ISM guideline: encryption

A rule that tells organisations to encrypt sensitive data, both when stored and when sent, so it stays protected.

Part of: VCE Applied Computing - U2O2 - Cyber Security — Module 58, VCE Software Development - U4O2 - Cyber Security: secure software development practices — Module 98, WA Computer Science ATAR Year 11 — Cyber Security — Module 182

Understanding ISM guideline: encryption in VCE Cyber Security

What it does: Sensitive data needs the strongest protection, which is why the guideline focuses on it. Encrypted data remains unreadable even if it's accessed by someone without permission. Stored data should be encrypted so it stays protected while it sits in storage. Without encryption, sensitive data can be read by anyone who accesses it. Encrypting data in transit keeps it protected as it moves from one place to another.

Common mistakes: Line 2 says to leave stored data unencrypted, but the guideline says stored data should be encrypted. Line 2 says to leave sent data unencrypted, but the guideline says data being sent should also be encrypted.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add ISM guideline: encryption to a class →

This module's key terms are also in a printable crossword (Modules 51–60) and word search (Modules 41–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Does the ISM encryption guideline say to encrypt stored data?

YesNo

Matches

Leaving sensitive data unencrypted

↓

This breaks the guideline - data stays exposed

Applying

Meanings

Term

ISM encryption guideline

Meaning

A rule that tells organisations to encrypt sensitive data, both when stored and when sent, so it stays protected.

Practice

sensitive_data = "customer records"

Testing

Gaps

The guideline says to

Check Answer

Spots

1Encrypt stored data

2Leave stored data unencrypted

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Does the ISM encryption guideline say to encrypt stored data?

A. No

B. Yes ✓

Stored data should be encrypted so it stays protected while it sits in storage.

2. Does the guideline also apply to data being sent?

A. Yes ✓

B. No

Data travelling from one place to another should also be encrypted.

3. Does the guideline focus on protecting sensitive data specifically?

A. Yes ✓

B. No

The guideline is aimed at data that is important or private enough to need protection.

4. Does following the guideline reduce the risk if data is accessed without permission?

A. No

B. Yes ✓

Encrypted data stays protected even if someone gains access to it.

5. Does skipping the guideline leave sensitive data exposed?

A. Yes ✓

B. No

Without encryption, sensitive data can be read by anyone who accesses it.

Match the Pairs

Encrypt stored data → Protects data while it sits in storage

Encrypt data being sent → Protects data while it travels

The ISM guideline focuses on sensitive data → Applying extra protection where it matters most

Following the encryption guideline reduces risk → Data stays protected even if accessed

Leaving sensitive data unencrypted → This breaks the guideline - data stays exposed

Only encrypting stored data and not sent data → This doesn't fully follow the guideline

Key Term

ISM encryption guideline

A rule that tells organisations to encrypt sensitive data, both when stored and when sent, so it stays protected.

Fill in the Blanks

1. The guideline says to encrypt data that is stored.

Hint: Type the word for protecting data by scrambling it while it sits in storage.

2. It also applies to data being sent.

Hint: Type the word for data that is travelling from one place to another.

3. The guideline focuses on sensitive data.

Hint: Type the word for data that is important or private enough to need protection.

4. Following it reduces the risk if data is accessed.

Hint: Type the word for lowering the risk if the data is accessed without permission.

5. Not following it leaves data exposed.

Hint: Type the word for how unprotected data ends up if it isn't encrypted.

Spot the Error

Question 1

A Encrypt stored data

B Leave stored data unencrypted

C Encrypt data being sent

Line B — Line 2 says to leave stored data unencrypted, but the guideline says stored data should be encrypted.

Question 2

A Encrypt data being sent

B Leave sent data unencrypted

C Encrypt stored data

Line B — Line 2 says to leave sent data unencrypted, but the guideline says data being sent should also be encrypted.

Question 3

A Encrypt sensitive data

B Ignore sensitive data

C Encrypt stored data too

Line B — Line 2 says to ignore sensitive data, but the guideline focuses specifically on protecting sensitive data.

Question 4

A Encrypt stored data

B Encrypt sent data

C Following it increases risk

Line C — Line 3 says following it increases risk, but following the guideline actually reduces the risk if data is accessed.

Question 5

A Encrypt stored data

B Encrypt sent data

C Not following it protects data

Line C — Line 3 says not following it protects data, but skipping the guideline actually leaves data exposed.

Student with a class code? Join your class →