Year 11 · ICT · Autumn 1
Safety and security; audience; communication · Lesson 1 of 5
Physical safety and e-safety
Theory8.1 Physical safety8.2 eSafety
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
You will learn to
- Explain the difference between a health risk and a safety risk.
- Describe the causes of electrocution, fire, tripping and falling equipment, and how to prevent each.
- Explain the difference between personal data and sensitive data.
- Describe how to use the internet, email, social media and online gaming safely.
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Success criteria
You have got it when you can say:
- I can find the eight hazards in the photo and give a prevention for each.
- I can give two examples of personal data and two of sensitive data.
- I can write five e-safety rules a Year 7 pupil would understand.
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Retrieval starter
Questions from before. Write your answers, then show them.
- Last year
The data source is…
A The letterB The list of recipientsC The printer
B. The list of recipients
- Last year
Chip and PIN checks…
A The chip, then the PIN you typeB Only your signatureC Your fingerprint
A. The chip, then the PIN you type
- Last year
A .pdf is used because…
A Anyone can edit itB It looks the same on every computerC It is the smallest file
B. It looks the same on every computer
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Key words (1 of 2)
- Electrocution
- Injury or death from an electric current passing through the body.
- Data protection act
- A law controlling how organisations collect, store and use personal data.
- Personal data
- Data about a living person who can be identified from it.
- Sensitive personal data
- Personal data, such as health or religion, that could cause harm or unfair treatment if leaked.
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Key words (2 of 2)
- eSafety
- Using the internet and devices in a way that keeps you, your data and others safe.
- Phishing
- A fake email with a link to a fake website that steals personal details.
- Digital certificate
- An electronic document from a trusted authority that proves a website is genuine.
- Encryption
- Scrambling data with a key so only someone with the right key can read it.
8.1 Physical safety · The explanation · step 1 of 8 · part 1 of 2
Safety is not the same as health
A safety risk is a danger that can cause an accident, such as a shock or a fire.
A health risk is harm that builds up slowly, such as back pain or eye strain. Health risks are in topic 5.
Exam questions ask for one or the other. Read the question carefully.
8.1 Physical safety · The explanation · step 1 of 8 · part 2 of 2
Safety is not the same as health (continued)
If a question asks about safety, do not write about RSI or eye strain. Those are health issues and earn no marks there.
8.1 Physical safety · The explanation · step 2 of 8 · part 1 of 2
The four physical safety risks
Cambridge lists four risks: electrocution, fire, tripping over trailing cables, and heavy equipment falling.
For each one, learn the cause and at least two ways to prevent it.
| Risk | Cause | Prevention |
|---|---|---|
| Electrocution (electric shock) | Spilling drinks on equipment. Touching bare or damaged wires. Opening equipment while it is plugged in. | No drinks near computers. Check cables regularly and replace damaged ones. Switch off and unplug before opening a computer. Use an RCD (a safety switch that cuts the power). |
| Fire | Overloaded sockets (too many plugs in one socket). Equipment overheating because vents are blocked. Faulty wiring. | Do not overload sockets. Keep vents clear and the room ventilated. Have CO₂ fire extinguishers nearby (not water). Use fire alarms and test them. |
| Tripping over trailing cables | Cables lying across floors or walkways. | Use cable ducts or covers. Tidy cables along walls or under desks. Use wireless devices to reduce cables. Use floor sockets near desks. |
| Heavy equipment falling | Monitors or printers too close to a desk edge. Desks that are weak or not stable. | Use strong, large desks. Place equipment away from the edge. Use desks with raised edges or fix equipment down. |
8.1 Physical safety · The explanation · step 2 of 8 · part 2 of 2
The four physical safety risks (continued)
Water conducts electricity, so a spilt drink can carry current to a person. That is also why fires near electrical equipment use CO₂ extinguishers, not water.
8.2 eSafety · The explanation · step 3 of 8 · part 1 of 2
Why data protection laws exist
Organisations collect huge amounts of data about us: schools, doctors, shops, apps.
A data protection act is a law that controls how organisations collect, store and use personal data.
The person the data is about is called the data subject. The organisation that controls it is the data controller.
In Spain the GDPR (the EU's General Data Protection Regulation) applies, alongside Spain's own law, the LOPDGDD. The UK uses the Data Protection Act 2018.
8.2 eSafety · The explanation · step 3 of 8 · part 2 of 2
Why data protection laws exist (continued)
Without rules, data could be sold, leaked or used to treat people unfairly. The laws give people rights and give organisations duties.
Cambridge asks for the general principles, not the details of one country's law. Learn the principles in the next step.
8.2 eSafety · The explanation · step 4 of 8 · part 1 of 3
The data protection principles
Most data protection laws share the same principles. Learn this list for the exam.
Personal data must be:
8.2 eSafety · The explanation · step 4 of 8 · part 2 of 3
The data protection principles (continued)
| Principle | What it means in plain words | Example |
|---|---|---|
| Processed fairly and lawfully | Collected honestly, with a legal reason, and people told why | A gym tells you why it wants your date of birth |
| Used only for the stated purpose | Not used for something else later | A school cannot sell parents' emails to a holiday company |
| Adequate, relevant and not excessive | Only the data that is needed | A pizza shop needs your address, not your religion |
| Accurate and up to date | Kept correct; mistakes fixed | Your doctor updates your new phone number |
| Not kept longer than necessary | Deleted when no longer needed | A shop deletes CCTV after 30 days |
| Processed in line with the data subject's rights | People can see their data and ask for corrections | You can ask a company for a copy of your data |
| Kept secure | Protected from loss, theft and hackers | Encrypted, password-protected database |
| Not transferred to countries without adequate protection | Not sent abroad unless that country protects data as well | A Madrid clinic does not store records on a server in a country with no data law |
8.2 eSafety · The explanation · step 4 of 8 · part 3 of 3
The data protection principles (continued)
8.2 eSafety · The explanation · step 5 of 8 · part 1 of 3
Personal data and sensitive data
Personal data is any data about a living person who can be identified from it.
Sensitive personal data is personal data that could be used to treat someone unfairly, or cause them harm, if it got out. It needs extra protection.
Leaked sensitive data can lead to discrimination, bullying or blackmail.
8.2 eSafety · The explanation · step 5 of 8 · part 2 of 3
Personal data and sensitive data (continued)
| Personal data | Sensitive personal data |
|---|---|
| Name, address, date of birth | Ethnic or racial origin |
| Email address, phone number | Political views |
| Photo of the person | Religious or philosophical beliefs |
| Bank details, ID number | Health and medical history |
| IP address, location data | Sexual orientation |
| School name and year | Trade union membership, criminal record, genetic and biometric data |
8.2 eSafety · The explanation · step 5 of 8 · part 3 of 3
Personal data and sensitive data (continued)
Bank details are personal and must be protected, but in data protection law they are not in the 'sensitive' list. Sensitive data is about who a person is: health, beliefs, ethnicity and so on.
The explanation · 3 more steps
More on the lesson page
The lesson page has the rest of the explanation, step by step:
- Why eSafety matters
- Safe use of the internet and email
- Safe use of social media and online gaming
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Quick quiz · 1 of 3
Smishing is…
- A Phishing by text message
- B A virus
- C Phishing by phone call
A. Phishing by text message
SMS phishing. By phone it is vishing.
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Quick quiz · 2 of 3
A digital certificate…
- A Encrypts your hard disk
- B Proves a website is who it says it is
- C Blocks pop-ups
B. Proves a website is who it says it is
The browser checks it and shows the padlock.
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Quick quiz · 3 of 3
Shoulder surfing is…
- A A firewall rule
- B A type of malware
- C Watching someone type their PIN
C. Watching someone type their PIN
Cover the keypad.
Year 11 · ICT · Safety and security; audience; communication · Lesson 1 of 5
Exit ticket
Answer on paper before you go. Then check.
Two-factor authentication adds…
A A second proof, like a code sent to your phoneB A firewallC A longer password
A. A second proof, like a code sent to your phone Something you know plus something you have.
A presentation for young children should have…
A Formal languageB Big text and pictures, few wordsC Dense data tables
B. Big text and pictures, few words Design for the audience's age and reading level.