CYBER SECURITY AWARENESS IN ICT REPAIRS Lesson Note
LEARNING OBJECTIVES
This SS3 Computer Hardware & GSM Repair lesson note covers CYBER SECURITY AWARENESS IN ICT REPAIRS for First Term, Week 5.
Lesson Note
LEARNING OBJECTIVES
By the end of the lesson, students should be able to:
1. Define cyber security.
2. Explain the importance of cyber security in ICT repairs.
3. Identify common cyber security threats affecting computers and mobile phones.
4. Explain malware, phishing, social engineering, spyware, ransomware and other common threats.
5. State ways of protecting computers and mobile devices during repair.
6. Explain the importance of passwords, software updates and secure backups.
7. Identify suspicious files, links, applications and messages.
8. Explain safe handling of customers’ data during ICT repairs.
9. State the responsibilities of an ICT repair technician regarding customer privacy and security.
10. Describe basic steps to take when a device is suspected to be infected or compromised.
CONTENT
MEANING OF CYBER SECURITY
Cyber security is the practice of protecting computers, mobile phones, networks, software, digital systems and information from unauthorized access, damage, theft, disruption or misuse.
Cyber security is important because modern computers and mobile phones contain valuable information such as:
- Personal information
- Passwords
- School and work documents
- Photographs and videos
- Contact lists
- Emails
- Financial information
- Business records
- Application data
An ICT repair technician therefore needs to understand basic cyber security principles while repairing computers, smartphones and other electronic devices.
CYBER SECURITY IN ICT REPAIRS
Cyber security in ICT repairs refers to the practices used to protect a customer’s device, information and accounts from security threats during diagnosis, maintenance, repair, installation or servicing.
A repair technician may have physical access to a customer’s device. This creates a responsibility to ensure that the customer’s information is not exposed, copied, altered or misused.
For example, when repairing a laptop, a technician may encounter:
- Personal documents
- Pictures
- Browser information
- Saved accounts
- Password managers
- Email accounts
- School assignments
- Business files
The technician must handle such information responsibly.
IMPORTANCE OF CYBER SECURITY IN ICT REPAIRS
Cyber security is important in ICT repairs for the following reasons:
Protection of customer information
It prevents unauthorized people from accessing private information stored on a device.
Prevention of data theft
Security practices help prevent the copying or stealing of important files.
Protection against malware
A repair technician may encounter infected computers or phones. Cyber security knowledge helps identify and reduce malware risks.
Protection of accounts
Proper security practices help protect email, social media and other online accounts.
Prevention of further damage
Unsafe repair practices can expose a device to additional security problems.
Maintaining customer trust
Customers expect technicians to protect their information and devices.
Protection of business information
Computers used by businesses may contain confidential records that must be protected.
COMMON CYBER SECURITY THREATS
Several threats can affect computers, smartphones and networks.
Malware
Malware means malicious software designed to perform harmful or unwanted actions on a computer or mobile device.
Examples include:
- Viruses
- Worms
- Trojans
- Ransomware
- Spyware
Malware may cause data loss, slow performance, unauthorized access or other problems.
Computer Virus
A computer virus is a malicious program that can attach itself to files or programs and spread when the infected file or program is executed.
Possible effects include:
- Damaging files
- Slowing down the computer
- Changing system settings
- Causing applications to malfunction
- Making unwanted changes to data
Worm
A worm is malicious software that can spread from one computer or system to another, often through networks or security weaknesses.
Unlike many traditional viruses, worms can spread without requiring the user to manually attach them to another file.
Trojan Horse
A Trojan is malicious software that disguises itself as a legitimate or useful program.
For example, a user may install an application believing that it is genuine, while the application performs harmful activities in the background.
Spyware
Spyware is software designed to secretly monitor or collect information about a user’s activities.
It may attempt to collect:
- Browsing information
- Personal information
- Account information
- Device usage information
Ransomware
Ransomware is malicious software that prevents users from accessing their files or systems and demands some form of payment or action.
A strong backup system is an important protection against data loss caused by ransomware.
PHISHING
Phishing is a cyber attack in which an attacker attempts to trick a person into revealing sensitive information or performing an unsafe action.
Phishing can occur through:
- Text messages
- Social media
- Fake websites
- Messaging applications
A phishing message may pretend to come from a trusted organization or person.
Warning signs of phishing
A suspicious message may:
- Create unnecessary urgency.
- Ask for passwords or security codes.
- Contain suspicious links.
- Request confidential information.
- Contain unusual spelling or grammar.
- Direct the user to an unfamiliar website.
- Make unrealistic promises.
Users should verify suspicious requests through trusted channels rather than clicking questionable links.
SOCIAL ENGINEERING
Social engineering involves manipulating people into revealing information or performing actions that compromise security.
Instead of attacking the computer directly, an attacker may try to deceive the user.
Examples include:
- Pretending to be a technician.
- Pretending to be a company representative.
- Asking for a password.
- Pretending to be a friend or colleague.
- Creating a false emergency to obtain information.
ICT technicians should verify identities and authorization before accessing protected systems.
PASSWORD SECURITY
Passwords are an important part of cyber security.
A good password should be:
- Difficult for others to guess.
- Unique to the account.
- Kept private.
- Changed when necessary.
- Not shared unnecessarily.
Where available, multi-factor authentication (MFA) should be used because it provides an additional layer of protection beyond a password.
PASSWORD PRACTICES FOR TECHNICIANS
A repair technician should:
1. Avoid asking customers to reveal passwords unless genuinely necessary for an authorized repair.
2. Never write down or keep customer passwords unnecessarily.
3. Avoid using customer passwords for unrelated activities.
4. Encourage customers to change passwords if a repair process may have exposed them.
5. Keep repair records secure.
SOFTWARE UPDATES
Software updates can contain:
- Security fixes
- Bug fixes
- Performance improvements
- New features
- Compatibility improvements
Keeping operating systems, applications and security software updated can reduce exposure to known security weaknesses.
Examples include:
- Windows updates
- Android updates
- iOS updates
- Antivirus/security software updates
- Application updates
A technician should use legitimate software and official update sources whenever possible.
ANTIVIRUS AND SECURITY SOFTWARE
Security software can help detect and respond to malicious programs.
Examples of security measures include:
- Antivirus software
- Anti-malware software
- Firewall
- Device security features
- Browser security features
A technician should ensure that security software is obtained from legitimate sources and kept updated.
FIREWALL
A firewall is a security system that monitors and controls network traffic according to defined security rules.
A firewall can help prevent unauthorized network connections.
Firewalls may be:
- Software-based
- Hardware-based
- Built into operating systems
- Included in network devices
For example, a computer’s built-in firewall can help control incoming and outgoing network connections.
SAFE INTERNET AND BROWSING PRACTICES
Technicians should follow safe browsing practices when working with computers and mobile devices.
These include:
1. Avoiding suspicious websites.
2. Checking website addresses carefully.
3. Avoiding unknown downloads.
4. Not opening suspicious attachments.
5. Using trusted software sources.
6. Keeping browsers updated.
7. Avoiding unnecessary installation of unknown extensions.
8. Logging out of accounts when appropriate.
DATA PROTECTION DURING ICT REPAIRS
Data protection is extremely important when repairing a customer’s device.
Before beginning a repair, the technician should:
- Explain what the repair may involve.
- Obtain appropriate authorization.
- Avoid accessing files that are not necessary for the repair.
- Back up important data where appropriate and authorized.
- Protect copied data.
- Avoid sharing customer information.
- Return or securely remove temporary copies when they are no longer needed.
Example
If a technician is repairing a laptop’s keyboard, there is usually no need to open the customer’s personal photographs or documents.
The technician should focus only on information necessary for the repair.
BACKUP AND DATA RECOVERY
A backup is a separate copy of important data kept so that it can be recovered if the original data is lost or damaged.
Common backup locations include:
- External storage devices
- Network storage
- Cloud storage
- Other secure storage systems
Backups are useful in cases of:
- Hardware failure
- Accidental deletion
- Malware infection
- Software problems
- Device loss
- Data corruption
A technician should obtain appropriate permission before copying or transferring customer data.
USB DEVICES AND CYBER SECURITY
USB flash drives and other removable storage devices can carry malicious software.
When using removable storage:
- Use trusted devices.
- Scan suspicious media with appropriate security software.
- Avoid opening unknown files.
- Do not connect unknown devices unnecessarily.
- Keep important files backed up.
Technicians should be especially careful when transferring files between multiple computers.
CYBER SECURITY IN GSM AND MOBILE PHONE REPAIRS
Mobile phones contain valuable personal information, so cyber security is also important in GSM repairs.
A phone may contain:
- Contacts
- Messages
- Photographs
- Videos
- Emails
- Applications
- Account information
- Documents
- SIM-related information
A repair technician should protect the customer’s privacy while diagnosing and repairing the device.
Examples of mobile security threats
- Malicious applications
- Phishing messages
- Fake applications
- Unsafe downloads
- Unauthorized access
- Stolen login information
- SIM-related fraud
- Unsecured Wi-Fi connections
SAFE APPLICATION INSTALLATION
Technicians should encourage users to install applications from trusted and legitimate sources.
Installing applications from unknown sources can increase the risk of:
- Malware
- Data theft
- Unauthorized access
- Unwanted advertisements
- Device instability
Before installing software, verify:
- The application source
- The application’s purpose
- The developer
- Required permissions
- Whether the software is genuine
DEVICE LOCKING
Device locks provide basic protection against unauthorized access.
Examples include:
- PIN
- Password
- Pattern
- Fingerprint
- Face authentication
A user should use an appropriate device lock and avoid sharing it unnecessarily.
When a device is handed over for repair, the technician should follow the customer’s authorized repair instructions rather than attempting to bypass security controls without permission.
PRIVACY AND PROFESSIONAL ETHICS
An ICT repair technician should behave professionally when handling customer devices.
Important ethical principles include:
Confidentiality
Customer information should not be disclosed to unauthorized persons.
Integrity
The technician should not intentionally modify or delete customer information.
Authorization
A technician should only perform activities that the customer or authorized owner has permitted.
Responsibility
The technician should take reasonable steps to protect the customer’s device and information.
Honesty
The technician should clearly explain repairs, data risks and any unexpected problems.
CYBER SECURITY INCIDENT
A cyber security incident is an event that may compromise the security, confidentiality, integrity or availability of a device, system or information.
Examples include:
- Malware infection
- Unauthorized account access
- Suspicious software installation
- Data theft
- Lost device containing sensitive information
- Unusual network activity
When a security incident is suspected, the technician should follow appropriate procedures and avoid making the situation worse.
BASIC RESPONSE TO A SUSPECTED SECURITY PROBLEM
A basic response may include:
1. Identify the problem — Determine what unusual behavior is occurring.
2. Stop unnecessary activity — Avoid actions that could spread the problem.
3. Disconnect from networks when appropriate — This may help prevent further communication with malicious systems.
4. Protect important data — Preserve important information if it can be done safely and appropriately.
5. Use trusted security tools — Scan or diagnose the device using legitimate tools.
6. Inform the appropriate person — Notify the device owner or responsible authority.
7. Document the incident — Record relevant observations and actions taken.
8. Restore the system appropriately — Follow proper recovery procedures.
CYBER SECURITY PRECAUTIONS FOR ICT TECHNICIANS
An ICT repair technician should:
1. Use legitimate software.
2. Keep repair computers updated.
3. Use appropriate security software.
4. Avoid unknown USB devices.
5. Protect customer information.
6. Obtain authorization before accessing data.
7. Use secure networks.
8. Avoid sharing customer passwords.
9. Back up data when authorized and necessary.
10. Delete temporary copies securely when they are no longer needed.
11. Verify software before installation.
12. Keep important repair records protected.
13. Avoid downloading unnecessary files from suspicious websites.
14. Educate customers about basic security practices.
DIFFERENCE BETWEEN CYBER SECURITY AND DATA PRIVACY
Cyber Security
Cyber security focuses mainly on protecting systems, devices, networks and information from threats.
Data Privacy
Data privacy focuses on how personal information is collected, accessed, used, stored and shared.
Both are important in ICT repairs.
For example, using antivirus software is a cyber security practice, while ensuring that a customer’s private photographs are not viewed or shared without authorization is a privacy practice.
SIMPLE CYBER SECURITY CHECKLIST FOR REPAIR TECHNICIANS
Before repair:
- Confirm the customer’s identity/authorization.
- Understand the repair request.
- Identify important data and possible risks.
- Explain backup requirements where necessary.
During repair:
- Access only necessary information.
- Use trusted software and tools.
- Avoid unnecessary internet downloads.
- Protect customer data.
- Keep devices and removable media secure.
After repair:
- Test the device.
- Remove unnecessary temporary files.
- Confirm that important functions work.
- Return the device and data appropriately.
- Explain relevant security recommendations to the customer.
SUMMARY
Cyber security awareness is an important part of ICT repairs. Computers, smartphones and networks can contain valuable and private information, making them targets for malware, phishing, unauthorized access and other cyber threats.
An ICT repair technician must not only know how to repair hardware and software but must also understand how to protect customer information and devices.
Good cyber security practices include using strong authentication, keeping software updated, using legitimate security tools, avoiding suspicious files and links, maintaining backups, protecting removable devices and respecting customer privacy.
A responsible technician should always work with proper authorization and protect customer information throughout the repair process.
Evaluation
OBJECTIVE QUESTIONS
Choose the correct answer from options A–D.
1. What is cyber security?
A. The process of painting computers
B. The protection of digital systems and information from threats
C. The process of repairing keyboards only
D. The process of increasing computer screen size
2. Which of the following is an example of malware?
A. Virus
B. Keyboard
C. Monitor
D. Printer
3. An attempt to trick a user into revealing sensitive information through a fake message or website is called _____.
A. Formatting
B. Phishing
C. Printing
D. Scanning
4. Which of the following is mainly used to control network traffic?
A. Firewall
B. Keyboard
C. Scanner
D. Speaker
5. Which of the following is an important responsibility of an ICT repair technician?
A. Sharing customer files
B. Protecting customer information
C. Guessing customer passwords
D. Installing unknown applications
6. Ransomware is a type of malicious software that can _____.
A. Improve screen brightness
B. Restrict access to data and demand payment or action
C. Increase keyboard speed
D. Repair damaged hardware
7. Which of the following is a good password security practice?
A. Sharing passwords publicly
B. Using the same password everywhere
C. Keeping passwords private
D. Writing passwords on public notice boards
8. What is a backup?
A. A separate copy of important data
B. A damaged computer
C. A type of keyboard
D. A network cable
9. Which of the following can help protect a computer from malicious software?
A. Antivirus or anti-malware software
B. Broken keyboard
C. Empty monitor
D. Damaged speaker
10. When repairing a customer’s phone, a technician should _____.
A. Access all personal files without permission
B. Share the customer’s photographs
C. Protect the customer’s privacy and access only necessary information
D. Give the customer’s password to another person
THEORY QUESTIONS
1a. What is cyber security? Explain five reasons why cyber security is important in ICT repairs.
1b. Explain the following cyber security threats:
- Malware
- Phishing
- Spyware
- Ransomware
- Trojan horse
2a. State and explain five precautions an ICT repair technician should take to protect a customer’s data.
2b. Explain the importance of software updates, passwords, antivirus software and firewalls in cyber security.
2c. What is data privacy? State five ethical responsibilities of an ICT repair technician when handling a customer’s computer or mobile phone.