What security, privacy and social issues arise when information is communicated across networks?
Describe the social and ethical issues raised by communication systems, including message security and encryption, privacy of communications, the effect on work and society, and the digital divide
A focused answer to the HSC Information Processes and Technology dot point on issues raised by communication systems. Message security and encryption, privacy, effects on work and society, and the digital divide, with the traps markers look for.
Reviewed by: AI editorial process; not yet individually human-reviewed
Have a quick question? Jump to the Q&A page
What this dot point is asking
NESA wants you to describe the social and ethical issues that arise because information travels across networks where others can intercept it, where access is unequal, and where the way we work and live changes. This is distinct from the database issues dot point; here the focus is on issues created by communication and networking themselves.
The answer
Message security and encryption
When data travels across a network, especially the public internet, it passes through equipment the sender does not control and can be intercepted. Message security protects against this. Encryption scrambles the message with a key so an interceptor sees only ciphertext; secure protocols such as HTTPS and encrypted email apply this automatically. Authentication confirms that the parties are who they claim to be, using passwords, certificates or multi factor methods, preventing impersonation. Together they protect confidentiality and integrity in transit.
Privacy of communications
Communication systems create rich records: the content of messages, and metadata such as who contacted whom, when, from where and how often. Both can be monitored, logged and analysed by service providers, employers or attackers. Privacy issues include surveillance of employees' communications, retention of message and location histories, and the use of communication data to profile people. The ethical questions are who may read or retain communications, with what consent, and for what purpose.
The changing nature of work and society
Networked communication lets people work remotely, collaborate across distance and respond instantly. This brings flexibility and access to global talent, but also an always-on expectation that blurs work and personal life, the automation of customer contact that removes some jobs, and a dependence on connectivity that makes outages costly. Socially, communication systems connect communities and democratise publishing, while also spreading misinformation and enabling harassment. A balanced answer names both sides.
The digital divide
The digital divide is the gap between those with reliable, affordable access to communication systems and the skills to use them, and those without. As services such as banking, government, education and health move online, people on the wrong side of the divide, often rural, elderly, low-income or in developing regions, are excluded from services that increasingly assume everyone is connected. This makes equitable access an ethical issue for system designers and policymakers, not just a matter of personal choice.
Connecting the issues
Security, privacy, work and the divide interact. Encryption protects privacy; weak security exposes it. Remote work depends on access, so the divide shapes who can take part. A strong response links the technical controls to the social outcomes rather than listing them separately.
Exam-style practice questions
Practice questions written in the style of NESA exam questions on this dot point, with worked answer explainers. The year tag is the paper they imitate, not the source.
2021 HSC2 marksA person receives an email from '125pos@inf.au' headed 'Failed delivery!' addressed to 'Dear Cutomer' asking them to click a link to update their 'addess' to avoid a 10% holding fee. Give TWO reasons why this email could be considered suspicious.Show worked answer →
This tests message security awareness (phishing). For 2 marks give two distinct warning signs.
Suspicious sender address. The address '125pos@inf.au' does not match a legitimate, recognisable delivery company domain, which is a common phishing indicator.
Spelling and lack of personalisation. The email contains errors ("Cutomer", "addess") and is not addressed to the recipient by name; a genuine company that holds your details would normally personalise it and write correctly.
Other acceptable reasons include the pressure tactic of a threatened 10% fee to make you act quickly, and that the only way to respond is by clicking an unfamiliar link rather than contacting the company directly. Markers reward two clearly different suspicious features.
2020 HSC3 marksA zoo runs a system where members of the public photograph native moth sightings and upload the photo, date, location and number of moths to its website. Outline technical issues that could occur for members of the public when collecting and transmitting photos.Show worked answer →
For 3 marks outline three technical issues members of the public might face when capturing and uploading photos.
Poor image quality or capture problems. A phone camera may take blurry, low-resolution or poorly lit photos of small moths, so scientists cannot reliably identify the species.
Connectivity and transmission failures. In outdoor or remote locations the mobile signal or wifi may be weak or unavailable, so large photo files fail to upload or upload very slowly.
File size and compatibility. Large or unsupported image file formats may exceed upload limits or not be accepted by the website, and limited data allowance or device storage can prevent transmission.
Markers reward technical (not ethical) issues tied to capturing and transmitting the photos.
2022 HSC1 marksSecurity breaches can be minimised by incorporating which feature into a system's operation? A. Installation of software of a user's choice. B. The ability to log into multiple nodes using only one account. C. Forced logoff from the system if no activity has been detected. D. Allowing the uploading and downloading of files to the system.Show worked answer →
The answer is C, "Forced logoff from the system if no activity has been detected."
Automatic (forced) logoff after a period of inactivity is a security control: it closes unattended sessions so that someone who walks away from a logged-in device does not leave it open for an unauthorised person to access, reducing the chance of a breach.
The other options increase risk: letting users install any software invites malware, single sign-in across many nodes widens the damage if an account is compromised, and freely allowing uploads and downloads is a route for malware and data leakage. The protective feature is forced logoff, option C.