Cybersecurity controls - part 2

In this lesson

1. 0:00 Introduction to firewalls and network security
2. 1:04 Email vulnerabilities and encryption risks
3. 2:31 Email policies and attachment security
4. 3:52 Passwords: best practice principles
5. 5:36 Biometric authentication and future identification
6. 6:46 Backups and disaster recovery controls

About this lesson

We'll explore how firewalls restrict access by default, why email requires special attention due to virus and eavesdropping risks, what makes passwords effective (and ineffective), and how backup strategies protect against data loss. This content is essential for understanding the control environment in BT and forms part of your broader knowledge of organisational risk management. Firewalls act as a barrier between your organisation's internal systems and the outside world, allowing nothing in or out without explicit permission. However, they're not foolproof—skilled hackers can bypass them, so you need layered defences. Email poses particular challenges because it's a common vector for viruses and phishing attacks, defaults to unencrypted transmission, and can reduce efficiency through overuse. Best practice includes prohibiting confidential information via email, encrypting sensitive messages, scanning all attachments for viruses before opening, and remembering that emails may be disclosed in legal proceedings. Passwords remain a critical control but only when implemented properly. Best practice includes keeping them secret, avoiding obvious or dictionary-based passwords, steering clear of publicly available information, changing them regularly (far more than annually), and crucially, never writing them down. The challenge is that we're currently required to remember multiple complex passwords, though biometric identification may eventually replace this burden. Backups and backup controls provide your final line of defence. Regular automated backups—ideally incremental and stored in the cloud rather than on-site—allow you to recover from data loss or system failures. Cloud backups offer the advantage of geographic separation from your organisation, though they do introduce dependency on your service provider's security practices.

Duration: 8m