Lesson 6: Data Security
Lesson Outcomes
By the end of this lesson, learners will be able to:
- Define data security and explain its importance
- Identify common data security threats
- Describe methods used to protect data
- Explain the role of data security in databases and RPA
- Understand legal and ethical responsibilities related to data protection
Lesson Overview
In this lesson, we focus on data security — one of the most critical aspects of working with data.
If data is the “gold” of modern organisations, then data security is the vault, guards, and alarm system combined. Without it, everything else you’ve learned in this module becomes a risk.
1. What is Data Security?
Data security refers to the processes and measures used to:
- Protect data from unauthorised access
- Prevent data loss or corruption
- Ensure data privacy and confidentiality
👉 It applies to:
- Databases
- Files
- Systems
- Networks
2. Why Data Security is Important
- Protects sensitive information (e.g., personal data, financial data)
- Prevents cyberattacks and breaches
- Maintains trust with users and customers
- Ensures compliance with laws and regulations
👉 Example:
If a company loses customer data, it can face legal penalties and loss of reputation.
3. Common Data Security Threats
- Unauthorised access – hackers gaining access to systems
- Malware and viruses – software designed to damage systems
- Phishing attacks – tricking users into revealing sensitive information
- Data breaches – exposure of confidential data
- Insider threats – employees misusing access
4. Methods of Protecting Data
a) Encryption
-
Converts data into unreadable format
-
Only authorised users can decrypt it
b) Access Control
-
Limits who can view or modify data
-
Uses usernames, passwords, and permissions
c) Authentication
-
Verifies identity (e.g., passwords, biometrics, OTPs)
d) Backups
-
Copies of data stored securely
-
Used to recover data in case of loss
e) Firewalls and Security Software
-
Protect systems from external attacks
5. Data Security in Databases
Databases must:
- Restrict access to authorised users
- Protect stored data using encryption
- Maintain data integrity
- Track user activity (audit logs)
👉 Example:
Only authorised employees should access customer financial records.
6. Data Security in RPA
In automation:
-
Bots handle sensitive data
-
Security must be enforced to:
-
Prevent misuse
-
Protect credentials
-
Ensure safe data transfer
-
👉 If a bot is not secured, it can become a vulnerability instead of a solution.
7. Legal and Ethical Considerations
Organisations must:
- Comply with data protection laws
- Protect personal information
- Use data responsibly
Key principles:
- Privacy
- Confidentiality
- Accountability
👉 Just because you can access data doesn’t mean you should.
8. Best Practices for Data Security
- Use strong passwords
- Regularly update systems
- Limit access to necessary users only
- Monitor systems for suspicious activity
- Train employees on security awareness
Lesson Summary
In this lesson, you learned that:
- Data security protects information from unauthorised access and threats
- There are various risks such as cyberattacks and data breaches
- Security measures include encryption, access control, and backups
- Data security is essential in both databases and RPA systems
- Legal and ethical responsibilities must always be followed when handling data