week 4

K1.4 The role and types of deterrent business control techniques in protecting the digital security of an organisation:

 

Deterrent controls are pre-emptive security measures that are designed to discourage or dissuade people from attempting to carry out harmful or unauthorised actions.

Rather than stopping or detecting threats directly, deterrents work by:

• Raising awareness that controls are in place

• Increasing the perceived risk of getting caught or punished

• Encouraging good behaviour and compliance

Think of deterrents as the organisation saying:
🗣️ "Don’t even think about it!"

Types of Deterrent Control Techniques

Deterrent controls can be physical or administrative.

Physical Deterrent Controls

These create a visible presence that discourages unauthorised access or behaviour.

These make people think twice before trying anything malicious, such as breaking in or tampering with equipment.

Administrative Deterrent Controls (Policies and Procedures)

These are organisational rules and formal expectations that discourage inappropriate or risky behaviour.

These controls create awareness and define clear consequences, which can discourage risky or harmful actions.

Design a Deterrent Plan for a School Computer Room

Scenario:
Your school wants to discourage students from misusing the computers and trying to access restricted files. You have been asked to create a deterrent plan.

Task:
Choose two physical and two administrative deterrent controls.

For each control, explain:
What it is
How it works as a deterrent
What behaviour it helps prevent

Example (start):
        Control: CCTV above computer stations
​​​​​​​        How it deters: Students are less likely to break rules if they know they’re being watched
        Prevents: Vandalism, unauthorised access, unplugging equipment

Optional Extension:
Write a short Acceptable Use Policy (AUP) for the computer lab/ room.

Last Updated
2025-07-11 13:42:16