Now that you know the threats, how do we fight back? A countermeasure is anything that reduces a vulnerability or stops an attack. The syllabus groups them into physical measures, software measures and personal security practices. Good security uses all three together.

Build on what you learned in Forms 1–3

These Lower School ICT posts cover the basics of this topic:

• Creating and managing Passwords online – making strong passwords
• Data and Software Maintenance – backups and keeping software up to date
• Physical Care for Computer Systems – protecting the hardware itself

In this post:

• Physical measures: backup and recovery, hardware firewalls, intrusion detection, biometrics
• Software measures: passwords and authentication, encryption, firewalls, antivirus and anti-malware
• Personal security practices
• Matching countermeasures to threats

Physical measures

• Backup and recovery procedures – regularly copy data to another place (an external drive kept off-site, or the cloud) and have a plan to restore it. Protects against hardware failure, theft, fire, floods, hurricanes and ransomware.
• Hardware firewall – a device (often built into the router) between the organisation’s network and the Internet that blocks unwanted traffic.
• Intrusion detection system (IDS) – monitors network traffic or a building and raises an alarm when it detects suspicious activity.
• Biometrics – uses a unique body feature (fingerprint, face, iris, voice) to identify a person, e.g. a fingerprint scanner on the server room door.
• Also: locks on doors and computer cases, security guards, CCTV, surge protectors and UPS units.

Image source: File:Fingerprint sensor laptop.jpg

Software measures

• Effective passwords and authentication systems – long passwords or passphrases, different for each account; two-step (multi-factor) verification adds a code sent to your phone.
• Encryption – scrambles data so only someone with the key can read it. Look for HTTPS on websites; encrypt laptops and flash drives.
• Software firewall – a program on the computer that controls which programs can send and receive data.
• Biometric software – e.g. face unlock on a phone.
• Antivirus and anti-malware software – scans for, blocks and removes malware. It must be kept updated.
• Software updates – fix security holes (vulnerabilities).

Video: What is a Firewall? – https://www.youtube.com/watch?v=kDEX1HXybrU

Video: What is Encryption? – https://www.youtube.com/watch?v=9chKCUQ8_VQ

Personal security practices

• Never share your passwords; log out of shared computers.
• Think before you click: check the sender and the link address.
• Do not post personal details (address, school schedule, ID numbers) publicly.
• Set social media accounts to private and accept only people you know.
• Avoid entering passwords or card numbers on public Wi-Fi.
• Download apps only from official stores; do not use pirated software.
• Lock your phone with a PIN or biometric.

For tips on making strong passwords, see Creating and managing Passwords online.

Matching countermeasures to threats

Threat	Suitable countermeasures
Malware (viruses, worms, ransomware)	Antivirus/anti-malware software, updates, backups, not opening unknown attachments
Hacking / unauthorised access	Strong passwords, two-step verification, firewalls, intrusion detection, biometrics
Phishing and identity theft	User awareness, checking links, spam filters, two-step verification
Eavesdropping / data theft	Encryption, HTTPS, avoiding public Wi-Fi for sensitive tasks, access controls
Denial of service	Firewalls, intrusion detection, DDoS protection services from the ISP
Theft, fire, flood, hurricane	Locks, CCTV, off-site and cloud backups, recovery plan

Related

Related: Videos: Computer Misuse

Paper 1 practice (multiple choice)

Choose the best answer for each question. Try them all before you check.

1. Which countermeasure protects data that is intercepted by making it unreadable?
(A) Backup
(B) Encryption
(C) Surge protector
(D) CCTV

2. A fingerprint scanner is an example of
(A) encryption
(B) biometrics
(C) a firewall
(D) antivirus

3. The BEST protection against losing files to ransomware is
(A) a bigger monitor
(B) regular backups kept separately
(C) a faster CPU
(D) turning off the printer

4. A firewall
(A) removes viruses from files
(B) controls traffic entering and leaving a network
(C) makes backups automatically
(D) encrypts emails

5. Which is a personal security practice?
(A) Installing a hardware firewall
(B) Using a different strong password for each account
(C) Fitting a UPS
(D) Using an intrusion detection system

Show answers

1. B
2. B
3. B
4. B
5. B

Paper 2 practice (structured question)

A medical clinic in Bridgetown stores patient records on a small network of computers connected to the Internet.

(a) Describe TWO physical measures the clinic could use to protect its data. (2 marks)

(b) Explain how EACH of the following protects the clinic’s data:

(i) encryption (1 mark)

(ii) antivirus software (1 mark)

(c) Explain why the clinic should use two-step verification for staff logins. (2 marks)

(d) State TWO personal security practices staff should follow. (2 marks)

Total: 8 marks

Show answers

(a) Any two (1 each):
• regular backups stored off-site/in the cloud with a recovery plan
• hardware firewall
• intrusion detection system
• biometric locks
• locked server room/CCTV

(b)

(i) Encryption scrambles the data so it cannot be read without the key if stolen or intercepted (1 mark)

(ii) Antivirus software detects and removes malware before it can damage or steal data (1 mark)

(c) Even if a password is stolen/guessed (1), the attacker cannot log in without the second factor such as a code on the staff member’s phone (1).

(d) Any two (1 each):
• do not share passwords
• log out/lock the screen when leaving a computer
• do not open suspicious emails or links
• do not use personal flash drives
• do not discuss patient data on public Wi-Fi

Next: Automation and Job Security: Job Loss vs Productivity Gains

Syllabus link: This post is relevant to the CSEC® Information Technology Syllabus (CXC 30/G/SYLL 17), Section 3: Social and Economic Impact of Information and Communications Technology (ICT), Specific Objective 3 (“describe suitable countermeasures to mitigate effects of identified threats”).

Attributions to media used in this post:

• Fingerprint sensor laptop.jpg – Repat – CC BY-SA 3.0 (via Wikimedia Commons)

© 2026 Vedesh Kungebeharry. All rights reserved.