What Is Cybersecurity?

Introduction

Almost everything we do online involves digital information. We use computers, smartphones, websites, email, and online banking to communicate, learn, work, and manage our daily lives.

But digital systems can face threats such as phishing, malware, account theft, and data breaches. Cybersecurity helps protect systems and information from these threats.

In this lesson, you will learn the meaning of cybersecurity, its importance, and its main areas.

Learning Objectives

By the end of this lesson, you will be able to:

• Define cybersecurity in simple terms.
• Explain why cybersecurity is important.
• Identify the three main goals of information security.
• Recognize common cybersecurity threats.
• Describe basic ways to stay safe online.

1. What Is Cybersecurity?

Cybersecurity is the practice of protecting computers, networks, applications, devices, and data from unauthorized access, misuse, disruption, or damage.

Think of cybersecurity as a combination of locks, security cameras, safety rules, and trained people—but applied to digital systems.

For example, when you enable multi-factor authentication on an email account, you make it harder for another person to access your account even if they discover your password.

2. Why Is Cybersecurity Important?

Cybersecurity helps protect:

• Personal information: Names, addresses, photographs, and private messages.
• Financial information: Banking details and payment information.
• Business data: Customer records, confidential documents, and company systems.
• Digital services: Websites, applications, networks, and cloud platforms.
• Availability: Systems people depend on for work, communication, and essential services.

Without appropriate protection, attackers may steal information, impersonate users, disrupt services, or demand money.

3. The CIA Triad

A foundational cybersecurity model is the CIA triad. CIA stands for Confidentiality, Integrity, and Availability.

Confidentiality

Confidentiality means information should only be accessible to authorized people or systems.

Example: Using access controls so only authorized employees can view a company's payroll records.

Integrity

Integrity means information remains accurate and is changed only in authorized ways.

Example: Preventing unauthorized changes to a student's examination results.

Availability

Availability means information and services are accessible when authorized users need them.

Example: Maintaining reliable backups and recovery procedures so a business can restore important files after a system failure.

All three goals are important. A system that keeps information secret but is always unavailable is not adequately protected.

4. Common Cybersecurity Threats

Phishing

Phishing involves deceptive messages or websites designed to trick people into revealing information or performing unsafe actions.

Example: An email pretending to come from a delivery company asks you to follow an unfamiliar link and enter your account password.

Malware

Malware is software designed to perform harmful or unauthorized activities. Examples include ransomware, spyware, and certain types of trojans.

Password Attacks

Attackers may try stolen passwords, reused credentials, or easily guessed passwords to access accounts.

Social Engineering

Social engineering manipulates people into revealing information or taking actions that compromise security.

Data Breaches

A data breach occurs when sensitive or protected information is accessed or disclosed without authorization.

5. Basic Cybersecurity Practices

Follow these habits to reduce common risks:

1. Use long, unique passwords for different accounts.
2. Enable multi-factor authentication where available.
3. Keep your operating system, browser, and applications updated.
4. Avoid opening unexpected attachments or clicking suspicious links.
5. Back up important files regularly.
6. Download software from trusted sources.
7. Review account activity and security alerts.
8. Never test security controls on systems without permission.

No single measure eliminates every risk. Effective security combines technology, good habits, and appropriate procedures.

6. Practical Activity

Activity: Identify the security measures

Imagine you are helping a small business improve its security.

The business uses email, stores customer records, and maintains its documents on office computers.

Identify one security measure for each goal:

• Confidentiality: How would you prevent unauthorized people from viewing customer records?
• Integrity: How would you reduce the risk of unauthorized changes to documents?
• Availability: How would you help employees recover important files after accidental deletion?

Suggested answers:

• Confidentiality: Apply appropriate access controls and multi-factor authentication.
• Integrity: Restrict editing permissions and maintain audit logs where appropriate.
• Availability: Keep tested backups and document recovery procedures.

7. Knowledge Check

Question 1: What is cybersecurity?

A. Creating social media accounts
B. Protecting digital systems and information
C. Increasing internet speed
D. Designing computer hardware

Correct answer: B

Question 2: What does confidentiality mean?

A. Information is always publicly available
B. Information can be changed by anyone
C. Information is accessible only to authorized people or systems
D. Information is deleted every day

Correct answer: C

Question 3: Which of the following is an example of phishing?

A. Installing a legitimate software update
B. Receiving a deceptive email that asks for your password
C. Creating a backup of important files
D. Enabling multi-factor authentication

Correct answer: B

Question 4: Why are backups important?

A. They guarantee that attacks never happen
B. They make passwords unnecessary
C. They help recover data after loss or damage
D. They automatically prevent phishing

Correct answer: C

Lesson Summary

Cybersecurity protects digital devices, networks, applications, and information from unauthorized access, misuse, and disruption.

The CIA triad—Confidentiality, Integrity, and Availability—provides a foundation for understanding security objectives. Threats such as phishing, malware, password attacks, and data breaches demonstrate why protective measures are necessary.

In the next lesson, you will explore cybersecurity terminology and the modern cyber threat landscape.