Discuss the types of internet and network attacks and security threats faced by a business.

1. 1 · Open in two lines. A security risk is any event or action that could cause loss of or damage to computer hardware, software, data or processing ability.
2. 2 · Malware.
   • Virus: spreads through infected files.
   • Worm: spreads by itself across networks.
   • Trojan horse: disguised as useful software.
   • Ransomware and spyware: lock files for money; secretly record passwords.
3. 3 · Phishing and social engineering. Fake emails, SMS (smishing) or calls (vishing) trick staff and customers into giving passwords, OTPs or card details.
4. 4 · Denial of service and hacking. DoS and DDoS attacks flood servers so customers cannot reach them; hackers gain unauthorised access to steal or change data.
5. 5 · Spoofing and interception. Faked addresses and websites look trusted; man-in-the-middle attacks capture data on insecure networks.
6. 6 · Physical and other risks. Hardware and information theft, software piracy, power failures, floods, fire and careless or dishonest insiders.
7. 7 · Sri Lankan business example. Banks and Sri Lanka CERT warn customers never to share OTPs, because smishing and vishing scams impersonate banks and couriers.
8. 8 · Close in one line. These threats cause financial loss, lost data and damaged reputation, so every business needs safeguards.

Scoring tip: Group threats under headings (malware, attacks, physical) and give each a one-line example.