Front

1.    Explain how data validation improves cybersecurity in enterprise systems.

Back

Prevents Wrong or Fake Data

Data validation checks the type of information entered (e.g., only numbers in a phone field).

This stops hackers from entering harmful code or false details.

Login Form:

• Username must only allow letters/numbers (no special symbols).

• Password must be at least 8 characters with a mix of letters, numbers, and symbols.

Online Payment System:

• Credit card number must be 16 digits.

• Expiry date must be a valid future date.

Front

2. Use an example to explain what Ransomware is and provide one preventative measure.

Back

Ransomware is a type of malicious software that locks or encrypts files and demands money to unlock them.

For example, an enterprise hospital’s patient records may be locked, and hackers demand payment before doctors can access the files again.

One preventative measure is to keep regular data backups so that files can be restored without paying the ransom.

Front

3. Why is confidentiality important in enterprise cybersecurity? Give an example of what might happen if it is not maintained

Back

Confidentiality ensures that sensitive business and customer information is only accessed by authorised people. (1 mark)

Without confidentiality, private data can be exposed to hackers or competitors. (1 mark)

For example, if customer credit card details are leaked, it may lead to identity theft and loss of trust in the enterprise. (1 mark)

Front

4. Explain how individuals can protect their own data when using online platforms.

Back

Use strong passwords that are hard to guess.

Turn on two-factor authentication (2FA) for extra security.

Be careful and do not share personal information on unsafe websites or with strangers.

Front

1.    Explain how encryption and access control help enterprises protect customer data. Provide one example.

Back

Encryption scrambles customer data so only authorised people with the correct key can read it. (1 mark)

Access control limits who can see or change the data by using passwords, roles, or permissions. (1 mark)

Example: An online bank encrypts credit card details and only allows the finance team to access them. (1 mark)