Every time you log in to your school email, pay a bill online or post on social media, you are trusting that a computer system will keep your data safe. In this post you will learn what computer security, cybersecurity and computer misuse mean, and the four elements every security problem has: vulnerability, threat, attack and countermeasure.
Build on what you learned in Forms 1–3
These Lower School ICT posts cover the basics of this topic:
- Threats to Computer and Data Security – the main dangers to computers and data
- Information Protection and Misuse – why information needs protecting
In this post:
- Computer security and cybersecurity
- Security as managing risk
- Vulnerability, threat, attack and countermeasure
- Computer misuse by individuals and by groups or organisations
Video: Cybersecurity: Crash Course Computer Science #31 – https://www.youtube.com/watch?v=bPVaOlJ6ln0
Computer security and cybersecurity
Computer security is the protection of computer systems – hardware, software and data – from theft, damage, loss and unauthorised use. It includes locking the computer lab as well as using passwords.
Cybersecurity is the part of computer security that protects systems, networks and data from attacks that come through the Internet or other networks (“cyberspace”). A hacker in another country trying to break into a bank’s website is a cybersecurity problem; a thief walking off with the school’s laptop is a computer security problem.
Both are about assessing and minimising risk. No system can be 100% safe, so organisations ask: What could go wrong? How likely is it? How bad would it be? What can we do to reduce the chance or the damage?
Image source: File:Padlock with chain.jpg
The four elements: vulnerability, threat, attack and countermeasure
| Element | Meaning | Example |
|---|---|---|
| Vulnerability | A weakness in a system that could be used to cause harm | • A password such as “123456” • software that has not been updated • a server room with no lock |
| Threat | Anything (a person, event or program) that could take advantage of a vulnerability and cause harm | A hacker, a computer virus, a dishonest employee, a power surge, a hurricane |
| Attack | An actual attempt to exploit a vulnerability – the threat put into action | Someone guessing the weak password and logging in; malware infecting an out-of-date computer |
| Countermeasure | An action, device or procedure that reduces a vulnerability or stops an attack | • A strong password with two-step verification • installing updates • a locked door • a backup |
A simple way to remember it: the vulnerability is the open window, the threat is the thief in the neighbourhood, the attack is the thief climbing through the window, and the countermeasure is the burglar bars.
Video: Threats Vulnerabilities and Exploits – https://www.youtube.com/watch?v=8zSoyAmHHc4
Computer misuse
Computer misuse is using a computer system or data in a way that is illegal, unethical or not allowed – for example accessing a system without permission, damaging data, or using a computer to harass or cheat people. Several Caribbean countries, such as Trinidad and Tobago, Jamaica and Barbados, have laws dealing with computer misuse and cybercrime.
- Misuse by individuals: a student logging into a classmate’s account, a person sending bullying messages, someone copying a movie illegally, a lone hacker spreading a virus.
- Misuse by groups or organisations: organised criminal gangs running phishing scams, a company spying on a competitor, groups spreading propaganda, hackers working together to shut down a website.
The next two posts look at the main types of misuse and who they affect, and the post after that covers countermeasures in detail.
Try it: Vulnerability, threat, attack or countermeasure?
For each item, choose which security element it is.
| The school server room door has a broken lock | |
| A hurricane is forecast to pass over the island | |
| Someone sends thousands of password guesses to an account | |
| The office makes a backup copy of its files every night | |
| A laptop has not had a software update in two years | |
| Antivirus software is installed on every lab computer |
Related
Related: Videos: Computer Misuse
Paper 1 practice (multiple choice)
Choose the best answer for each question. Try them all before you check.
1. A weakness in a computer system that could be exploited is called a
(A) threat
(B) vulnerability
(C) countermeasure
(D) firewall
2. Which of the following is BEST described as a threat?
(A) A strong password
(B) A hacker looking for weak systems
(C) A locked server room
(D) An up-to-date antivirus program
3. Cybersecurity is MAINLY concerned with protecting systems from
(A) fire and flood only
(B) attacks through networks and the Internet
(C) paper jams
(D) power cuts only
4. Installing software updates to fix a security flaw is an example of
(A) an attack
(B) a threat
(C) a countermeasure
(D) misuse
5. Which is an example of computer misuse by an organisation?
(A) A student forgetting a password
(B) A company secretly copying a competitor’s product designs from its network
(C) A teacher backing up marks
(D) A bank installing a firewall
Show answers
1. B
2. B
3. B
4. C
5. B
Paper 2 practice (structured question)
The IT technician at a secondary school in San Fernando reports that the staff Wi-Fi password is “school123”, that some lab computers have not been updated for a year, and that last week a student tried to log in to the teachers’ marks system.
(a) Distinguish between computer security and cybersecurity. (2 marks)
(b) Using the scenario, identify:
(i) ONE vulnerability (1 mark)
(ii) ONE attack (1 mark)
(c) Explain the difference between a threat and an attack. (2 marks)
(d) Suggest TWO countermeasures the school could use. (2 marks)
Total: 8 marks
Show answers
(a) Computer security protects hardware, software and data from theft, damage or unauthorised use in general (1); cybersecurity focuses on protecting systems and data from attacks through networks/the Internet (1).
(b)
(i) The weak Wi-Fi password / computers not updated (1 mark)
(ii) The student trying to log in to the marks system (1 mark)
(c) A threat is something that could cause harm by exploiting a vulnerability (1); an attack is an actual attempt to exploit a vulnerability (1).
(d) Any two (1 each):
• change to a strong Wi-Fi password
• install updates regularly
• give each teacher a separate account with a strong password
• use two-step verification on the marks system
• install/update antivirus software
• log and monitor login attempts
Syllabus link: This post is relevant to the CSEC® Information Technology Syllabus (CXC 30/G/SYLL 17), Section 3: Social and Economic Impact of Information and Communications Technology (ICT), Specific Objective 1 (“outline the concepts of computer security, cybersecurity and computer misuse”).
Attributions to media used in this post:
- Padlock with chain.jpg – Lacz02 – CC BY-SA 4.0 (via Wikimedia Commons)
Updates
2026/10/16
– Shuffled the answer options in the “Try it: Vulnerability, threat, attack or countermeasure?” activity so they no longer appear in the same order as the questions.
– Lists and algorithms laid out line by line.
© 2026 Vedesh Kungebeharry. All rights reserved.
[…] Computer Security, Cybersecurity and Computer Misuse: Vulnerability, Threat, Attack and Countermeasu… […]