DoAssignment.ca

DoAssignment study guide

C2.2 · Plan protection against malware and data loss

Learn to plan protection against malware and data loss through clear examples and targeted practice.

Ontario Grade 11 Computer Science

Computer Environments and Systems

A practical ICS3U lesson for expectation C2.2

Malware is software intended to harm a device, interfere with its use, or access information without permission. Data loss can happen when files are deleted, a device fails, or malware damages or locks files. Expectation C2.2 is about planning protection against these risks. A good plan considers both prevention and recovery: reduce opportunities for harm, keep useful copies of important data, and know what to do if a problem occurs. This lesson focuses on practical choices rather than coding a security tool.

What you will learn

  • Identify ways malware and accidents can threaten files and devices.
  • Plan steps to lower the chance of infection and reduce the harm of lost or damaged data.
  • Choose backup and recovery actions that fit a specific situation.

1. Start with what needs protection

A protection plan begins by naming the important data and the devices or accounts that store it. For a student, important data might include a programming assignment, project images, and a copy of research notes. The plan should also consider who needs access and what might happen if the only copy is lost.
Next, identify realistic risks. Malware can arrive through an attachment, a download, or a link. Data can also be lost through accidental deletion or a damaged device. These are different problems, but they can overlap: malware may damage files, while an ordinary accident may erase them.
A useful way to organize a plan is: identify the risk, choose prevention, choose a backup, and decide how to recover. The choices should match the data. A file that changes often needs more frequent backups than a file that rarely changes.
  • Name the files and devices that matter before choosing protections.
  • Consider both malware and non-malware causes of data loss.
  • A plan should include prevention and recovery.

2. Reduce the chance of malware

Prevention means making risky situations less likely. Use trusted sources for software and files, and be cautious with unexpected attachments or links. If a message pressures you to act quickly or asks for information unexpectedly, pause and check with the sender through a trusted method.
Keep the operating system and security software updated when updates are available through the device's normal update process. Updates can address known problems. Use security software provided or approved by the school or device administrator, and follow its guidance. Do not disable protections just because a download or website asks you to.
Use accounts and permissions carefully. A school device may be managed by an administrator; follow school rules instead of trying to bypass them. Avoid sharing account details. These steps lower risk, but no single step guarantees that malware will never reach a device.
  • Be cautious about unexpected links, attachments, and downloads.
  • Use trusted update and security-software processes.
  • Follow the device owner's or school's security rules; no protection is perfect.

3. Protect data and plan recovery

A backup is a separate copy that can be used if the original is lost or damaged. Saving a file in another folder on the same device may not be enough: if the device fails or malware affects it, both copies could be lost. Choose a backup location that is separate from the original, such as an approved school storage service or an external drive used according to school guidance.
Decide which files to back up, how often to make a copy, and who is responsible. A useful schedule depends on how often the files change. Keep the backup protected and follow school privacy rules, especially if it contains personal information.
A backup plan is incomplete unless you know how to recover a file. Check periodically that important files are present and readable, and know where to find the recovery instructions. If malware is suspected, stop using the affected device for file transfers and contact the teacher, school technician, or other responsible support person. Follow their instructions before restoring files; restoring from a copy that was also affected would not solve the problem.
  • Keep important copies separate from the device holding the originals.
  • Set a backup schedule based on how often files change.
  • Know whom to contact and how to restore files safely.

4. Make the plan usable

A plan should be specific enough to follow. Instead of writing “back up regularly,” name the files, location, frequency, and responsible person. Instead of “avoid malware,” name the habits that apply to the situation, such as using approved downloads and checking unexpected messages before opening links.
Review the plan when the files, devices, or school instructions change. Keep it simple enough that the person responsible can follow it during a stressful moment. The goal is not to promise zero risk. The goal is to lower the chance of harm and make recovery more manageable.
This practical approach is consistent with general guidance from the Canadian Centre for Cyber Security on recognizing cyber risks and protecting information. For a school device, the teacher or school technology staff and school-specific instructions take priority.
  • Write down what is protected, how, where backups are kept, and who acts.
  • Review the plan when circumstances or school procedures change.
  • Use school guidance for school devices and information.

Worked example

A student project stored on one laptop

A student has a programming project due next week. The only copy is on a laptop. Make a plan that addresses accidental loss and malware risk.
Project and backup locations
planned copyLaptop: working projectApproved separate storag

A separate approved storage location provides another place to recover the project from.

  1. Identify the risk
    The project is important, and the laptop holds the only copy. Accidental deletion, device damage, and malware could all make the work unavailable.
  2. Choose prevention and backup
    Use approved software sources and be cautious with unexpected downloads or attachments. Save a copy to a school-approved storage location separate from the laptop, following school privacy rules. Because the project changes as the student works, make a new copy after substantial work sessions.
  3. Plan recovery
    Before the deadline, confirm that the backup is present and readable. If malware is suspected, stop transferring files and ask the teacher or school technician for instructions before restoring the project.
Answer: The plan combines safer device habits, a separate and regularly updated copy, and a clear recovery contact.
Check: A second copy in another folder on the same laptop is not as useful as a separate backup location because one device problem could affect both copies.

Worked example

Unexpected attachment on a school device

A student receives an unexpected attachment that claims to contain an urgent project update. The student has not opened it. Decide what to do and explain how the choice fits a protection plan.
Responding to an unexpected attachment
Unexpected attachmentLeave it unopenedCheck with sender througFollow school reporting

Pause and verify through a trusted route before deciding what to do.

  1. Pause
    Urgency does not prove that a message is unsafe, but it is a reason not to act automatically. Do not open the attachment or follow links in the message.
  2. Check through a trusted route
    Contact the supposed sender using a known school-approved method, rather than relying on contact details inside the unexpected message. Follow the school's reporting instructions.
  3. Apply school guidance
    If the message is suspicious, report it as directed and leave the attachment unopened. If the student already opened it or notices unusual device behaviour, they should tell the teacher or school technology staff promptly and follow their instructions.
Answer: The student avoids a risky action, checks the message independently, and uses the school's reporting and support process.
Check: A security plan helps before a problem occurs by naming a safe response and the person to contact.

Worked example

Choosing a backup schedule

A group is making a digital presentation over several weeks. Members edit it often, and the group wants to avoid losing recent work. Propose a simple backup plan.
  1. Match the schedule to the work
    The presentation changes often, so a copy made only at the start would miss later edits. The group can agree to update the backup after each work session.
  2. Choose an appropriate location
    Use a school-approved location separate from the working device or follow the teacher's specified method. Do not put private information in a location that the group is not allowed to use.
  3. Assign responsibility and check recovery
    Name the group member responsible for checking that the copy is current, and ask the teacher how to restore an earlier copy if needed. Periodically confirm that the saved presentation can be opened.
Answer: A suitable plan updates a separate approved copy after each work session, assigns someone to check it, and includes a recovery method.
Check: The schedule follows the rate at which the presentation changes; it is not a universal schedule for every kind of file.

Common mistakes and how to avoid them

Thinking that having security software means malware cannot cause harm.
Correction: Security software can be one useful protection, but careful choices, school guidance, and backups are also important.
Saving a backup only beside the original file on the same device.
Correction: Choose a separate, approved location so a problem with the device is less likely to affect both copies.
Making a backup but never checking whether it is usable.
Correction: Periodically confirm that important files are present and readable, and know how to restore them.
Opening an unexpected attachment to find out whether it is safe.
Correction: Pause, verify through a trusted method, and follow school reporting guidance.

Lesson summary

  • Identify important files, devices, and realistic risks.
  • Lower malware risk through cautious choices and approved security practices.
  • Keep important backups separate, update them at a sensible frequency, and check that they are usable.
  • Know whom to contact and what instructions to follow if malware or data loss is suspected.

Check your understanding

Question 1

A student has one copy of an assignment on a laptop. Which plan best addresses data loss?
  1. Keep the only copy and avoid changing the file.
  2. Make a separate copy in a school-approved location and update it as the work changes.
  3. Rename the file every week but keep it on the same laptop.
  4. correctIndex합니다
Show answer and explanation
Make a separate copy in a school-approved location and update it as the work changes.
A separate, updated copy gives the student another place to recover work from if the laptop copy is lost.

Question 2

An unexpected message urges a student to open an attachment. What is the best first response?
  1. Open it quickly because the message says it is urgent.
  2. Forward it to classmates so they can decide.
  3. Leave it unopened and verify the message through a trusted method, following school guidance.
  4. correctIndex
Show answer and explanation
Leave it unopened and verify the message through a trusted method, following school guidance.
Pausing and checking independently avoids acting on an unverified attachment and follows a safe response plan.

Question 3

Why should a group check that its backup is readable?
  1. A backup is useful only if the group can locate and use the saved files.
  2. Checking a backup prevents every possible malware infection.
  3. A readable backup means the group no longer needs to follow school security rules.
  4. correctIndex
Show answer and explanation
A backup is useful only if the group can locate and use the saved files.
Checking confirms that the copy is present and usable for recovery; it does not prevent every threat or replace other protections.

Key terms

Malware
Software intended to harm a device, interfere with its use, or access information without permission.
Data loss
A situation in which important information is deleted, damaged, or no longer available.
Backup
A separate copy of information kept so it may be recovered if the original is lost or damaged.
Recovery
The process of getting usable files or device access back after a problem, following appropriate instructions.

Continue through ICS3U

View the complete ICS3U Ontario Grade 11 Computer Science curriculum and lessons

About this lesson and its review

Published by DoAssignment. This reviewed lesson follows Ontario Grade 11 Computer Science (ICS3U), expectation C2.2. It is a study resource, not an official curriculum publication.

Before publication, content is checked for structure, mathematical or chemical notation, calculations, course boundaries, and readability. Errors can still occur, so corrections are welcomed.

Official curriculum reference

Report a correction or ask a question