← VCE Data Analytics U4O2

Describing an organisation's current security strategies

State what the strategy is, name the threat it addresses, and say whether it prevents, detects or responds. Strategies can be technical, physical or procedural.

Part of: VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 148

Understanding Describing an organisation's current security strategies in VCE Data Analytics U4O2

What it does: A written staff procedure is procedural. It addresses social engineering and responds by setting out the steps staff must take once an attack is suspected. Antivirus software is technical. It addresses malware and detects it by scanning, then raises alerts so the threat can be handled. A locked room with a swipe card is a physical control. It stops people reaching the hardware, so it prevents. Reviewing logs finds suspicious activity but does not stop it. That makes it a detect control. MFA adds a second check, so a stolen password alone is not enough to log in. It acts before access is gained, so it prevents.

Common mistakes: A locked server room is a physical strategy. The other lines describe a technical strategy that prevents unauthorised access, so line 1 should be 'Strategy: Firewall'. A locked server room does not stop phishing emails. It addresses theft of or tampering with hardware, so line 3 should be 'Threat: Theft of hardware'.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Describing an organisation's current security strategies to a class →

This module's key terms are also in a printable crossword (Modules 135–150) and word search (Modules 115–150).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
A case study says a company uses a firewall to block unwanted traffic. Which description is complete?
A firewall is used by the companyA technical strategy that prevents unauthorised network access by filtering traffic
Matches
The organisation uses a firewall. This is a physical strategy that responds to ransomware.
↓
A firewall is a technical strategy, not physical, and it mainly prevents unauthorised network access rather than responding to ransomware.
Applying
Meanings
Term
describe a security strategy
Meaning
State what the strategy is, name the threat it addresses, and say whether it prevents, detects or responds. Strategies can be technical, physical or procedural.
Practice
Strategy: Firewall (technical)
Testing
Gaps
Control:
Check Answer
Spots
1Strategy: Locked server room
2Type: Technical

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Desert Tortoise' badge — Desert Master, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. A case study says a company uses a firewall to block unwanted traffic. Which description is complete?
A. A technical strategy that prevents unauthorised network access by filtering traffic ✓
B. A firewall is used by the company
A full description states what the strategy is, the threat it addresses, and whether it prevents, detects or responds. Naming the strategy alone is not enough.
2. A school stores servers in a locked room with swipe-card entry. How should this strategy be classified?
A. Physical strategy that prevents unauthorised access to hardware ✓
B. Technical strategy that responds to malware
A locked room with a swipe card is a physical control. It stops people reaching the hardware, so it prevents.
3. A retailer reviews access logs each week to spot unusual logins. What does this strategy do?
A. Prevents all unauthorised access from happening
B. Detects unauthorised access after it has started ✓
Reviewing logs finds suspicious activity but does not stop it. That makes it a detect control.
4. Which strategy is a procedural strategy?
A. Staff must follow a written process to verify requests for payment changes ✓
B. Antivirus software scans files for malware
Procedural strategies are rules and processes that people follow. Antivirus software is a technical strategy.
5. A case study states that staff are trained to spot phishing emails. Which threat does this strategy best address?
A. Denial of service attack
B. Social engineering ✓
Training helps staff recognise phishing, which is a form of social engineering. It does not stop a flood of network traffic.

Match the Pairs

Firewall blocks unknown inbound traffic → Technical strategy that prevents unauthorised network access by filtering traffic before it reaches the network.
CCTV cameras at the server room door → Physical strategy that detects theft or tampering with hardware by recording who enters, and deters intruders.
A procedural strategy that responds to a suspected compromise by telling staff what to do after an incident → Staff must report phishing emails to IT within 1 hour
A technical strategy that detects malware threats by monitoring files and alerting the user → Antivirus scans devices and raises an alert
The organisation uses a firewall. This is a physical strategy that responds to ransomware. → A firewall is a technical strategy, not physical, and it mainly prevents unauthorised network access rather than responding to ransomware.
Nightly backups are a preventive strategy because they stop data from being deleted. → Backups do not stop deletion or attacks. They help the organisation respond and recover data after an event, so they are a response strategy.

Key Term

describe a security strategy
State what the strategy is, name the threat it addresses, and say whether it prevents, detects or responds. Strategies can be technical, physical or procedural.

Fill in the Blanks

1. Strategy: Firewall (technical) Threat: Unauthorised network access Control: Prevent
Hint: Type the control type for a strategy that blocks the threat before it succeeds.
2. Strategy: Access log review (technical) Threat: Insider misuse of data Control: Detect
Hint: Type the control type for a strategy that spots suspicious activity after it starts.
3. Strategy: Locked server room (physical) Threat: Theft of hardware Control: Prevent
Hint: Type the strategy category that describes controlling access to a real-world space.
4. Strategy: Phishing training (procedural) Threat: Social engineering Control: Prevent
Hint: Type the threat that staff training helps people recognise and avoid.
5. Strategy: Incident response plan (procedural) Threat: Ongoing malware infection Control: Respond
Hint: Type the control type for a strategy that limits damage and recovers after an incident.

Spot the Error

Question 1
A Strategy: Locked server room
B Type: Technical
C Threat: Unauthorised access
D Role: Prevent
Line A — A locked server room is a physical strategy. The other lines describe a technical strategy that prevents unauthorised access, so line 1 should be 'Strategy: Firewall'.
Question 2
A Strategy: Locked server room
B Type: Physical
C Threat: Phishing emails
D Role: Prevent
Line C — A locked server room does not stop phishing emails. It addresses theft of or tampering with hardware, so line 3 should be 'Threat: Theft of hardware'.
Question 3
A Strategy: Access logs
B Type: Technical
C Threat: Insider misuse
D Role: Prevent
Line D — Access logs record what users did and help find misuse after it happens. They detect rather than prevent, so line 4 should be 'Role: Detect'.
Question 4
A Strategy: Staff training
B Type: Technical
C Threat: Phishing emails
D Role: Prevent
Line B — Staff training changes how people behave, so it is a procedural strategy, not a technical one. Line 2 should be 'Type: Procedural'.
Question 5
A Strategy: Disaster recovery
B Type: Procedural
C Threat: Ransomware
D Role: Prevent
Line D — A disaster recovery plan restores data and systems after an incident has happened. It responds rather than prevents, so line 4 should be 'Role: Respond'.

Student with a class code? Join your class →