Events-based threats to data

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A flood damages the server room and the servers stop working. What type of threat is this?

A Events-based threat

B Deliberate threat

2. Which of these is an events-based threat to data?

A A storm cuts power to the data centre

B An employee sells customer data to a rival

3. True or false: An events-based threat is caused by someone planning to harm the organisation.

A True

B False

4. A power outage hits the office during a busy sales day. How can it threaten data?

A Systems go offline, so staff cannot access data and unsaved work can be lost

B It makes the data more accurate because the systems restart

5. Which is an example of a natural disaster that could destroy an organisation's on-site servers?

A Phishing email

B Bushfire

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1events-based threat		Ahardware failure -> restore from backup
2power outage		BA power outage is an events-based threat whoever or whatever causes it. It does not need a hacker, because it can come from a storm or grid failure.
3A flood or storm can destroy servers kept in one building, so the organisation needs a plan to restore its data afterwards		Cnatural disaster -> disaster recovery plan
4A server's hard drive suddenly stops working, so the data on it cannot be accessed unless a backup copy exists		DAn event outside anyone's control, such as fire, flood, storm or power failure, that damages data or systems or blocks access to them
5Fire in the server room = deliberate threat		EA fire is an events-based threat, not a deliberate threat. It is an event outside anyone's control, not an attack by a person.
6Power outage = threat only when hackers cause it		FAn events-based threat where electricity is lost, switching off servers and cutting access to data, and unsaved work may be lost

Definitions

events-based threat

Fill in the Blanks

Complete each line of code by filling in the missing parts.

IF event = "flood" THEN threat ← "____________" ENDIF

IF cause = "storm" __ cause = "flood" THEN threat ← "natural disaster" ENDIF

IF power = "outage" THEN available ← _____ ENDIF

IF disk = "failed" THEN _______ data FROM backup ENDIF

FOR EACH event IN events IF event = "fire" THEN ______ "Activate DR plan"

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A threat: flood

B type: events-based

C controlled by: the attacker

D impact: servers damaged

Question 2

A threat = 'power outage'

B category = 'deliberate'

C effect = 'systems go offline'

Question 3

A IF storm hits the data centre

B THEN servers lose power

C AND data is always available

Question 4

A natural disasters: virus, fire

B power outage: loss of power

C hardware failure: parts break

D all can block access to data

Question 5

A threat = 'hacker'

B deliberate = False

C print('Outside our control')

Answer Key

Events-based threats to data

Section A: Quick Questions

A — Events-based threat

A — A storm cuts power to the data centre

B — False

A — Systems go offline, so staff cannot access data and unsaved work can be lost

B — Bushfire

Section B: Match the Pairs

events-based threat → An event outside anyone's control, such as fire, flood, storm or power failure, that damages data or systems or blocks access to them

power outage → An events-based threat where electricity is lost, switching off servers and cutting access to data, and unsaved work may be lost

A flood or storm can destroy servers kept in one building, so the organisation needs a plan to restore its data afterwards → natural disaster -> disaster recovery plan

A server's hard drive suddenly stops working, so the data on it cannot be accessed unless a backup copy exists → hardware failure -> restore from backup

Fire in the server room = deliberate threat → A fire is an events-based threat, not a deliberate threat. It is an event outside anyone's control, not an attack by a person.

Power outage = threat only when hackers cause it → A power outage is an events-based threat whoever or whatever causes it. It does not need a hacker, because it can come from a storm or grid failure.

Section C: Definitions

events-based threat — An event outside anyone's control, such as fire, flood, storm or power failure, that damages data or systems or blocks access to them.

Section D: Fill in the Blanks

IF event = "flood" THEN
  threat ← "events-based"
ENDIF

IF cause = "storm" OR cause = "flood" THEN
  threat ← "natural disaster"
ENDIF

IF power = "outage" THEN
  available ← FALSE
ENDIF

IF disk = "failed" THEN
  RESTORE data FROM backup
ENDIF

FOR EACH event IN events
  IF event = "fire" THEN
    OUTPUT "Activate DR plan"

Section E: Spot the Error

C — An events-based threat like a flood is outside anyone's control. No attacker is behind it, so the line should say 'controlled by: nobody'.

B — A power outage is an event outside anyone's control, so it is events-based. It is not a deliberate threat. The line should be category = 'events-based'.

C — A storm that knocks out power blocks access to data. The result should be that data becomes unavailable, not that it is always available.

A — A virus is malware, a deliberate threat, not a natural disaster. Flood is a natural disaster, so line 1 should read 'natural disasters: flood, fire'.

A — A hacker is a deliberate threat, which contradicts deliberate = False and the message that this is outside our control. The threat should be an event such as 'flood'.