. Recommend a layered protection plan and justify three distinct controls.
Cover confidentiality, behaviour/detection and recovery.
Students type their answer here.
Which statement is accurate?
- ACompression makes data confidential.
- BEncryption is a complete recovery procedure.
- CA backup is a separate copy used for restoration.
- DRAID guarantees recovery from ransomware.
Correct both claims: 'encryption prevents deletion' and 'RAID is always a backup'.
State the purpose and limitation of each control.
Students type their answer here.
Why should recovery procedures be tested?
- ATo prove that data and services can actually be restored within the intended process
- BTo convert full backups into encryption
- CTo remove the need for users
- DTo make all malware harmless
Route forward
You can select and justify layered protection and recovery controls. Next you will examine how robust software, audit trails and code reviews reduce or reveal vulnerabilities.