← Years 9–10 Digital Systems

Threat

Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure. Threats can be deliberate or accidental, and internal or external.

Understanding Threat in Years 9–10 Digital Systems

What it does: Deliberate threats involve intent to cause harm, so the code labels the threat as deliberate. Internal threats come from people or systems inside the organisation, while external threats come from outside it. A threat is anything that could harm an asset. A weakness in a system is a vulnerability, which is a different idea. The harm was not intended. Human error is an accidental threat. This card is wrong because it limits threats to hackers, ignoring accidental threats like power failures.

Common mistakes: A phishing email is sent on purpose by an attacker, so it is a deliberate threat. The line should be intent = "deliberate". Antivirus software protects an asset, so it is a security control and not a threat. A threat is something that could cause harm, such as a power failure.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

This module's key terms are also in a printable crossword (Modules 25–40) and word search (Modules 13–40).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which best describes a threat in digital security?
A weakness that is always fixed by an updateAnything that could cause harm to an asset
Matches
A threat must always be a hacker, so a power failure is not a threat
↓
A threat can be anything that could harm an asset, including malware, human error and power failures, not just attackers.
Applying
Meanings
Term
threat
Meaning
Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure. Threats can be deliberate or accidental, and internal or external.
Practice
asset: student records
Testing
Gaps
← "malware"
Check Answer
Spots
2threat = "phishing email"
3intent = "accidental"

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Silverback Gorilla' badge — Savannah Master, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Quick Questions

1. Which best describes a threat in digital security?
A. Anything that could cause harm to an asset ✓
B. A weakness that is always fixed by an update
A threat is anything that could harm an asset. A weakness in a system is a vulnerability, which is a different idea.
2. Which one is a threat to a school's student records?
A. A power failure that corrupts the server ✓
B. A strong password on the server
A power failure could damage the asset, so it is a threat. A strong password helps protect the asset, so it is not a threat.
3. A hacker deliberately tries to steal a company's customer data. What type of threat is this?
A. Accidental threat
B. Deliberate threat ✓
The hacker is acting on purpose to cause harm, so this is a deliberate threat.
4. A student accidentally deletes a shared class folder. What type of threat is this?
A. Accidental threat ✓
B. Deliberate threat
The harm was not intended. Human error is an accidental threat.
5. An unhappy employee copies private files before leaving the company. Which type of threat is this?
A. External threat
B. Internal threat ✓
The person already has legitimate access inside the organisation, so this is an internal threat. It is also deliberate.

Match the Pairs

threat → Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure
threat_type = "accidental" → A threat with no intent to cause harm, such as a student deleting a file by mistake
A deliberate threat is caused on purpose, like a hacker trying to steal data → threat_type = "deliberate"
An internal threat comes from inside the organisation, like a staff member who clicks a bad link → threat_source = "internal"
A threat must always be a hacker, so a power failure is not a threat → A threat can be anything that could harm an asset, including malware, human error and power failures, not just attackers.
threat_source = "internal" for a stranger hacking in from overseas → A stranger hacking from overseas is an external threat, not an internal one. The label should be "external".

Key Term

threat
Anything that could cause harm to an asset, such as an attacker, malware, human error or a power failure. Threats can be deliberate or accidental, and internal or external.

Fill in the Blanks

1. asset ← "school laptop" threat ← "malware"
Hint: Type the variable name for anything that could cause harm to the asset.
2. threat ← "phishing attack" intent ← "deliberate"
Hint: Type the intent word for a threat where someone is purposely trying to cause harm.
3. threat ← "spilled drink" intent ← "accidental"
Hint: Type the intent word for a threat caused by a mistake, not by someone trying to cause harm.
4. threat ← "hacker overseas" source ← "external"
Hint: Type the source word for a threat that comes from outside the organisation.
5. threat ← "staff share password" source ← "internal"
Hint: Type the source word for a threat that comes from inside the organisation, such as its own people.

Spot the Error

Question 1
A asset = "student records"
B threat = "phishing email"
C intent = "accidental"
D source = "external"
Line C — A phishing email is sent on purpose by an attacker, so it is a deliberate threat. The line should be intent = "deliberate".
Question 2
A threat = "antivirus software"
B intent = "accidental"
C source = "external"
Line A — Antivirus software protects an asset, so it is a security control and not a threat. A threat is something that could cause harm, such as a power failure.
Question 3
A threat = "staff typo"
B source = "external"
C intent = "accidental"
Line B — A typo made by a staff member comes from inside the organisation, so it is an internal threat. The line should be source = "internal".
Question 4
A threat = "hacker"
B if threat = "hacker":
C print("Deliberate threat")
Line B — A single = assigns a value. To compare values in a condition you need ==. The line should be if threat == "hacker":.
Question 5
A threats = ["malware", "typo"]
B for t in threats
C print(t)
Line B — A for loop line must end with a colon. The line should be for t in threats:.

Student with a class code? Join your class →