Enterprise Computing: Cybersecurity- Vulnerabilities exploited by the threat actor...

A cybersecurity breach occurs when security is compromised, allowing unauthorised access, disclosure, changes or disruption. In Year 11 Enterprise Computing’s Principles of cybersecurity focus area, we investigate how breaches affect information, enterprise operations and people. 1. Confidentiality means information should only be accessible to authorised people. It is breached when someone views, copies or shares information without permission. For example, an attacker might download confidential student records from a school database. This exposes sensitive information and can damage trust in the school. 2. Availability means authorised users can access information and services when needed. A breach may make systems or files inaccessible. For example, ransomware could encrypt attendance records, preventing staff from opening them. This disrupts daily operations and may delay important decisions. Information does not have to be stolen for availability to be affected. 3. Privacy implications concern how a breach affects people’s personal information and their lives. Exposed names, addresses or contact details could be used for targeted scams, impersonation or unwanted contact. Individuals may experience financial loss, distress or reduced control over their information. 4. These effects can occur together. Imagine attackers steal student records and then encrypt the school’s files. Confidentiality is breached because unauthorised people have copied the records. Availability is reduced because staff cannot open the files. Privacy risks increase because students’ personal details may be misused. 5. The infographic also reminds us to consider integrity: whether information has been changed or destroyed without authorisation. For example, altered emergency contact details could make records unreliable. When analysing a breach, ask: What information was exposed? What became unavailable? Was anything changed? Who could be harmed? These questions help explain the seriousness of the incident and guide an appropriate response.