DS

6.1 Data Security

Understanding security, privacy and integrity of data, threats to computer systems, and security measures for protection

Learning Objectives

By the end of this lesson, you will be able to:

  • Explain the difference between security, privacy and integrity of data
  • Appreciate the need for both security of data and security of computer system
  • Describe security measures designed to protect computer systems from standalone PC to network
  • Understand threats to computer and data security posed by networks and internet
  • Describe methods that can be used to restrict risks posed by threats
  • Describe security methods to protect security of data including encryption and access rights

Key Terms

Data Integrity

Data is accurate and up to date; ensures data remains unchanged and retains its intended meaning

Data Privacy

Data is available only to authorized users; protected by data protection laws

Data Security

Data is recoverable if lost or corrupted; available for use when needed

Malware

Malicious software designed to harm computer systems; includes viruses, worms, spyware

Firewall

Software or hardware that filters information between computer and external network

Encryption

Converting data into code to prevent unauthorized access; requires encryption keys to decode

Biometrics

Authentication using unique human characteristics like fingerprints, retina scans, face recognition

Phishing

Attempting to acquire sensitive information by pretending to be a trustworthy source

Pharming

Redirecting users to fake websites to steal confidential information

Digital Signature

Electronic method of identifying the sender of a message or document

Hacking

Illegal access to computer system without owner's permission

Antivirus Software

Software that detects, prevents, and removes malware from computer systems

Understanding Data Security, Privacy and Integrity

Data security involves protecting data from unauthorized access, corruption, or loss throughout its lifecycle. It's essential to understand the differences between security, privacy, and integrity to implement proper protection measures.

Key Definitions

Data Integrity

  • Data is accurate and up to date
  • Ensures data remains unchanged and retains its intended meaning
  • Prevents errors, corruption, or unauthorized alterations
  • Example: Bank account balance showing correct amount

Data Privacy

  • Data is available only to authorized users
  • Protected by data protection laws
  • Personal data supplied to organizations must be kept private
  • Example: Medical records only accessible to patient and doctor

Data Security

  • Data is recoverable if lost or corrupted
  • Available for use when needed
  • A prerequisite for ensuring data integrity and privacy
  • Example: Regular backups of school exam results

Real-Life Example: School Student Database

Consider a school's student database containing personal information, grades, and attendance records:

Integrity in Action

When a teacher updates a student's grade, the system ensures the change is recorded accurately and immediately reflected in all reports.

Privacy in Action

Only authorized staff (teachers, administrators) can access student records. Students cannot see each other's grades or personal information.

Security in Action

The school performs daily backups of the database. If the server crashes, student data can be restored from the backup with minimal loss.

Threats to System Security

Internal Mismanagement

Employees mishandling data or systems

Natural Disasters

Floods, fires, earthquakes damaging hardware

Unauthorized Intrusion

Hackers accessing systems without permission

Malicious Software

Viruses, worms, spyware infecting systems

Activity 1: Identifying Security Concepts

For each scenario, identify whether it relates to data integrity, privacy, or security:

  1. A hospital ensures that patient records are only accessible to authorized medical staff.
  2. A company performs daily backups of its financial data.
  3. A banking system verifies that transaction amounts are recorded accurately without errors.
  4. A student changes their password monthly to prevent unauthorized access to their school account.
  5. An online shopping website uses encryption to protect credit card details during transactions.
Solution:
  1. Privacy - Only authorized staff can access patient records
  2. Security - Backups ensure data can be recovered if lost
  3. Integrity - Ensuring transaction amounts are accurate
  4. Security - Password changes prevent unauthorized access
  5. Privacy/Security - Encryption protects sensitive data from unauthorized access

Check Your Understanding: Data Concepts

Answer
  • [1 mark] Data integrity ensures data is accurate and up to date, preventing unauthorized alterations
  • [1 mark] Data privacy ensures data is available only to authorized users, protecting confidentiality
  • [Additional] Integrity is about correctness; privacy is about access control
Answer
  • [1 mark] Without security, data can be lost or corrupted, breaking integrity
  • [1 mark] Without security, unauthorized users can access data, breaking privacy
  • [Additional] Security measures (backups, access controls) enable maintenance of integrity and privacy
Answer
  • [1 mark] Unauthorized intrusion into system by an individual (hacking)
  • [1 mark] Malicious software entering system (viruses, spyware)
  • [Additional] Other threats: internal mismanagement, natural disasters
Answer
  • [1 mark] Ensure privacy of personal data that individuals supply
  • [1 mark] Ensure integrity of this data (keep it accurate and up to date)
  • [Additional] Organizations can be penalized for breaching data protection laws
Answer
  • [1 mark] Data security ensures data can be recovered if lost or corrupted
  • [1 mark] Through methods like backups, data remains available for use when needed
  • [Additional] Security breaches occur when data is lost or corrupted and cannot be recovered

Security Measures for Computer Systems

Various security measures protect computer systems from unauthorized access and data loss. These measures range from basic password protection to advanced encryption techniques.

Core Security Measures

User Accounts & Passwords

User Accounts:
  • Used to authenticate users on both standalone and networked computers
  • Screen prompt asks for username and password
  • Controls access rights for different users
  • Essential when multiple people access the same computer
Passwords:
  • Restrict access to data or systems
  • Should be difficult to crack and changed frequently
  • Can take form of biometrics (fingerprint, face recognition)
  • Used for email, online banking, social media access
Password Strength Checker

Tip: Use mix of uppercase, lowercase, numbers, and symbols

Digital Signatures & Firewalls

Digital Signatures:
  • Protect data by identifying the sender
  • Attached to emails to verify sender identity
  • Provide authentication and non-repudiation
  • Example: Signed PDF documents from banks
Firewalls:
  • Can be software or hardware
  • Sits between user's computer and external network
  • Filters information in and out of computer
  • Primary defense against hacking, malware, phishing
Firewall Tasks:
  • • Examines traffic between computer and public network
  • • Checks if data meets set criteria
  • • Logs all incoming/outgoing traffic
  • • Prevents access to undesirable sites

Additional Security Software

Antivirus Software

  • Runs in background constantly checking for virus attacks
  • Checks software/files before they are run or loaded
  • Compares against database of known viruses
  • Quarantines possibly infected files
  • Must be kept up to date for new viruses
  • Requires regular full system scans

Anti-Spyware

  • Detects and removes spyware programs installed illegally
  • Two approaches:
  • 1. Rule-based: Looks for typical spyware features
  • 2. Known file structures: Identifies common spyware programs
  • Protects against keyloggers and data theft
  • Essential for protecting passwords and personal data

Encryption

  • Makes data virtually impossible to understand without encryption keys
  • Cannot stop hackers from deleting files
  • Prevents hackers from using stolen data
  • Used for sensitive data transmission
  • Example: HTTPS websites, encrypted messaging apps
Original Data
"Hello"
Encryption
With Key
Encrypted Data
"XJ9#p"

Biometrics: Advanced Authentication

Biometrics use unique human characteristics as part of password systems to stay ahead of hackers:

Fingerprint Scans

Unique patterns on fingertips

Retina Scans

Pattern of blood capillary structure

Face Recognition

Facial features and structure

Voice Recognition

Unique vocal patterns

Used in modern smartphones, secure facilities, and banking apps for enhanced security.

Real-Life Example: School Computer Lab Security

A school computer lab implements multiple security measures:

1. User Accounts: Each student/staff has unique login
2. Firewall: Blocks access to inappropriate websites
3. Antivirus: Weekly scans protect against USB virus threats
4. Passwords: Changed every 60 days, minimum 8 characters
5. Encryption: Student records encrypted on server
6. Backups: Daily backup of all school data

This layered approach provides defense against various threats while maintaining accessibility for legitimate users.

Activity 2: Security Measures Matching

Match the security measure with its correct description:

1. Firewall

A. Software that detects and removes programs that monitor user activity

2. Antivirus

B. Converts data into code that requires a key to decode

3. Encryption

C. Hardware or software that filters information between computer and network

4. Anti-spyware

D. Checks files against known virus database and quarantines threats

5. Biometrics

E. Authentication using fingerprint or retina scans

Solution:
  1. Firewall → C. Hardware or software that filters information between computer and network
  2. Antivirus → D. Checks files against known virus database and quarantines threats
  3. Encryption → B. Converts data into code that requires a key to decode
  4. Anti-spyware → A. Software that detects and removes programs that monitor user activity
  5. Biometrics → E. Authentication using fingerprint or retina scans

Check Your Understanding: Security Measures

Answer
  • [1 mark] Examines traffic between user's computer and public network
  • [1 mark] Checks whether incoming or outgoing data meets given criteria
  • [1 mark] Logs all incoming and outgoing traffic for later interrogation
  • [Additional] Prevents access to undesirable sites, warns about external access attempts
Answer
  • [1 mark] New viruses are constantly being discovered
  • [1 mark] Antivirus databases need to include signatures of new threats
  • [Additional] Without updates, antivirus cannot detect and protect against new malware
Answer
  • [1 mark] Makes data virtually impossible to understand without encryption keys
  • [1 mark] Even if hackers access the data, they cannot use it without the decryption key
  • [Additional] Encryption doesn't prevent deletion but prevents meaningful use of stolen data
Answer
  • [1 mark] To identify the sender of a transmission (like email)
  • [1 mark] Provide a way to verify the authenticity of the sender
  • [Additional] Helps prevent impersonation and ensures message integrity
Answer
  • [1 mark] Fingerprint scans
  • [1 mark] Retina scans (pattern of blood capillary structure)
  • [Additional] Other examples: face recognition, voice recognition

Threats to Computer and Data Security

Networks and the internet expose computer systems to various threats including malware, hacking, phishing, and pharming. Understanding these threats is essential for implementing proper protection measures.

Hacking: Illegal Access to Systems

Malicious Hacking

  • Illegal access to computer system without user's permission or knowledge
  • Intention: deleting, altering or corrupting files
  • Goal: gain personal details like bank account information
  • Guarded against by: strong passwords, firewalls, illegal activity detection software
  • Example: Breaking into school network to change grades

Ethical Hacking

  • Authorized by companies to check their security measures
  • Tests how robust computer systems are against attacks
  • Legal and done with company's permission
  • Ethical hackers are paid fees for their services
  • Example: Security consultant testing bank's online systems
Key Difference:

Malicious hacking is illegal and harmful; ethical hacking is authorized security testing.

Malware: Malicious Software

Malware (short for "Malicious Software") refers to any computer program designed to do harmful or unwanted things. It's one of the biggest risks to data integrity and security.

Malware Type Description How It Works Example
Virus Program that replicates itself and causes harm Needs active host program or infected OS to run File infector that corrupts documents
Worm Stand-alone virus that replicates to spread Uses networks to find computers with weak security Network worm that spreads via email
Logic Bomb Code embedded in a program Activates when certain conditions are met (e.g., specific date) Deletes files on a particular date
Trojan Horse Malicious program disguised as legitimate software Replaces legitimate software to cause harm Fake game that installs backdoor
Spyware Software that gathers information by monitoring Monitors key presses (keylogging) and sends data back Keylogger stealing passwords

Phishing Attack Simulation

Phishing attempts to acquire sensitive information by pretending to be a trustworthy source. Can you spot the signs of a phishing email?

Pharming: Sophisticated Website Redirection

How Pharming Works:
  1. Hacker creates fake website identical to original (e.g., fake bank site)
  2. Malicious code installed on user's hard drive or DNS server compromised
  3. When user types real URL, they're redirected to fake website
  4. User enters login, password, other confidential information
  5. Hacker collects information from fake site and accesses real account
Protection Against Pharming:
  • Use antivirus software detecting unauthorized website alterations
  • Modern web browsers that alert users to pharming attacks
  • Check website spelling carefully
  • Look for https and green padlock in address bar
  • Be cautious even when typing URLs directly
Phishing vs Pharming: Key Difference

Phishing relies on users clicking malicious links in emails. Pharming redirects users to fake websites even when they type correct URLs. Pharming is more dangerous as it doesn't require user mistake with links.

Preventing Phishing Attacks

User Awareness & Training

  • Attend security awareness training to learn about new phishing scams
  • Don't click links unless certain they are safe
  • Be suspicious of urgent requests for personal information
  • Verify unusual requests through alternative channels
  • Example: School training students to recognize fake login pages

Technical Protections

  • Run anti-phishing toolbars on web browsers
  • Keep browser up-to-date with latest security upgrades
  • Run a good firewall in background at all times
  • Look for https or green padlock in address bar
  • Use email filters that detect and quarantine phishing attempts

Real-Life Example: Mobile Banking Security

Modern mobile banking apps combine multiple security measures to protect against threats:

1. Biometric Login: Fingerprint or face recognition required
2. End-to-End Encryption: All data encrypted between phone and bank
3. Two-Factor Authentication: Code sent to phone for login confirmation
4. Transaction Alerts: Immediate notification of any account activity
5. Automatic Logout: Session expires after period of inactivity

These layers protect against phishing (fake apps), pharming (fake websites), and hacking attempts, while maintaining usability for legitimate customers.

Activity 3: Malware Identification

Identify the type of malware described in each scenario:

  1. A program that spreads through a network by exploiting security vulnerabilities, copying itself to other computers.
  2. Software that records every keystroke made on a computer and sends the information to a hacker.
  3. A malicious program disguised as a free game that, when installed, gives a hacker remote access to the computer.
  4. Code hidden within a company's payroll system that deletes all financial records if a specific employee is terminated.
  5. An email pretending to be from a bank, asking users to click a link and enter their login details on a fake website.
Solution:
  1. Worm - Spreads through network by exploiting vulnerabilities
  2. Spyware (Keylogger) - Records keystrokes and sends to hacker
  3. Trojan Horse - Disguised as legitimate software (game) but gives remote access
  4. Logic Bomb - Activates when specific condition is met (employee termination)
  5. Phishing - Pretending to be trustworthy source to steal login details

Check Your Understanding: Security Threats

Answer
  • [1 mark] Malicious hacking is illegal access without permission to harm or steal
  • [1 mark] Ethical hacking is authorized testing of security systems with company's permission
  • [Additional] Ethical hackers are paid to find vulnerabilities; malicious hackers exploit them illegally
Answer
  • [1 mark] A worm is a stand-alone program that can replicate itself without needing a host
  • [1 mark] A virus needs an active host program or infected operating system to run
  • [Additional] Worms often spread through networks; viruses attach to files or programs
Answer
  • [1 mark] Phishing relies on users clicking malicious links in emails/messages
  • [1 mark] Pharming redirects users to fake websites even when typing correct URLs
  • [1 mark] Pharming is more dangerous as it doesn't require user interaction with malicious links
  • [Additional] Pharming often involves DNS server compromise or malware on user's device
Answer
  • [1 mark] Attend security awareness training to recognize new phishing scams
  • [1 mark] Don't click links unless certain they are safe; verify through other means
  • [1 mark] Run anti-phishing toolbars on web browsers and keep browsers updated
  • [Additional] Look for https/green padlock, be suspicious of urgent requests for information
Answer
  • [1 mark] Spyware is software that gathers information by monitoring user activity
  • [1 mark] It works by monitoring key presses (keylogging) and sending the information back to the attacker
  • [Additional] Often installed without user knowledge through software bundles or malicious websites

Security Measures for Data Protection

Different risks require different security measures. Understanding which measure to apply for each type of threat is essential for comprehensive data protection.

Risk-Based Security Measures

Risk/Threat Security Measures Explanation
Accidental loss of data
(e.g., accidental file deletion)
  • Use back-ups
  • Save data regularly
  • Use passwords/user IDs
 Backups allow recovery if data is lost through accidental operations. Regular saving minimizes data loss. Passwords restrict access to authorized users only.
Hardware fault
(e.g., HDD head crash)
  • Use back-ups
  • Use UPS (Uninterruptable Power Supply)
  • Save data regularly
  • Use parallel systems
 Backups protect against data loss from hardware failure. UPS prevents data corruption during power loss. Parallel systems provide backup hardware.
Software fault
(e.g., incompatible software)
  • Use back-ups
  • Save data regularly
 Backups allow recovery if software faults corrupt data. Regular saving protects against data loss when software freezes or crashes during work.
Incorrect computer operation
(e.g., wrong shutdown procedure)
  • Use back-ups
  • Correct training procedures
 Backups protect against data loss from incorrect operations. Training ensures users know correct hardware operation procedures.

Backup Strategy Simulator

Explore how different backup strategies protect against data loss over time. The circles represent backup states - green indicates data is protected, red indicates data loss risk.

Daily Backups

Maximum 24 hours of data loss

Weekly Backups

Maximum 7 days of data loss

No Backups

Complete data loss if failure occurs

Real-Life Example: Small Business Data Protection

A small accounting firm implements comprehensive data protection:

Preventive Measures:
  • Automatic backups: Every 4 hours to cloud storage
  • UPS systems: Protect against power surges and outages
  • Employee training: Proper file management and security protocols
  • Access controls: Different permission levels for staff vs managers
Recovery Measures:
  • 3-2-1 Backup Rule: 3 copies, 2 media types, 1 offsite
  • Test restores: Monthly verification that backups work
  • Documented procedures: Clear steps for data recovery
  • Insurance: Coverage for data recovery services if needed

When their server failed last month, they restored from backup with only 3 hours of lost work, avoiding client data loss and maintaining business continuity.

Key Data Protection Principles

Access Control:
  • Passwords and user IDs restrict access to authorized users only
  • Different permission levels for different user types
  • Regular review of access rights
  • Immediate revocation of access for former employees
Data Recovery:
  • Regular backups are fundamental to data security
  • Backup frequency depends on data criticality
  • Test restoration procedures regularly
  • Store backups in multiple locations (including offsite)
Remember: Defense in Depth

Effective data protection uses multiple layers of security (defense in depth). No single measure is sufficient. Combining access controls, backups, encryption, and user training creates robust protection against various threats.

Activity 4: Security Measure Selection

For each scenario, select the most appropriate security measure(s) from the list:

  1. A graphic design company is concerned about losing work if their computers crash while employees are working on large files.
    Options: Backups, UPS, Save data regularly, Passwords
  2. A hospital needs to ensure that only authorized medical staff can access patient records, and that records remain accurate.
    Options: Access rights, Encryption, Backups, Data validation
  3. An e-commerce website needs to protect customer credit card information during online transactions.
    Options: Firewall, Encryption, Antivirus, Digital signatures
  4. A school is concerned about power outages corrupting data on their student management system.
    Options: UPS, Backups, Parallel systems, Training
Solution:
  1. Save data regularly - Minimizes data loss if crash occurs during work. Backups would also help for complete system failure.
  2. Access rights and Data validation - Access rights ensure only authorized staff can view records. Data validation maintains accuracy (integrity). Backups would also be important for security.
  3. Encryption - Essential for protecting sensitive credit card information during transmission. Firewall and antivirus would also be important for overall security.
  4. UPS and Backups - UPS prevents corruption during power outages. Backups allow recovery if corruption occurs despite UPS. Parallel systems could provide additional protection.

Check Your Understanding: Data Protection

Answer
  • [1 mark] Use back-ups in case data is lost through accidental operations
  • [1 mark] Save data on a regular basis to minimize loss
  • [1 mark] Use passwords and user IDs to restrict access to authorized users only
Answer
  • [1 mark] Provides temporary power during power outages
  • [1 mark] Prevents data corruption that can occur when computers lose power suddenly
  • [Additional] Allows for proper shutdown procedures, protecting data integrity
Answer
  • [1 mark] Ensures users are aware of correct hardware operation procedures
  • [1 mark] Prevents data loss from incorrect operations like improper shutdown
  • [Additional] Training also covers security protocols like password management and recognizing threats
Answer
  • [1 mark] Serve as backup hardware in case of hardware failure
  • [1 mark] Allow continued operation while primary system is being repaired
  • [Additional] Often used in critical systems where downtime is unacceptable (banks, hospitals)
Answer
  • [1 mark] Minimize data loss when software suddenly freezes or crashes
  • [1 mark] Reduce the amount of work that needs to be redone after software failure
  • [Additional] Combined with backups, provide comprehensive protection against data loss from software issues

Key Takeaways

  • Data integrity means data is accurate and up to date; ensures data remains unchanged and retains intended meaning
  • Data privacy means data is available only to authorized users; protected by data protection laws
  • Data security means data is recoverable if lost or corrupted; a prerequisite for integrity and privacy
  • User accounts and passwords authenticate users and control access rights on both standalone and networked computers
  • Firewalls filter information between computer and external network; primary defense against hacking and malware
  • Antivirus software checks for viruses, compares against known virus databases, and quarantines infected files
  • Encryption makes data impossible to understand without encryption keys; protects against data theft
  • Biometrics use unique human characteristics (fingerprints, retina scans) for authentication
  • Malware includes viruses, worms, logic bombs, Trojan horses, and spyware designed to harm computer systems
  • Phishing attempts to acquire sensitive information by pretending to be a trustworthy source via email
  • Pharming redirects users to fake websites even when typing correct URLs; more dangerous than phishing
  • Hacking can be malicious (illegal access) or ethical (authorized security testing)
  • Backups are essential for data recovery from accidental loss, hardware faults, or software faults
  • UPS (Uninterruptable Power Supply) prevents data corruption during power outages
  • Regular data saving minimizes loss when software crashes or freezes during work

Question Bank

Marking Scheme & Answer
  • [2 marks] Data integrity: Data is accurate and up to date; ensures data remains unchanged and retains intended meaning; prevents errors, corruption, unauthorized alterations
  • [2 marks] Data privacy: Data is available only to authorized users; protected by data protection laws; organizations must ensure privacy of personal data supplied by individuals
  • [2 marks] Data security: Data is recoverable if lost or corrupted; available for use when needed; prerequisite for ensuring data integrity and privacy; breached if data is lost or corrupted
Marking Scheme & Answer

Firewall Protection:

  • [1 mark] Can be software or hardware; sits between user's computer and external network
  • [1 mark] Filters information in and out; examines traffic between computer and public network
  • [1 mark] Primary defense against hacking, malware, phishing, pharming; warns of external access attempts

Antivirus Protection:

  • [1 mark] Runs in background constantly checking for virus attacks
  • [1 mark] Checks software/files before they are run; compares against database of known viruses
  • [1 mark] Quarantines possibly infected files; must be kept up to date for new viruses
Marking Scheme & Answer

Phishing:

  • [1 mark] Attempts to acquire sensitive information by pretending to be trustworthy source
  • [1 mark] Carried out through emails with links to bogus websites
  • [0.5 mark] Requires user to click malicious link

Pharming:

  • [1 mark] Hacker creates fake website similar to original and installs malicious code
  • [1 mark] DNS server directs user to fake website even when typing correct URL
  • [0.5 mark] More dangerous as doesn't require user to click malicious link

Commonality: Both aim to steal confidential information leading to fraud or identity theft.

Marking Scheme & Answer

Encryption:

  • [1 mark] Makes data virtually impossible to understand without encryption keys
  • [1 mark] Prevents hackers from using stolen data (though doesn't stop deletion)

Biometrics:

  • [1 mark] Uses unique human characteristics as part of password system
  • [1 mark] Examples: fingerprint scans, retina scans, face recognition, voice recognition
  • [Additional] Provides stronger authentication than traditional passwords
Marking Scheme & Answer
  • [1 mark] Use back-ups in case data is lost or corrupted through hardware fault
  • [1 mark] Use uninterruptable power supply (UPS) in case power loss causes hardware malfunction
  • [1 mark] Save data on a regular basis to minimize potential loss
  • [1 mark] Use parallel systems as back-up hardware to maintain operations
Marking Scheme & Answer
  • [1 mark] A virus needs an active host program or infected operating system to run
  • [1 mark] A worm is a stand-alone virus that can replicate itself without needing a host
  • [1 mark] Worms often use networks to search out computers with weak security and spread
  • [Additional] Both are types of malware designed to cause harm to computer systems
Marking Scheme & Answer
  • [1 mark] New viruses are constantly being discovered
  • [1 mark] Antivirus databases need to include signatures of new threats to detect them
  • [Additional] Without updates, antivirus cannot protect against the latest malware threats
Marking Scheme & Answer
  • [1 mark] Ethical hacking is authorized by companies to check their security measures
  • [1 mark] It tests how robust computer systems are against attacks; done with permission for a fee
  • [1 mark] Malicious hacking is illegal access without permission to delete, alter, corrupt files or steal information
  • [Additional] Ethical hacking is legal security testing; malicious hacking is illegal intrusion
Marking Scheme & Answer
  • [1 mark] Attend security awareness training to learn about new phishing scams
  • [1 mark] Don't click links unless certain they are safe; verify through other means
  • [1 mark] Run anti-phishing toolbars on web browsers that alert to malicious websites
  • [1 mark] Look for https or green padlock symbol in address bar of legitimate sites
  • [Additional] Keep browsers updated, run firewalls, be suspicious of urgent information requests
Marking Scheme & Answer
  • [1 mark] Minimizes data loss when software suddenly freezes or crashes during work
  • [1 mark] Reduces amount of work that needs to be redone after software failure
  • [Additional] Combined with backups, provides layered protection against data loss from software issues