Safeguards against security threats and attacks
Businesses protect systems with layers of safeguards: firewalls, antivirus, strong authentication, encryption, backups, clear policies and staff training.
Technical safeguards
| Safeguard | What it does |
|---|---|
| Firewall | Hardware or software that blocks unauthorised traffic into or out of a network |
| Antivirus / anti-malware | Scans for, blocks and removes malware; must be kept updated |
| Software updates (patches) | Close security holes found in programs and operating systems |
| Access control | User IDs, passwords and permissions based on job role |
| Two-factor authentication | A second proof, such as an OTP, on top of the password |
| Biometrics | Fingerprint or face recognition |
| Encryption | Turns data into unreadable code; used in HTTPS and on laptops |
| Backup | Regular copies kept off-site or in the cloud |
| Audit trails and intrusion detection | Record and flag suspicious activity |
| UPS and surge protection | Keep systems running safely through power cuts and surges |
Three ways to prove who you are
Two-factor authentication combines two different kinds, e.g. a password and an OTP.
The security management cycle
- back to Identify risks
People and policy safeguards
- A written security policy: acceptable use, passwords and data handling.
- Staff training to spot phishing and scams.
- Strong passwords: long, mixed and never reused.
- Least privilege: staff get only the access their job needs.
- Physical security: locked server rooms, CCTV, laptop locks.
- A disaster recovery plan for fire, flood or cyber attack.
Sri Lankan bank apps use two-factor authentication (a password plus an OTP sent to your phone, or a fingerprint), and offices keep a UPS so a sudden power cut does not corrupt open files or damage servers.
Short answer: “What is a firewall?” Hardware or software that checks network traffic and blocks unauthorised access into or out of a network.
Structured question: “Explain two-factor authentication with an example.” Logging in with two different kinds of proof, e.g. a password (something you know) and an OTP on your phone (something you have).
Essay: “Discuss the safeguards a business can use against security threats and attacks.” Explain firewalls, antivirus and updates, access control and authentication, encryption, backup and UPS, and people and policy measures.
Lock the door (firewall, access control), check the visitors (antivirus, two-factor login), hide the valuables (encryption), keep a spare key (backup), and train the guards (staff).