Published: October 26, 2026
Last updated: October 26, 2026
THE BASIC IDEA
Cybersecurity is about protecting the digital things we depend on
Cybersecurity is the practice of protecting computers, smartphones, online accounts, networks, information and other digital systems from unauthorised access, misuse, disruption, damage or theft.
Modern life depends heavily on digital technology. People use online services for communication, banking, shopping, work, education, entertainment and business. That convenience also creates opportunities for criminals and other attackers to target valuable information, money and access.
Cybersecurity therefore involves both technology and human behaviour. Security tools are important, but people also need to recognise suspicious activity and make careful decisions.
WHAT ARE WE PROTECTING?
Cybersecurity protects more than computers
Accounts
Protecting email, social media, banking, shopping and business accounts from unauthorised access.
Devices
Protecting computers, smartphones, tablets and other connected devices from malicious activity.
Information
Keeping personal, financial, customer and business information from being exposed, altered or stolen.
Networks
Protecting the connections and systems that allow devices and organisations to communicate.
A SIMPLE EXAMPLE
One fake message can become a cybersecurity incident
Imagine receiving a message that appears to come from your bank saying your account will be suspended unless you sign in immediately. The message includes a link to a convincing fake website.
If you enter your login details, the attacker may capture them and attempt to access your real account. The technology matters, but the attack also depends on creating urgency and persuading you to act before checking whether the message is genuine.
Cybersecurity therefore includes protecting technology and learning how to recognise manipulation.
COMMON CYBER THREATS
Threats can attack technology or the people using it
Phishing
Fraudulent emails, messages or websites designed to trick people into revealing information, sending money or opening dangerous links.
Malware
Malicious software created to damage devices, steal information, spy on users or perform other unwanted actions.
Ransomware
A type of malicious software that can lock or encrypt information and demand payment for its release.
Account theft
Attackers may obtain passwords or other credentials and use them to gain unauthorised access to online accounts.
Social engineering
Manipulation techniques that exploit trust, urgency, fear or curiosity to persuade someone to take an unsafe action.
Data breaches
Incidents in which information is accessed, exposed or stolen by people who should not have access to it.
THREE IMPORTANT PRINCIPLES
Confidentiality, integrity and availability
A common way to think about information security is through three goals often described as confidentiality, integrity and availability.
Confidentiality
Information should only be accessible to people and systems that are authorised to use it.
Integrity
Information should remain accurate and should not be changed improperly or without authorisation.
Availability
Information and systems should remain accessible to authorised users when they are needed.
DEFENCE IN DEPTH
Good cybersecurity uses multiple layers of protection
There is no single tool that can prevent every cyberattack. Good cybersecurity usually combines several protections so that one failure does not automatically lead to a complete compromise.
For example, a strong password helps protect an account. Multi-factor authentication adds another barrier. Security updates can fix known software weaknesses, while backups can help recover important information after certain incidents.
PRACTICAL HABITS
Everyday actions that can improve your security
IMPORTANT TO UNDERSTAND
Cybersecurity reduces risk; it does not eliminate every risk
Even well-protected people and organisations can experience security incidents. New vulnerabilities can be discovered, trusted services can suffer breaches and attackers can develop new techniques.
The goal is to make attacks more difficult, reduce the chance of successful compromise, detect suspicious activity and be prepared to recover when an incident occurs.
KEY TAKEAWAYS
What to remember from this lesson
Cybersecurity is about protecting accounts, devices, information, networks and digital systems.
Cyber threats can target individuals as well as businesses and organisations.
Attackers often target people through phishing, scams and social engineering, not only through technical weaknesses.
Confidentiality, integrity and availability are three important cybersecurity principles.
Good security depends on layers of protection rather than one perfect security tool.
Simple habits such as strong authentication, updates, backups and careful verification can reduce many common risks.
NEXT LESSON
Passwords, Passkeys & Account Security
Next, we will look more closely at how passwords, password managers, multi-factor authentication and passkeys can help protect your online accounts.