Leather Technology  ·  Level 6
Digital Literacy
Chapter 5: Apply Cybersecurity Skills
📚 18 Topics
⚑ What you will be able to do

By the end of this chapter, you will be able to:

  • correctly classify data protection and privacy according to your workplace's policies and regulations
  • accurately identify internet security threats by following workplace policies and regulatory requirements
  • detect computer threats and crimes using information management security guidelines
  • effectively apply cybersecurity control measures in line with workplace policies and regulations

Mastering these skills will help you keep your workplace information safe and build trust in your role as a digital professional.

Cybersecurity is a critical component of digital literacy for professionals in leather technology, where sensitive data such as supplier information, production designs, and client records must be safeguarded. In Kenya's dynamic leather industry, which involves collaboration between artisans, manufacturers, and export agents, protecting digital assets ensures business continuity and compliance with data protection regulations. This chapter equips leather technologists with essential cybersecurity skills focused on data protection and privacy, emphasizing confidentiality, integrity, and availability of information within their specific work context.

5.1 Data protection and privacy cybersecurity skills

Data protection and privacy are foundational to maintaining trust and operational efficiency in any digital environment. In leather technology, where proprietary tanning methods, quality control data, and customer contracts are stored digitally, applying cybersecurity principles prevents unauthorized access, data corruption, and service interruptions. Understanding these principles helps leather professionals comply with Kenya’s Data Protection Act and safeguard their enterprise’s reputation.

5.1.1 Confidentiality of data/information

Confidentiality in cybersecurity refers to the protection of information from unauthorized access or disclosure. For leather technology professionals, confidentiality ensures that trade secrets, supplier contracts, and customer details are accessible only to authorized personnel, preventing industrial espionage and identity theft.

Meaning of Confidentiality

Confidentiality means that sensitive data is accessible exclusively to those with legitimate permission. This involves implementing controls such as passwords, encryption, and access rights to prevent disclosure of information to unauthorized users. For example, a leather manufacturing firm in Nakuru must restrict access to its chemical formulation data to only senior technicians and managers to avoid competitive disadvantage.

Importance of Confidentiality in Leather Technology

Maintaining confidentiality protects intellectual property, such as unique tanning formulas, which are critical competitive assets. It also safeguards client personal information, ensuring compliance with Kenya’s Data Protection Act and preserving customer trust. Leakage of confidential data can result in financial loss, legal penalties, and damage to the company’s brand.

Measures to Ensure Confidentiality

Implementing strong authentication mechanisms like multi-factor authentication (MFA) limits unauthorized access. Using encryption tools for stored data and communication channels protects information from interception. Regular staff training on recognizing phishing attempts prevents accidental data leaks. For instance, a SACCO handling leather artisans’ payments must encrypt transaction data to protect members’ financial details.

Challenges in Maintaining Confidentiality

Challenges include insider threats where employees misuse access privileges, social engineering attacks that trick users into revealing passwords, and inadequate security infrastructure in smaller leather workshops. Overcoming these requires continuous monitoring, strict access control policies, and investment in cybersecurity technologies.

5.1.2 Integrity of data/information

Data integrity refers to the accuracy, consistency, and trustworthiness of data over its lifecycle. In leather technology, ensuring data integrity means that production records, quality inspection logs, and inventory counts remain unaltered unless authorized, which supports decision-making and regulatory compliance.

Meaning of Data Integrity

Data integrity means that information is complete, accurate, and reliable from creation through storage and use. This involves protection against accidental or malicious modification. For example, if a leather tannery’s chemical usage logs are tampered with, it could lead to poor product quality or regulatory violations.

Significance of Integrity in the Workplace

Integrity of data ensures that management decisions are based on correct information, reducing errors and improving operational efficiency. It also facilitates audit trails for compliance with industry standards like ISO 17075 (Leather Testing). Maintaining data integrity strengthens customer confidence in product quality and traceability.

How to Maintain Data Integrity

Using checksum and hash functions detects unauthorized changes to files. Implementing role-based access control limits modification rights to qualified personnel. Regular backups and version control allow restoration of original data after corruption or loss. In a leather cooperative managing member contributions, such measures prevent financial discrepancies and fraud.

Consequences of Compromised Integrity

Corrupted data can lead to defective products, financial losses, and damaged reputation. For instance, if a tannery’s inventory data is altered, it may result in over-ordering costly raw materials or stockouts, disrupting production schedules and client deliveries.

5.1.3 Availability of data/information

Availability ensures that data and systems are accessible to authorized users whenever needed. In the leather industry, timely access to design files, supplier contacts, and production schedules is essential for smooth operations and meeting delivery deadlines.

Meaning of Availability

Availability means that information systems function properly, and data can be retrieved without undue delay or obstruction. This involves protecting against hardware failures, cyberattacks like denial of service (DoS), and natural disasters. For example, a leather exporter in Mombasa relies on constant access to export documentation stored digitally to avoid shipment delays.

Importance of Availability in Leather Technology

System downtime or inaccessible data can halt production, delay order fulfillment, and cause revenue loss. Ensuring availability supports continuous monitoring of tanning processes and quality control. It also enables quick response to customer inquiries, enhancing service delivery.

Techniques to Enhance Availability

Implementing redundant hardware systems and uninterruptible power supplies (UPS) prevents outages. Regular updating and patching of software reduce vulnerabilities exploited by attackers. Establishing disaster recovery plans and cloud backups ensures data can be restored swiftly after incidents.

Risks to Availability

Cyberattacks such as ransomware can lock leather factory systems, crippling operations. Physical damage from fires or floods may destroy local servers if no offsite backup exists. Network failures can isolate users from critical applications, affecting coordination between production and sales teams.

Practice Questions

  1. Explain the role of confidentiality in protecting leather industry data and give two examples of measures to maintain it. (6 marks)
  2. Discuss five ways in which data integrity impacts decision-making in a leather manufacturing firm. (10 marks)
  3. Describe four techniques to ensure the availability of critical data in a leather technology enterprise and explain their importance. (8 marks)
  4. What are the consequences of failing to maintain confidentiality, integrity, and availability in leather technology digital systems? Provide examples. (6 marks)
The rest of this chapter
🔒

Create a free account to open more of this chapter.

Free: practical guides, quick cards, workplace scenarios and more.

Create a free account
🔒5.2 Internet Security Threats

Internet security threats pose significant risks to professionals in the leather technology sector in Kenya, where digital tools are increasingly used for communication, design, inventory management, and transactions. These threats can compromise sensitive bus…

🔒5.3 Malware Attacks

Malware attacks are one of the most common and damaging cybersecurity challenges facing leather technology professionals in Kenya. With increasing reliance on digital design software, inventory systems, and online communication, malware can cripple operations,…

🔒5.4 Social Engineering Attacks

Social engineering attacks represent a critical cybersecurity threat that exploits human psychology rather than technical vulnerabilities. In the leather industry in Kenya, where many businesses rely on digital records for inventory, client data, and supplier…

🔒5.5 Distributed Denial of Service (DDoS)

Distributed Denial of Service (DDoS) attacks are a significant cybersecurity threat that disrupt access to online services by overwhelming them with traffic from multiple sources. Leather technology businesses increasingly depend on online platforms for orders…

🔒5.6 Man-in-the-middle attack (MitM)

Man-in-the-middle (MitM) attacks represent a significant cybersecurity threat in Kenya’s leather industry, where digital communication and online transactions are increasingly common. Leather manufacturers, suppliers, and exporters rely on internet-based commu…

🔒5.7 Password Attacks

Password attacks remain one of the most prevalent cybersecurity challenges facing leather technology firms in Kenya. Employees and administrators often access critical systems such as inventory management, sales portals, and accounting software through passwor…

🔒5.8 IoT Attacks

The proliferation of Internet of Things (IoT) devices in various sectors, including leather technology manufacturing and supply chain management in Kenya, has introduced new cybersecurity vulnerabilities. IoT devices such as smart sensors monitoring leather cu…

🔒5.9 Phishing Attacks

Phishing attacks remain one of the most prevalent cybersecurity threats targeting individuals and organizations in Kenya, including those in the leather technology sector. These attacks manipulate users into divulging sensitive information, often under the gui…

🔒5.10 Ransomware

Ransomware is a form of malicious software that targets computers and digital devices by encrypting data or locking users out of systems, demanding payment to restore access. In Kenya's leather technology sector, where digital records of production processes,…

🔒5.11 Computer Threats and Crimes

Computer threats and crimes encompass a range of malicious activities targeting digital systems to steal, damage, or manipulate data. For leather technology professionals in Kenya, awareness of these threats is vital to protect intellectual property, client da…

🔒5.12 Cybersecurity Control Measures

In the leather technology sector in Kenya, cybersecurity control measures are vital to protect sensitive information such as supplier data, proprietary tanning processes, and client contracts. As leather manufacturers increasingly adopt digital tools for inven…

🔒5.13 Physical Controls

Physical controls are essential cybersecurity measures that protect hardware, networks, and data from physical actions or events that could cause damage or unauthorized access. In Kenya’s leather industry, where digital systems support production and supply ch…

🔒5.14 Technical/Logical Controls (Passwords, PINs, Biometrics)

Technical or logical controls are security measures implemented through software and digital mechanisms to restrict unauthorized access to information systems and data. In the Kenyan leather industry, where design files, supplier databases, and customer inform…

🔒5.15 Operational Controls

Operational controls consist of policies, procedures, and practices that govern how security is managed daily within an organization. For Kenyan leather technology professionals, these controls ensure that technical safeguards are effectively supported by huma…

🔒5.16 Laws governing protection of ICT in Kenya

In Kenya, the rapid integration of digital technologies in industries such as leather manufacturing requires robust legal frameworks to safeguard information and communication technology (ICT) systems. These laws ensure that data, digital infrastructure, and u…

🔒5.17 The Computer Misuse and Cybercrimes Act No. 5 of 2018

The Computer Misuse and Cybercrimes Act No. 5 of 2018 is a cornerstone legal instrument in Kenya designed to combat cybercrime and regulate the use of computer systems. For leather technology businesses, this Act provides the legal framework to protect digital…

🔒5.18 The Data Protection Act No. 24 Of 2019

The Data Protection Act No. 24 of 2019 is a cornerstone legal framework in Kenya that governs the processing, storage, and sharing of personal data. For professionals in leather technology, compliance with this law is crucial as it ensures that any personal in…

Chapter Summary

This chapter explored essential cybersecurity skills focused on protecting data and privacy, emphasizing the confidentiality, integrity, and availability of information. Various internet security threats were examined, including malware attacks that compromise systems, social engineering tactics that exploit human behavior, and distributed denial of service attacks that overwhelm network resources. The chapter also covered man-in-the-middle attacks that intercept communications, password attacks targeting authentication, and vulnerabilities specific to Internet of Things devices. Phishing and ransomware attacks were discussed as common methods used by cybercriminals to deceive users and demand payments. Further, the chapter addressed broader computer threats and crimes, highlighting the importance of comprehensive cybersecurity control measures. These measures include physical controls, technical and logical protections such as passwords and biometrics, and operational controls to manage security processes. Finally, the chapter reviewed relevant Kenyan legislation, including the Computer Misuse and Cybercrimes Act No. 5 of 2018 and the Data Protection Act No. 24 of 2019, which govern ICT protection and data privacy.

Self-Assessment

🔒 PDFDownload this self-assessment, with answers

A. Written Assessment

  1. What does confidentiality mean in data protection within a leather manufacturing company? (2 marks)
  2. Identify three common types of malware that could affect the digital systems in a leather tannery. (3 marks)
🔒20 more in this section.

Chapter Examination Questions

🔒 PDFDownload these examination questions, with worked answers

SECTION A (40 Marks) - Answer ALL Questions

  1. Explain how confidentiality of data is maintained in a leather tannery's digital inventory system. (4 marks)
  2. Describe the importance of data integrity for quality control records in a leather processing factory. (4 marks)
🔒18 more in this section.
Flashcards 20 cards Study deck ▾
Question
1

↻ Tap card to reveal answer
🔒

18 more in this section.

Create a free account
Test Yourself 17 questions Start quiz ▾
0%
0 / 2
🔒

15 more in this section.

Create a free account
Am I competent?

At the start of this chapter we promised you would be able to:

  • correctly classify data protection and privacy according to your workplace's policies and regulations
  • accurately identify internet security threats by following workplace policies and regulatory requirements
  • detect computer threats and crimes using information management security guidelines
  • effectively apply cybersecurity control measures in line with workplace policies and regulations

Tick each one you can genuinely do.

So, are you there yet?

You're competent when you can confidently do 50% or more of what this chapter promised.

Sign in to record how you're doing.