Years 9–10 Digital Systems Word Scramble: Software supply chain vulnerabilities and Threat modelling and security responses (Modules 70–79)
Name:
Date:
Class:
🔤
Word scramble
Unscramble the letters and write each key term on the line.
1
IRKS XRITAM
A grid that plots how likely a threat is against how bad its impact would be, giving each risk a priority rating (such as low, medium or high) so you know which to fix first.
2
AATD WLFO GDMIRAA
A diagram that shows how data moves between users, processes, data stores and external services in a system, using labelled arrows for each flow.
3
SRTTU ADUYNRBO
A line on a diagram where data passes between parts of a system with different levels of trust, such as from a user's device to a server. Threats often cluster here.
4
IETSRD
A memory aid for six threat types: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service and Elevation of privilege. Use it to ask what could go wrong in a system.
5
TACKAT REET
A diagram with the attacker's goal at the top, branching into the different ways to reach it. OR branches are alternatives, AND branches are all needed.
6
UTSYECRI TROOLCN
A measure that reduces risk by preventing an attack, detecting it or helping recovery. Controls can be technical, physical or procedural, and layering several works best.
7
ARHTET DLEMO ETALB
A table with one row per threat. Columns record the asset, threat, vulnerability, risk rating and chosen control, e.g. a school app storing student data.
8
HTARET DOMLE WEIERV
Checking and updating a threat model whenever the system, its users or the known threats change, for example after a new feature, a new dependency or a new control.
Answer Key
Years 9–10 Digital Systems · Modules 70–79
1IRKS XRITAM → risk matrix — A grid that plots how likely a threat is against how bad its impact would be, giving each risk a priority rating (such as low, medium or high) so you know which to fix first.
2AATD WLFO GDMIRAA → data flow diagram — A diagram that shows how data moves between users, processes, data stores and external services in a system, using labelled arrows for each flow.
3SRTTU ADUYNRBO → trust boundary — A line on a diagram where data passes between parts of a system with different levels of trust, such as from a user's device to a server. Threats often cluster here.
4IETSRD → STRIDE — A memory aid for six threat types: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service and Elevation of privilege. Use it to ask what could go wrong in a system.
5TACKAT REET → attack tree — A diagram with the attacker's goal at the top, branching into the different ways to reach it. OR branches are alternatives, AND branches are all needed.
6UTSYECRI TROOLCN → security control — A measure that reduces risk by preventing an attack, detecting it or helping recovery. Controls can be technical, physical or procedural, and layering several works best.
7ARHTET DLEMO ETALB → threat model table — A table with one row per threat. Columns record the asset, threat, vulnerability, risk rating and chosen control, e.g. a school app storing student data.
8HTARET DOMLE WEIERV → threat model review — Checking and updating a threat model whenever the system, its users or the known threats change, for example after a new feature, a new dependency or a new control.