Introduction to Digital Security and Threat modelling
Digital security is of paramount concern for every human rights defender as protecting online assets, entire networks, computer systems, and the data stored within from unauthorized access is key in any human rights investigation.
Each individual human rights defender or organisation threat modeling methodology consists of a different series of steps, and we’ll examine the nuances of each of them later in this module.
We will also examine various type of risks associated with our daily online activities, analyse our vulnerabilities and possible threat actors for us or our organisation and, of course, look into possible ways to mitigate any types of risks.
Estimated time: 35m
Welcome to Safety & Security in Human Rights Work course!
We are excited to have you in the class and look forward to your contributions to the learning community.
First of all, we recommend taking a few minutes to explore the content of the course. Review all the materials we will be covering in 7 Modules, and preview the quizzes and assignments you’ll need to complete to pass the course.
Login to the Forum where you can discuss the course materials with fellow learners taking this course. And of course, don’t forget to explore FreedomLab site, its tool library and other online trainings!
If you have questions about course content, please post them in the forums to get help from others in the course community.
Good luck as you get started, and we hope you enjoy the course!
Giorgi Iashvili & Helena Manrique
Introduction to Digital Security and Threat modelling
Please, make sure you turned on Subtitles option on YouTube.
Take the quiz and test your knowledge after completing the first module of the training!
1. What do we mean when we say we want to keep our data protected and guarantee its confidentiality?Correct! Wrong!
2. What do we mean when we say the integrity of our data should be guaranteed?Correct! Wrong!
3. What does availability of our data mean?Correct! Wrong!
4. Is it possible to avoid data-related risks?Correct! Wrong!
5. What does Threat Modelling mean?Correct! Wrong!
6. What are the 2 main characteristics of a risk, when assessing it?Correct! Wrong!
7. What is vulnerability?Correct! Wrong!
To support your learning on safety and security we strongly encourage you to DOWNLOAD and use a security toolkit mobile app Umbrella
WHAT IS UMBRELLA?
Umbrella is the all-in-one mobile app for digital and physical security helping you learn about the latest risks and how to mitigate them. It is designed and used by journalists, aid workers, human rights activists, and people travelling in high-risk areas.
- Available on Google Play, Apple Store, Amazon Appstore, or F-Droid.
- In English, Spanish, Chinese (traditional), Farsi, Russian and French.
- Secure and transparent.
- Always absolutely free
An essential security toolkit for NGOs.
- Lessons on relevant topics for any experience level.
- Step-by-step guides to digital security tools.
- Up-to-date security alerts for any location. Select from trusted sources or add your own.
A better way to manage security.
- Shareable checklists help prove staff are prepared for legal and insurance purposes.
- Forms streamline the paperwork you need to assess risk and debrief staff.
- Data is encrypted and password-protected.
1. What will I learn from this course on Safety & Security in Human Rights Work??
Safety & Security training provides you with necessary knowledge and valuable set of skills to protect you and your devices while collecting, storing and sharing sensitive data or browsing the Internet during the process of conducting human rights monitoring activities.
The course is based on a holistic approach to security which integrates both physical security, self-care and well-being as well as digital and information security practices.
2. What are its learning objectives?
1. to strengthen the capacity of CSOs, human rights defenders, activists and human rights organizations to conduct their human rights work in a safe and secure manner
2. to equip learners with the technical knowledge and skills needed:
- to protect and defend themselves and their computers, mobile systems and networks as well as any data in transit against malicious attacks or surveillance
- to ensure digital privacy
- to protect the confidentiality of their sources of information while conducting interviews with victims
- to strengthen their digital and physical security and to ensure their psychological well-being
- to identify, analyze, and remediate security threats
- to analyze and evaluate their cyber security needs or the needs of their organization and to conduct a cyber security risk assessment
- to ensure the protection of information technology assets
- to regularly integrate physical and digital security practices into daily work and life
- to implement strategies of coping with psychosocial impact of trauma and other traumatic experiences while conducting human rights work or interviewing victims
3. What level of knowledge or education should I have before starting the course?
The course is primarily addressed to human rights defenders with monitoring responsibilities. The methodology is adapted to beginners with no previous technical knowledge. Safety and Security training provides a holistic approach to security and shares best practices to identify risks and vulnerabilities, build up a threat model and mitigate those risks and ensure the security of information in transit and your own privacy and security online.
4. Is this course available in other languages?
Yes, this course is available also in Russian.
5. How do I pass the course? Do you propose a certificate and if yes, how can I receive it?
To earn your Course Certificate, you’ll need to earn a passing grade on the final assessment survey. After completing Safety & Security course, please contact us to receive a link to the final assessment survey. If you reach 60% of positive answers, we will issue the Course Certificate to you in electronic format.
6. What if I did not find an answer to my questions?
Well, then feel free to contact us.