a quick introduction to main cyber resilience vocabulary and concepts with learner reflection activities

Understanding Cyber Resilience

Compare the advantages and disadvantages of backing up data on external or cloud storage

The main cyber threats to internet users are: hacking malware phishing These are cyber-dependent threats as they require an internet connection to occur.	These actions are typically carried out by criminals, such as hackers or scammers. Hackers will typically look to exploit security settings to gain access to users' devices and platforms to steal data. Scammers will typically look to exploit people and lure, trick or coerce them into giving personal details, such as bank account or password information.

Keeping your devices safe

Take a photo of your two thumbs or thumbprints (use ink on paper) and compare how similar they are

Passcodes are usually easy to remember and quick to enter and unlock the device. They stop people from accessing the device without the owners permission. When creating a passcode, it's important NOT to use numbers that could be guessed, such as dates of birth.

Most mobile devices, such as tablets and mobiles, will require you to create a passcode in order to unlock and use the device. Passcodes are usually 4 or 6 digits long and use the numbers 0-9.

Make a list of all the accounts, apps and platforms you use an email account to log in to

Has your email been hacked or compromised? Check it here: <a href="https://haveibeenpwned.com/">haveibeenpwned.com</a>

Email is one of the most important internet services you will use. Even if it's not used for sending and receiving messages, most other web platforms still require an email address to create an account or login. Creating an email account is usually free and required to create and apple ID or google account on your devices. Microsoft Outlook is another common email provider. The <a href="https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/use-a-strong-and-separate-password-for-email">NCSC recommends that users have a unique password for email</a> that isn't used on any other account. They also recommend that users <a href="https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/activate-2-step-verification-on-your-email">activate 2FA/SV</a> on email accounts where it is available.

Make a list or add images of the different computers you use at home or in school

When setting up an email account, users are required to create a unique username. It will look something like this: The first part, before the @, is the unique username. The second part, after the @, is the email provider details. What does your email username say about you? Is it giving away information about who you are: your age or what you like? Security aside, think about who will see your username and if it presents a good image of you.

Go back and look at the list of computers you made on the last page. Now make a list of the actions you do to keep them safe

Following cyber advice should keep your devices and accounts safe but no system is ever 100% safe and secure. There are always criminals working to get access to devices and accounts. The NCSC recommends that users <a href="https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/always-back-up-your-most-important-data">regularly backup devices and accounts</a> are backed up, so that they can be recovered if they are attacked or lost. Although there's no guarantee that backups will stay secure, there is less risk of losing data from multiple places at once. Backups should be made on external storage drives or on cloud servers.

Write down 3 dates of birth that you should NEVER USE, in 6-figure format (ie January 15th 1990 would be 150190). You could use <a href="https://numbergenerator.org/random-6-digit-number-generator">this number generator</a> to make a passcode that is more secure and harder to guess

Find and make a note of the latest versions of these operating systems

<a href="https://www.android.com/intl/en_uk/what-is-android/">Android</a> <a href="https://support.apple.com/ios/update">iOS</a> <a href="https://www.microsoft.com/en-gb/windows">Windows</a>

Every device you use has an operating system (OS), such as Windows, iOS or android. This is the set of instructions on how the devices should work. OS updates are released regularly and include updates to make the device work better but also usually to fix a security exploits that have been found. Security exploits are usually found by <a href="https://techshecan.org/animated-lessons/cyber-security">ethical hackers</a> who work to find problems in systems so that they can be fixed. The NCSC r<a href="https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/install-the-latest-software-and-app-updates">ecommends that anyone</a> who uses an internet-enabled device updates the OS as soon as possible to keep it as secure as possible.

Hacking is the process of accessing someone's device or data without their permission. This is usually done by criminals who are looking to steal data or personal information. There are 'ethical hackers' who work to find security vulnerabilities in devices and platforms, so that they can be fixed; keeping users safer. <a href="https://www.ncsc.gov.uk/guidance/recovering-a-hacked-account">The NCSC provides advice for anyone who has been hacked.</a>

04 06 16 22 30

<a href="bookcreator://page/nWrP0LU4QOqudrieUanhNg">introduction</a> <a href="bookcreator://page/xRBVmkfjQKCbT7EdOci04g">device security</a> <a href="bookcreator://page/RJ7UsGj3TIGHYfPBwSS1Cw">platform security</a> <a href="bookcreator://page/2prwL5x0QpqqkCZ5TakoSQ">cyber threats</a> <a href="bookcreator://page/nhEW1So_Qfi_fi_KaOYU3A">internet safety risks</a>

Write down 3 passwords that have three random words in them <a href="https://randomwordgenerator.com/">You can use this random word generator</a> Test how strong your passwords are with <a href="https://www.security.org/how-secure-is-my-password/">this site</a>

Create a poster or slide explaining the actions (one or some) you think are most important to <a href="https://www.ncsc.gov.uk/guidance/recovering-a-hacked-account">recover a hacked account</a>

introduction to cyber resilience

Cyber means <a href="https://www.collinsdictionary.com/dictionary/english/cyber">'to do with computers'</a>. Resilience means <a href="https://www.collinsdictionary.com/dictionary/english/resilient">'strong and not easily damaged' and also 'recovers easily and quickly'</a>. So, cyber resilience is all about making, and keeping, people who use computers less safer from risks but also able to recover from risks that may have harmed them.

Passwords are 'secret words or phrases needed to access a secure place'. Although most modern devices, such as tablets and mobiles, use passcodes or biometrics to unlock them, some may require a password. Most laptops still make use of passwords, although it is increasingly common for them to also use passcodes and biometrics. The <a href="https://www.ncsc.gov.uk/">National Cyber Security Centre</a><a href="https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/three-random-words">recommends passwords should be made of three random words</a>. This makes them hard to guess and stops most people from being able to access your device without permission.

Evaluate the usernames below - what's good or bad about them

georgelovesminecraft@outlook.com scotthatespartickthistle@icloud.com eva2012@gmail.com

Biometric means 'using body information', such as eyes, face or fingerprints. Most modern mobile devices include biometric security to help keep the device even safer. This means that the device needs to scan one of your biometrics, such as eye, face or fingerprint to unlock and use it. This makes it even harder for someone to use it without your permission.

The computers we use can have valuable information on them. This might be photos and videos you value, a game with hours of progress you've played, or information about a business, including where they keep their money! So, it is important that the computers you use are kept safer, are not easy to get into without permission, and are easy to recover if things do go wrong.

Name

Safari may block some audio or video from playing automatically and ‘read to me’ will skip these. You can configure this in Safari’s preferences.