The Cambridge IGCSE ICT specification treats safety and security as one of its most tested themes, sitting inside the broader umbrella of digital citizenship. In practice the syllabus expects students to recognise threats, describe controls, and explain why each control matters — not just to pass the exam, but because the same habits travel with them into every device they pick up afterwards.
Three threat families dominate the paper. Malware — viruses, worms, ransomware and the modern crop of trojans — relies on someone opening the wrong file or visiting the wrong page. Phishing and social engineering target the person instead of the machine, harvesting credentials through convincing emails, SMS messages, or cloned login pages. Then there are the quieter risks: weak passwords, unencrypted USB drives left in bags, and data left exposed on shared cloud folders. The common thread is that each exploit depends on a small, preventable mistake.
The controls the IGCSE asks you to describe line up directly with those threats. Strong passwords combined with two-factor authentication cut the value of a leaked credential. Regular, off-site backups neutralise ransomware by making the encrypted copies worthless. Encryption, both at rest and in transit, protects files even when a device is stolen. Firewalls and antivirus software add a defensive layer between the device and the wider internet, while access rights and audit logs tell administrators who touched what, and when.
Beyond the mechanics, the syllabus expects students to think about the human side: acceptable use policies, the legal obligations under data-protection law, and the consequences of leaving a workstation logged in. A useful way to hear these themes explored in plain language, with worked examples of common scenarios, is this podcast on ICT safety and security: https://www.spreaker.com/show/7112294. The discussion format tends to make the threat-and-control pairs easier to recall under exam pressure than a textbook chapter does.
For grounding on the wider field, the Wikipedia entries for cybersecurity (https://en.wikipedia.org/wiki/Cybersecurity) and information security (https://en.wikipedia.org/wiki/Information_security) cover the terminology the IGCSE leans on. Reading those alongside the syllabus specification gives a complete picture of what the examiner is testing — and what good digital habits look like beyond the exam hall.