ICT Security

Information Communication Technology · Level 6  ·  3 Chapters

Compiled by: Mary Jemutai

Can I download ICT Security notes as a PDF?

Yes. The notes download as a PDF too: every chapter has a Download PDF button above its notes. Sign in and click it. Each download comes from your plan's monthly allowance or from credits. To read before you sign in, the first topic of every chapter opens to anyone, and a Profplanet plan opens the remaining topics.

▣

What ICT Security covers

Assets, threats, risk reports, physical and logical controls and monitoring all feature in ICT Security, an Information Communication Technology Level 6 unit. Assessing security needs covers documenting ICT security assets, identifying threats, carrying out risk impact assessments and compiling risk assessment reports. Installing controls covers physical and logical control measures following the organization's ICT security policy, and testing them. Maintaining system security covers regular monitoring, monitoring reports and updating the security system from the findings.

■

Careers after ICT Security

In Kenya, the ability to protect digital assets is needed everywhere - from bustling city data-centres to remote agricultural cooperatives. Mastering the security skills in this unit opens doors to roles where you safeguard information, keep services running, and help organisations meet legal and industry standards.

  • Data-centre operators in Nairobi’s industrial parks - you document every server, router and firewall, identify threats, and produce risk-impact assessments that keep the centre’s uptime high, earning a salary as a security analyst or a contract fee for each audit you complete.
  • Banking and micro-finance institutions in major towns (Nairobi, Mombasa, Kisumu) - you implement physical controls (access cards, CCTV) and logical controls (encryption, multi-factor authentication), test them, and issue compliance reports that protect customers’ money, receiving a regular payroll or consultancy retainer.
  • Telecommunications companies with regional hubs - you monitor network traffic, log security incidents, and update firewalls based on your monitoring reports, earning wages as a network security officer or per-incident fees for emergency response.
  • County referral hospitals and private clinics - you catalogue medical-record systems, assess risks to patient data, and recommend both physical (locked server rooms) and logical safeguards (HIPAA-style encryption), receiving a salary in the IT department or payment for a freelance health-IT security project.
  • Universities and technical colleges in towns like Eldoret and Nakuru - you prepare security monitoring reports for campus networks, train staff on policy compliance, and earn a stipend as an ICT security coordinator or charge per-semester for security workshops.
  • Manufacturing firms in Kiambu and Thika (food processing, textiles, agro-industry) - you conduct risk impact assessments on production control systems, implement and test security controls, and provide regular update services, earning a fixed salary or a service-contract fee for each audit cycle.
  • NGOs and development agencies operating in remote regions - you document ICT assets used for project management, identify threats such as ransomware, and produce clear risk reports that help secure donor data, earning a grant-funded position or consulting fees for each security review.
  • Freelance ICT security consultant serving small-to-medium enterprises (SMEs) across Kenya - you package the full suite of skills - documentation, threat identification, risk assessment, control implementation, testing, monitoring and reporting - into a service you sell to shops, e-commerce sites, and start-ups, generating income per project or through retainer agreements.

Your expertise will be the backbone that keeps Kenya’s digital world safe and trustworthy. Keep building these skills, and the opportunities will follow you wherever technology is used.

Chapters

What ICT Security covers: 10 main topics in 3 chapters

1. Assess security needs

  1. 1.1 Documentation of ICT security assets
  2. 1.2 ICT security threats
  3. 1.3 ICT security risk assessment
  4. 1.4 ICT security risk assessment report

2. Install security control measures

  1. 2.1 Physical control measures
  2. 2.2 Logical security control measures
  3. 2.3 Testing the implemented ICT security control measures

3. Maintain ICT system security

  1. 3.1 Introduction to ICT security monitoring
  2. 3.2 ICT security system monitoring report
  3. 3.3 Updating ICT security system

Practise this unit

Revise this unit

3 more for this unit

Beyond the syllabus

Other units in Module VI