Discuss the safeguards a business can use against security threats and attacks.

1. 1 · Open in two lines. No single control is enough. Businesses use layers of technical, physical and people safeguards to protect data and systems.
2. 2 · Firewalls, antivirus and updates. A firewall blocks unauthorised traffic; antivirus finds and removes malware; regular patches close security holes.
3. 3 · Access control and authentication.
   • User IDs, strong passwords and job-based permissions (least privilege).
   • Two-factor authentication and biometrics.
4. 4 · Encryption. Data is scrambled in transit (HTTPS) and on devices, so stolen data cannot be read.
5. 5 · Backup, UPS and disaster recovery. Regular off-site or cloud backups, a UPS against power cuts, and a tested recovery plan.
6. 6 · People and policy. A security policy, staff training against phishing, physical security of server rooms, and audit trails.
7. 7 · Sri Lankan business example. Bank apps use a password plus an OTP or fingerprint; offices use a UPS because power cuts can corrupt files.
8. 8 · Close in one line. Security is a continuous cycle: identify risks, protect, monitor, respond and improve.

Scoring tip: Match each safeguard to the threat it stops; examiners reward that link.