Cybersecurity controls and encryption
Choose controls for specific risks and explain how symmetric and asymmetric encryption protect data.
Mapped to the Cambridge IGCSE Computer Science 0265 syllabus for exams in 2029. These original explanations and self-checks are independent study support, not Cambridge papers, official marks or grades. Practical programming is taught with worked code and trace tasks; an executable Python workspace and timed digital-exam simulation are not yet available.
Before you begin
- Use the 2029 syllabus for this course. Cambridge specifies Python 3.10 or higher for programming and digital exams for both components. The syllabus currently identifies this route for 2029 only; confirm later-year availability with Cambridge and your school.
Work on paper. Try each question before revealing help, and explain why your method works.
Quick readiness check
Before cybersecurity controls and encryption, which statement is the safest starting point?
What you will learn
- Match access controls and user practices to threats
- Explain encryption purposes
- Compare symmetric and asymmetric encryption
Choose controls that interrupt a threat
Access levels limit each account to the actions it needs. Authentication checks identity using something known (a password), possessed (a device) or inherent (a biometric); two-step verification uses two checks. Anti-malware detects or removes malicious software, a firewall filters network traffic, and automated updates close known software weaknesses.
Privacy settings limit how information is shared; a proxy server makes requests on behalf of a client and can filter or hide details of its origin; a VPN creates an encrypted connection across another network. People can reduce phishing risk by checking spelling and tone and inspecting the real URL. TLS encrypts communication in transit, but a valid TLS connection does not prove that a destination is genuine.
Encryption uses keys to transform data
Symmetric encryption uses the same secret key to encrypt and decrypt data. It is efficient for large amounts of data, but the key must be shared securely. Asymmetric encryption uses a related public/private key pair: a public key can be shared, while the private key must be kept secret.
Encryption can protect confidentiality while data is stored or transmitted. It can support integrity, authenticity and non-repudiation when used with appropriate cryptographic checks and signatures. Encryption alone does not guarantee every security principle; key management and implementation matter.
Pause and explain
Which habit best checks your understanding of cybersecurity controls and encryption?
Worked example
A service needs to send a large file securely after both devices have established a shared secret key. Which encryption approach suits the file transfer?
Show the worked solution
- A shared secret is already available.
- The file is large, so efficiency matters.
- Symmetric encryption uses the shared key and is efficient for bulk data.
Answer Symmetric encryption, with the shared key protected.
Try a topic test
Choose Easy, Normal or Difficult. Save your answers and open worked review after finishing.
Test this topic →From guided practice to a new situation
Write your answer and reasoning first. Use a hint only if you are stuck. The model solution is for self-checking; your written work is not automatically marked.
A staff account should be able to view learner records but not edit them. Recommend a control and explain how it helps.
Give me a hint
Apply least privilege to the account's required role.
Compare my reasoning
- Give the account a read-only access level.
- The system allows viewing but blocks editing actions.
- This limits accidental or unauthorised changes while preserving the required access.
Use role-based read-only access for that account.
Look for these in your work
- Control selected
- Permission effect explained
- Risk reduced
Compare symmetric and asymmetric encryption for securely sending a large file to a new contact.
Give me a hint
Discuss key arrangement, efficiency and the key-distribution challenge.
Compare my reasoning
- Symmetric encryption is efficient but both parties need the same secret key.
- Asymmetric encryption uses a public/private pair and helps establish secure communication without sharing the private key.
- A system may use asymmetric methods to establish a symmetric session key for the large file.
Asymmetric methods help establish trust or a shared key; symmetric encryption efficiently protects the bulk transfer.
Look for these in your work
- Keys distinguished
- Efficiency compared
- Practical combination noted
A learner sees a padlock icon on a link in an unexpected email. Explain one thing TLS indicates and two checks still needed.
Give me a hint
Separate encrypted transport from the identity and intent of the destination.
Compare my reasoning
- TLS indicates that the connection is encrypted in transit to the named site.
- Check that the domain is the expected organisation's real domain.
- Consider whether the message's request and tone are plausible; a fraudulent site can also use TLS.
TLS protects the connection, but check the domain and the message's legitimacy.
Look for these in your work
- TLS purpose
- Domain checked
- Phishing risk acknowledged
Common mistakes
- Claiming a public key must be kept secret.
- Assuming a VPN makes every destination trustworthy.
- Saying encryption by itself guarantees data integrity.
What can you explain now?
In asymmetric encryption, which key should remain secret?
Compare with the explanation
The private key
The public key is shared; the private key must be controlled by its owner.
After trying it yourself, choose your next review. This is your self-assessment.
Your review choice appears on Today. Sign in to sync it across devices.
Make it stick
Which controls address access, malware and phishing, and how do the two encryption key models differ?
If you needed the solution, close it and solve the problem again from a blank page. A correct answer is stronger when you can explain the reason for each step.