MODULE 6: Security Basics for IT Support
This module teaches the essential security responsibilities of an IT Support Technician.
IT Support may not design firewalls like security engineers, but they are the first line of defense against:
- Malware infections
- Data loss
- Weak passwords
- USB attacks
- Unsafe user behavior
A single mistake at the support level can compromise the entire organization. This module ensures that support staff become security-aware, not security risks.
What You Will Learn in This Module
By the end of Module 6, you will be able to:
- Understand basic cybersecurity principles for IT support
- Work confidently with antivirus & EDR tools
- Manage Windows updates and patching
- Control USB and removable devices
- Apply basic endpoint security rules
- Perform first-response actions during a security incident
- Educate users on safe computing practices
Lesson 1: Why Security Matters in IT Support
The IT Support Security Responsibility
IT support controls:
- User accounts
- Software installation
- USB access
- System updates
- Printers & shared devices
If IT support is careless:
- Malware spreads easily
- Data leaks happen
- Ransomware attacks succeed
- Insider misuse goes unnoticed
IT support = Security gatekeeper at the device level
Common Threats Seen by IT Support
- Infected USB flash drives
- Fake software installers
- Phishing emails
- Weak passwords
- Unpatched systems
- Unauthorized software
Lesson 2: Antivirus vs EDR (Support-Level Understanding)
Antivirus (Traditional Protection)
Protects against:
- Viruses
- Worms
- Trojans
- Basic malware
Functions:
- Real-time protection
- Full system scans
- Quarantine infected files
EDR (Endpoint Detection & Response)
Advanced protection used in enterprises:
- Detects suspicious behavior
- Monitors processes
- Isolates infected devices
- Sends alerts to the security team
IT Support Role:
- Check alerts
- Isolate affected device
- Report to security/admin team
- Assist with cleanup
Lesson 3: Patch Management & Updates
Why Patching Is Critical
Most cyberattacks succeed because of:
- Outdated Windows
- Unpatched browsers
- Old applications
- Unsupported software
Hacker’s target known vulnerabilities.
What IT Support Must Patch
- Windows updates
- Office applications
- Browsers (Chrome, Edge, Firefox)
- PDF readers
- Java, .NET
- Antivirus definitions
Patch Management Tasks
- Enable automatic updates
- Schedule updates after work hours
- Restart systems when required
- Verify successful update installation
- Report failed updates
Lesson 4: USB, External Devices & Removable Media Security
Why USB Devices Are Dangerous
USB can carry:
- Malware
- Keyloggers
- Ransomware
One infected USB can compromise many computers.
IT Support Security Controls
- Disable USB storage where required
- Allow only approved devices
- Scan every USB before use
- Block unknown USB drivers
- Use write-protection when possible
Common USB Security Incidents
- “My files disappeared after using a flash drive”
- “PC became slow after plugging USB”
- “Strange shortcuts appeared on my drive”
Lesson 5: Basic Windows Security Controls
These are daily IT support security tasks.
- User Account Control (UAC)
- Prevents unauthorized system changes
- Prompts for admin approval
- Should always remain ENABLED
- Windows Defender Firewall
- Controls incoming & outgoing traffic
- Blocks unauthorized applications
- Must always stay ON
- Account Lockout & Password Policies
- Lock accounts after multiple failed logins
- Enforce strong passwords
- Prevent brute-force attacks
- BitLocker & Device Encryption (Intro)
- Encrypts hard drives
- Protects data if laptop is stolen
- IT support helps with:
-
- Checking encryption status
- Recovering recovery keys (when allowed)
Lesson 6: First Response to a Security Incident (IT Support Level)
When something suspicious happens, IT support must act fast and correctly.
Common Security Incidents
- Virus detected
- Ransomware message appears
- Strange pop-ups
- Unauthorized login attempt
- Data copied to USB without permission
IT Support First-Response Steps
- Disconnect the device from the network immediately
- Do not shut down unless instructed
- Report to system admin or security team
- Preserve evidence (do not delete logs)
- Follow incident response instructions
- Educate the user after cleanup
Lesson 7: User Security Awareness (IT Support as a Teacher)
Most security breaches happen because of human mistakes, not technology.
Common User Mistakes
- Clicking unknown email links
- Downloading cracked software
- Using weak passwords
- Sharing passwords
- Plugging random USB drives
What IT Support Must Teach Users
- How to recognize phishing emails
- Why passwords must be strong
- Why software must be official
- Why USB should be scanned
- Why they must lock their PC
IT Support = daily cybersecurity awareness trainer
Lesson 8: Real-World Security Scenarios for IT Support
Students practice handling:
- Virus detected on user PC
- Flash drive infected with shortcut virus
- Employee downloaded cracked software
- Suspicious email clicked by staff
- Laptop stolen from office
Each scenario follows:
- Identify the threat
- Isolate the device
- Apply control
- Report incident
- Educate the user
MODULE 6 SUMMARIES
By completing Module 6, students now understand:
- The IT support role in cybersecurity
- Difference between antivirus and EDR
- How patching prevents cyberattacks
- How to secure USB and removable devices
- How to apply Windows security controls
- How to act during a security incident
- How to train users on security awareness
This module answers the critical IT Support question:
“How do I protect user computers from everyday cyber threats?”