Cybersecurity Foundations (Grades 6–8) · lesson 36 of 48 · 10 min
Your Personal Device Security Checklist
Security knowledge is only valuable if it translates into action. This lesson brings together everything from the previous lessons — updates, backups, safe browsing, encryption, and network security — into a practical checklist you can apply to your own devices right now.
Think of this as your personal security audit. Some items are one-time setup steps. Others are regular habits. Together, they address the most common attack vectors that affect everyday users.
By the end of this lesson you will be able to audit your own device against a security checklist, explain why each control matters, respond correctly to a ransomware scenario, and identify which settings to check on a new device.
The 80/20 rule of personal security
Security researchers estimate that 80% of successful attacks exploit the same small set of weaknesses: unpatched software, weak passwords, no MFA, and no backups. The checklist in this lesson addresses all of them. You do not need to be a security expert to be significantly more secure than the average user — you just need to apply the basics consistently.
Putting It All Together
The previous lessons in this unit covered security updates, backups, and safe browsing individually. This lesson brings them together into a practical device security checklist — a set of actions you can take right now to harden your devices against the most common attacks.
Security is not a one-time event. It is an ongoing practice. The checklist below covers both one-time setup steps and regular maintenance habits.
One-Time Setup Checklist
Regular Maintenance Habits
Quick-Reference: What to Do When Something Goes Wrong
Sorting Activity — Good Habit or Security Gap?
- Leaving your laptop unlocked when you step away
- gap
An unlocked device can be accessed by anyone nearby. Always lock your screen when stepping away.
- Enabling full-disk encryption on your laptop
- good
Full-disk encryption means a stolen laptop’s data cannot be read without your password.
- Using the same password on your router as on your email
- gap
Password reuse means one breach compromises multiple accounts. Use unique passwords for every account.
- Testing your backup by restoring a file each month
- good
Untested backups may fail when needed. Regular restore tests confirm your backup is working.
- Keeping Bluetooth on all the time even when not using it
- gap
Bluetooth left on exposes you to proximity attacks like BlueBorne. Disable it when not in use.
- Reviewing app permissions every few months
- good
Apps accumulate permissions over time. Regular reviews let you revoke access you no longer need.
Knowledge Check
Device Security Checklist
What is the purpose of full-disk encryption?
- Speeds up your computer
- Prevents malware from running
- Makes data unreadable without your password if the device is stolen
- Backs up your files automatically
Answer: Makes data unreadable without your password if the device is stolen
Full-disk encryption protects data at rest. Even if someone removes the hard drive, they cannot read the data without the encryption key.
Ransomware appears on your screen. What is the FIRST thing you should do?
- Pay the ransom immediately
- Disconnect from the network to stop it spreading
- Run an antivirus scan
- Restart the computer
Answer: Disconnect from the network to stop it spreading
Ransomware can spread to other devices on your network. Disconnecting immediately limits the damage before you begin recovery.
Changing the default admin password on your router is an important security step.
- True
- False
Answer: True
Default router passwords are publicly documented. Attackers scan for routers using default credentials. Changing it is one of the most important home network security steps.
How often should you test your backup by restoring a file?
- Never — if the backup ran, it works
- Once when you first set it up
- Regularly — at least monthly
- Only after a security incident
Answer: Regularly — at least monthly
Backups can fail silently. Regular restore tests confirm the backup is valid and that you know how to use it before you need it urgently.
Disabling _____ when not in use reduces your exposure to proximity-based wireless attacks.
Answer: Bluetooth
Bluetooth vulnerabilities like BlueBorne allow attackers within range to compromise devices. Disabling Bluetooth when not needed eliminates this attack surface.
Real-World Case Studies
Case 1: The Target Breach — How One Vendor’s Weak Security Cost $300 Million
In 2013, attackers breached Target’s network and stole 40 million credit card numbers and 70 million customer records. The entry point was not Target itself — it was a third-party HVAC vendor with weak security. The vendor had network access to Target’s systems, and attackers used stolen credentials to pivot into Target’s payment network. Target paid over $300 million in settlements. The lesson: your security is only as strong as the weakest link in your network. Every device and account with network access is a potential entry point.
Case 2: The Teenager Who Hacked Apple — and What It Teaches
In 2018, a 16-year-old Australian student repeatedly hacked into Apple’s internal systems over several months, downloading 90GB of secure files and accessing customer accounts. He was caught because he stored the files in a folder named “hacky hack hack.” He was not exploiting zero-days — he was using credentials found in previous data breaches and basic social engineering. The lesson: most breaches do not require sophisticated techniques. Reusing passwords, not enabling MFA, and ignoring basic security hygiene are what make attacks possible.
Previous lesson: Backups and recovery
Back to Cybersecurity Foundations (Grades 6–8)
Next lesson: Home network safety