Chapter 1
IT Concepts and Terminology
Course: Comptia Tech Fc0 U71
Subject: Comptia Tech Fc0U71
Chapter: Security
1. Security Awareness
Security awareness is a foundational element of a strong cybersecurity posture. It involves educating users—employees, students, contractors, and even executives—on how to recognize threats and avoid unsafe behavior. As human error remains one of the leading causes of security breaches, cultivating awareness transforms users into proactive participants in protecting digital assets.
Objective:
To reduce the organization's vulnerability to attacks by enabling users to identify and properly respond to common security threats.
a. Social Engineering
Definition:
Social engineering is a manipulation technique that exploits human error or trust to gain unauthorized access to information, systems, or physical locations. Rather than breaking through firewalls or cracking passwords, attackers trick individuals into voluntarily providing access.
Why It Works:
- Exploits emotions like fear, urgency, curiosity, or authority.
- Takes advantage of everyday communication channels (email, calls, texts, social media).
- Bypasses technical defenses by targeting the "human element."