What Cybersecurity Protects: Accounts, Data, and Trust

In the primary school Digital Literacy course you learned that everything you do online leaves a digital footprint. Now you are in junior high, you have more accounts, and you may already have your own phone. So we go one level up: cybersecurity, the habits and settings that protect your accounts, data, and devices from people who want to misuse them.

Three things you protect

1. Accounts. Your WhatsApp, game, email, and social media accounts are your identity on the internet. If an account is taken over, the attacker can send messages in your name, for example asking your friends and family for phone credit or a money transfer.
2. Personal data. Some personal data is general, such as your full name and date of birth, and some is more sensitive, such as the NIK number on the Family Card, health data, financial data, fingerprints, and your face. Indonesian law also treats children's data as needing special protection.
3. Trust. Your friends trust that a message from your number really comes from you. Scammers often exploit this trust.

Example: Raka's story

Raka, a grade 8 student, posted a photo of his new student card on his status because he was excited. The photo showed his full name, student number, date of birth, and school name. A week later, an unknown account messaged him: "Hi Raka, I am on the scholarship committee at your school. Send me the code that just arrived on your phone for verification." Because the person knew so much about him, Raka almost believed it.

Look at the chain step by step:

1. Small pieces of posted data (name, school, date of birth) are collected.
2. That data is used to build a convincing story.
3. The story is used to ask for something secret, such as an OTP code.
4. The code is used to take over the account.

Cybersecurity means breaking this chain at any point: not posting sensitive data, being suspicious of urgent stories, and never giving away secret codes.

The principle of this course: we learn to defend, not to attack. Every exercise is done on your own accounts and devices, with permission and help from a parent or teacher.

A question to think about

Which account would cause the most trouble if someone else took it? Usually the answer is your main email, because email is used to recover many other accounts.