In today's world, what are the various types of security threats to the systems, data and network? Describe the safeguards and prevention mechanisms that need to be implemented in order to be safe from them.

Threats target the CIA triad — Confidentiality, Integrity, Availability. Offices must know threat → safeguard pairs.

Major threats:

1. Malware — Virus, worm, Trojan, ransomware (locks files for money), spyware (secret recording).
2. Phishing — Fake bank/office mail/SMS/websites stealing passwords and OTPs.
3. Hacking and password attacks — Brute force, stolen credentials, unpatched software exploitation.
4. DoS/DDoS — Flooding servers so real users cannot access (e.g. result sites).
5. Social engineering and insider misuse — Fake calls, pen-drive theft, USB data copy by staff.
6. Data interception — Eavesdropping on open Wi-Fi without encryption.

Safeguards and prevention:

1. Access control + MFA — Strong unique passwords, OTP/biometric, role-based access (clerk vs admin).
2. Firewall + IDS/IPS — Filter traffic, detect and block intrusions at network border.
3. Antivirus + updates — Updated signature + behaviour-based scanning; patch OS/apps promptly; scan pen-drives.
4. Email filtering + awareness — Spam/phishing filters, block .exe attachments; train staff not to share OTP or click unknown links.
5. Encryption + digital signature — HTTPS, hashed passwords, signed e-tender documents (valid under ETA 2063).
6. Backup + policy — Regular full/incremental backup offline; USB policy; incident response via CERT and SoC monitoring.

One-line close: layered defence (technology + people + policy) — no single tool is enough.