There are a number of security risks associated with using the Internet. Name three of these risks. For each, state why it is a risk and describe how the risk can be minimised. Security risk 1 Why it is a risk How to minimise the risk Security risk 2 Why it is a risk. How to minimise the risk Security risk 3 Why it is a risk How to minimise the risk

Mark scheme

Marking points from the official mark scheme (Oct/Nov 2015). The mark or mark type is shown in brackets.

1. [1] Risk: hacking
2. [1] Reason: illegal/unauthorised access to data / deletion/amendment of data
3. [1] Minimised: use of passwords/user ids / use of firewalls / encrypt data/encryption
4. [1] Risk: virus
5. [1] Reason: can corrupt/delete data / cause computer to crash/run slow / can fill up hard drive with data
6. [1] Minimised: use of /run anti-virus (software) / do not download software or data from unknown sources
7. [1] Risk: spyware/key logging (software)
8. [1] Reason: can read key presses/files/monitors on a user's computer
9. [1] Minimised: use of/run anti-spyware (software) / use data entry methods such as drop-down boxes to minimise risk
10. [1] Risk: phishing
11. [1] Reason: website obtains personal/financial data / link/attachments takes user to fake/bogus website
12. [1] Minimised: do not open/click emails/attachments from unknown sources / some firewalls can detect fake/bogus websites
13. [1] Risk: pharming
14. [1] Reason: redirects user to fake/bogus website / redirection obtains personal/financial data
15. [1] Minimised: only trust secure websites, e.g. look for https / check the URL matches the intended site
16. [1] Risk: credit card fraud/identity theft
17. [1] Reason: loss of money due to misuse of card/stealing data
18. [1] Minimised: set passwords / encrypt data/encryption
19. [1] Risk: cracking
20. [1] Reason: illegal/unauthorised access to data
21. [1] Minimised: setting strong passwords / encrypt data/encryption