STUDY GUIDE · GKU 7
Human security: threat actors, techniques and awareness study guide (Cybersecurity)
Intrusions often begin with a person: someone clicks, someone reuses a password, someone with legitimate access decides to take data. This unit therefore looks at security from the human side. It starts with the actors behind attacks and what each of them wants, then the malware families and the social-engineering techniques that deliver them, then insider threats and the models defenders use to reason about an intrusion — the kill chain, MITRE ATT&CK, STRIDE, DREAD and attack trees. It closes with the evidence that separates an incident from background noise, and with the awareness programme that changes behaviour: who is trained, how often, how success is measured, and where monitoring and discipline must stay within the law. Numbers in the examples are given data, not statistics about any real organisation.
Structured by the official ETEC subject standard for this topic: every listed topic and learning outcome, with formulas, figures and worked examples. The full sections are available to members in the app.
SKU 7.1 · Cyber threats
Threat actors, malware, social engineering and attack models
Who attacks and why, the malware families and social-engineering techniques they use, the three kinds of insider threat, the models that structure an attack (kill chain, ATT&CK, STRIDE, DREAD, attack trees), and the indicators and controls that answer them.
Awareness, training, education and their legal limits
The difference between awareness, training and education; a programme built on onboarding, refreshers and role-based modules; the metrics that measure behaviour rather than attendance; and the privacy, legal and fairness limits on monitoring and discipline.
MORE CYBERSECURITY GUIDES
- Cybersecurity foundations: principles, threats, risk and governance study guideGKU 1 · 3 sections
- Data security: cryptography, forensics and databases study guideGKU 2 · 6 sections
- Software security: development, secure coding, design and algorithms study guideGKU 3 · 5 sections
- Component security: architecture, vulnerabilities and environments study guideGKU 4 · 2 sections
- Network security study guideGKU 5 · 5 sections
- System security study guideGKU 6 · 4 sections
- Organisational security: ethics, law, risk and economics study guideGKU 8 · 3 sections