← GCSE Computer Science (AQA)
Test yourself →

Algorithms & computational thinking

What is an algorithm?

An algorithm is a precise, step-by-step set of instructions for solving a problem or completing a task. It must be unambiguous, finite (it stops eventually) and produce a correct result for all valid inputs. Algorithms can be shown as pseudocode, flowcharts or written descriptions.

Computational thinking skills

AQA expects four core skills.

  • Abstraction: removing unnecessary detail and keeping only what matters to the problem.
  • Decomposition: breaking a large problem into smaller, manageable sub-problems.
  • Algorithmic thinking: designing the logical steps needed to reach a solution.
  • Pattern recognition: spotting similarities between problems so existing solutions can be reused.

Searching algorithms

  • Linear search: checks each item in turn from the start. Works on unsorted or sorted lists. Worst case checks every item, so it is O(n).
  • Binary search: repeatedly halves a sorted list, comparing the middle item to the target. Much faster than linear search on large lists, O(log n), but the data MUST be sorted first.

Sorting algorithms

  • Bubble sort: repeatedly swaps adjacent items that are in the wrong order, passing through the list until no swaps are needed. Simple but slow, O(n squared).
  • Merge sort: splits the list in half repeatedly until single items remain, then merges them back together in order. Faster than bubble sort on large data, O(n log n).
  • Insertion sort: builds a sorted section one item at a time, inserting each new item into its correct place.

Expressing algorithms

You need to be able to read, trace and write algorithms in AQA pseudocode and flowcharts, using sequence, selection (if/else) and iteration (for, while, do until). Trace tables are used to track variable values line by line as an algorithm runs, and are the standard way to check your understanding and find errors (bugs).

Common mistakes

  • Confusing linear and binary search conditions, or trying binary search on unsorted data.
  • Miscounting comparisons/swaps in bubble sort trace tables.
  • Forgetting that arrays in AQA pseudocode are usually zero-indexed.
  • Mixing up efficiency (Big O) with simply 'which one is faster to write'.
  • Not decomposing a problem before attempting to code or design it, leading to messy logic.
  • An algorithm must be unambiguous, finite and produce a correct output for all valid inputs.
  • The four computational thinking skills are abstraction, decomposition, algorithmic thinking and pattern recognition.
  • Binary search only works on data that has already been sorted.
  • Binary search has time complexity O(log n); linear search has time complexity O(n).
  • Linear search checks items one by one from the start of the list.
  • Bubble sort repeatedly swaps adjacent out-of-order items and has worst-case time complexity O(n squared).
  • Merge sort splits the list into single items then merges them back in order, giving O(n log n) complexity.
  • AQA pseudocode arrays are normally zero-indexed, so the first element is at position 0.
  • Selection means using if/else to choose between different paths; iteration means repeating steps with for, while or do until.
  • A trace table tracks the value of each variable line by line to check an algorithm's logic or find a bug.
  • Decomposition means breaking a large problem into smaller, more manageable sub-problems.
  • Abstraction means removing unnecessary detail so only the important features of a problem remain.
What are the four computational thinking skills in AQA GCSE Computer Science?
Abstraction, decomposition, algorithmic thinking and pattern recognition.
tap to reveal
What is decomposition?
Breaking a large, complex problem down into smaller, more manageable sub-problems.
tap to reveal
What is abstraction?
Removing unnecessary detail from a problem and keeping only what is relevant to solving it.
tap to reveal
How does linear search work?
It checks every item in the list one by one, from the start, until it finds the target or reaches the end.
tap to reveal
How does binary search work, and what condition must be met first?
It repeatedly halves a sorted list, comparing the middle item to the target; the data must already be sorted.
tap to reveal
What is the time complexity of linear search?
O(n) - worst case, it checks every item.
tap to reveal
What is the time complexity of binary search?
O(log n) - much faster than linear search on large sorted lists.
tap to reveal
How does bubble sort work?
It repeatedly swaps adjacent items that are in the wrong order, passing through the list until no swaps are needed.
tap to reveal
What is the worst-case time complexity of bubble sort?
O(n squared).
tap to reveal
How does merge sort work?
It splits the list in half repeatedly down to single items, then merges the pieces back together in sorted order.
tap to reveal
What is the time complexity of merge sort?
O(n log n), faster than bubble sort on large data sets.
tap to reveal
What is a trace table used for?
To track the value of each variable line by line as an algorithm executes, helping check logic or find bugs.
tap to reveal
What indexing does AQA pseudocode normally use for arrays?
Zero-indexing, so the first element is at position 0.
tap to reveal
Name the three programming constructs used to express algorithms.
Sequence, selection (if/else) and iteration (for, while, do until).
tap to reveal
Why can bubble sort be a poor choice for very large lists?
Because its worst-case complexity is O(n squared), it becomes much slower than O(n log n) algorithms like merge sort as the list grows.
tap to reveal

Programming fundamentals

What programming fundamentals covers

This topic is about how programs actually work under the hood: sequence, selection and iteration, the three core data types, arrays, string handling, file handling, SQL basics, and validation. AQA expects you to trace code by hand and to write short programs in pseudocode or your chosen language (Python is most common).

The three constructs

  • Sequence: instructions run in order, one after another.
  • Selection: IF, ELSE IF, ELSE (and CASE/switch) branch the flow based on a condition.
  • Iteration: count-controlled loops (FOR) run a set number of times; condition-controlled loops (WHILE, DO UNTIL/REPEAT) run until a condition is met. WHILE checks before the loop body runs; DO UNTIL checks after, so it always runs at least once.

Data types and casting

  • Integer: whole numbers. Real/float: numbers with a decimal point. Boolean: True or False only. Character: a single symbol. String: a sequence of characters.
  • Casting converts one type to another, eg str(), int(), float() in Python. A common exam mistake is forgetting that input() always returns a string, so numbers typed in must be cast before doing maths on them.
  • Concatenation joins strings with +; you cannot concatenate a string and an integer directly without casting first.

Arrays

  • An array holds multiple values of the same type under one identifier. 1D arrays are lists; 2D arrays are grids (rows and columns), accessed with two indices like array[row][column].
  • Indexing starts at 0 in most exam pseudocode and in Python, so an array of 5 items runs from index 0 to 4.

String handling operations

  • Know length (len), substring/slicing, concatenation, converting case (upper/lower), and converting between string and number types. These crop up constantly in exam trace tables.

File handling

  • Standard operations are open, read, write and close a file. Always close a file after use to save changes and free the resource.

SQL basics

  • SELECT chooses columns, FROM names the table, WHERE filters rows. Example: SELECT name FROM students WHERE grade = 9.
  • Also know INSERT INTO (add a record), UPDATE (change a record), DELETE FROM (remove records).

Validation vs authentication

  • Validation checks data is sensible (eg range check, length check, type check, presence check). It does not check the data is true, only that it is usable.
  • Authentication checks a user's identity, eg a username and password.

Common mistakes

  • Mixing up validation (checking format) with verification (checking accuracy, eg double-entry or proofreading).
  • Off-by-one errors when looping through arrays because indexing starts at 0.
  • Forgetting WHILE loops can run zero times if the condition is false immediately.
  • Array indexing starts at 0 in AQA pseudocode and Python, so a 5-item array has indices 0 to 4.
  • WHILE loops check the condition before running, so the body can execute zero times.
  • DO UNTIL (REPEAT) loops check the condition after running, so the body always executes at least once.
  • input() in Python always returns a string, so numeric input must be cast with int() or float() before arithmetic.
  • The four validation checks to know are range check, length check, type check and presence check.
  • Validation checks data is sensible; verification checks data is accurate (eg double-entry or visual check).
  • A 2D array is accessed using two indices, written as array[row][column].
  • SQL SELECT syntax is SELECT column FROM table WHERE condition.
  • The four core file handling operations are open, read, write, close.
  • Concatenation joins strings using +, but a string and an integer cannot be concatenated without casting first.
  • Boolean data type can only ever hold True or False, nothing else.
  • CASE (switch) statements are an alternative to multiple ELSE IF statements for selection.
What are the three basic programming constructs?
Sequence, selection, iteration.
tap to reveal
What is the difference between a WHILE loop and a DO UNTIL loop?
WHILE checks the condition first and may run zero times; DO UNTIL checks after, so it always runs at least once.
tap to reveal
What does casting mean?
Converting a value from one data type to another, eg int(), float(), str().
tap to reveal
Why must input() results be cast before doing maths on them?
Because input() always returns a string in Python, even if the user typed a number.
tap to reveal
What index does the first element of an array have?
Index 0.
tap to reveal
How do you access an element in a 2D array?
Using two indices: array[row][column].
tap to reveal
Name the four types of validation check.
Range check, length check, type check, presence check.
tap to reveal
What is the difference between validation and verification?
Validation checks data is sensible/in the right format; verification checks data is accurate, eg by double-entry or proofreading.
tap to reveal
What are the four basic file handling operations?
Open, read, write, close.
tap to reveal
Write the basic structure of an SQL SELECT statement.
SELECT column(s) FROM table WHERE condition.
tap to reveal
What values can a Boolean data type hold?
True or False only.
tap to reveal
What is string concatenation?
Joining two or more strings together, usually with the + operator.
tap to reveal
What SQL command adds a new record to a table?
INSERT INTO.
tap to reveal
What SQL command removes records from a table?
DELETE FROM.
tap to reveal
What is a count-controlled loop, and what construct is used for it?
A loop that runs a set number of times, using a FOR loop.
tap to reveal

Data representation & binary

Why binary?

Computers are built from transistors that are either on or off, so they can only reliably store two states: 1 and 0. This is called binary (base 2). Everything a computer stores, text, numbers, images, sound, is ultimately just patterns of binary digits (bits).

Bits, nibbles, bytes

  • A bit is a single 0 or 1.
  • A nibble is 4 bits.
  • A byte is 8 bits, and can represent 256 different values (0 to 255).
  • Storage units scale up in multiples of 1024 for the exam: 1 KB = 1024 bytes, 1 MB = 1024 KB, 1 GB = 1024 MB, 1 TB = 1024 GB.

Binary to denary (and back)

Each bit position in an 8-bit binary number is worth a power of 2, reading left to right: 128, 64, 32, 16, 8, 4, 2, 1. To convert binary to denary, add up the place values where there is a 1. To convert denary to binary, subtract the largest place value that fits, repeatedly, marking 1s and 0s as you go.

Binary addition and overflow

Add binary numbers column by column like normal addition, carrying when a column totals 2 or more (1+1=10, carry the 1). If an 8-bit register cannot hold the result of an addition, this is called overflow, and it causes an error because the number is too big to store.

Hexadecimal

Hexadecimal (base 16) uses digits 0 to 9 then A to F (A=10 up to F=15). It is used because it is a much shorter way of representing binary, one hex digit exactly represents one nibble (4 bits), so a byte is always 2 hex digits. Hex is used for MAC addresses, colour codes (like #FF0000), and memory addresses because it is easier for humans to read than long strings of 1s and 0s.

Character encoding

Characters are stored using a code that maps each character to a binary number. ASCII uses 7 or 8 bits, giving 128 or 256 possible characters, enough for English letters, numbers and symbols. Unicode uses more bits (commonly 16), allowing over 100,000 characters, so it can represent every language and symbol in the world, including emoji.

Images

A bitmap image is stored as a grid of pixels. Each pixel's colour is stored as a binary number. Colour depth (bits per pixel) determines how many colours are possible, more bits means more colours but a bigger file. Resolution (the number of pixels) also affects file size and image quality, higher resolution means more pixels and a larger file.

Sound

Sound is analogue in the real world, so it must be sampled to be stored digitally. Sample rate is how many samples are taken per second (measured in Hz). Bit depth is how many bits are used to store each sample. Higher sample rate and higher bit depth both improve sound quality but increase file size.

Common mistakes

  • Forgetting binary place values start at 128 for 8 bits, not 256.
  • Mixing up bits and bytes (8 bits = 1 byte).
  • Forgetting each hex digit maps to exactly a nibble.
  • Confusing sample rate (samples per second) with bit depth (bits per sample).
  • A byte is 8 bits and can store 256 different values (0 to 255).
  • 8-bit binary place values from left to right are 128, 64, 32, 16, 8, 4, 2, 1.
  • 1 KB = 1024 bytes, 1 MB = 1024 KB, 1 GB = 1024 MB, 1 TB = 1024 GB.
  • Overflow occurs when a binary addition produces a result too large to fit in the available bits.
  • Hexadecimal uses base 16 with digits 0-9 then A-F, where A=10 and F=15.
  • One hex digit represents exactly one nibble (4 bits), so a byte is always 2 hex digits.
  • ASCII typically uses 7 or 8 bits and can represent 128 or 256 characters.
  • Unicode uses more bits than ASCII (commonly 16) and can represent over 100,000 characters from every language.
  • Image file size is affected by resolution (number of pixels) and colour depth (bits per pixel).
  • Sound is stored digitally by sampling: sample rate (samples per second, Hz) and bit depth (bits per sample) both affect quality and file size.
  • A nibble is 4 bits, half of a byte.
  • Increasing colour depth, resolution, sample rate or bit depth all increase file size.
How many bits are in a byte?
8 bits.
tap to reveal
How many different values can a single byte store?
256 (0 to 255).
tap to reveal
What are the place values for an 8-bit binary number, left to right?
128, 64, 32, 16, 8, 4, 2, 1.
tap to reveal
Convert the binary number 10110101 to denary.
128+32+16+4+1 = 181.
tap to reveal
What is overflow in binary addition?
When the result of an addition is too big to fit in the number of bits available, causing an error.
tap to reveal
What base is hexadecimal, and what digits does it use?
Base 16, using digits 0-9 then A-F, where A=10 and F=15.
tap to reveal
How many bits does one hexadecimal digit represent?
4 bits (a nibble).
tap to reveal
Why is hexadecimal used instead of binary in things like colour codes and MAC addresses?
It is much shorter and easier for humans to read than long strings of 1s and 0s, while still mapping exactly onto binary.
tap to reveal
What is the difference between ASCII and Unicode?
ASCII uses 7 or 8 bits for up to 256 characters (mainly English); Unicode uses more bits (commonly 16) to represent over 100,000 characters from all languages and symbols.
tap to reveal
What two factors affect the file size and quality of a bitmap image?
Resolution (number of pixels) and colour depth (bits per pixel).
tap to reveal
What is sample rate in digital sound?
The number of samples taken per second, measured in Hz.
tap to reveal
What is bit depth in digital sound?
The number of bits used to store each sample; higher bit depth means better quality but larger file size.
tap to reveal
How many bytes are in 1 KB, and 1 KB in 1 MB, for exam purposes?
1 KB = 1024 bytes, and 1 MB = 1024 KB.
tap to reveal
What is a nibble?
4 bits, half of a byte.
tap to reveal
Why do computers use binary rather than denary?
Because they are built from transistors that can only reliably represent two states, on (1) and off (0).
tap to reveal

Computer systems & architecture

The CPU and the fetch-execute cycle

The CPU (Central Processing Unit) carries out instructions from programs, following the fetch-decode-execute cycle non-stop while the computer is on.

  • Fetch: the next instruction address is held in the Program Counter (PC); it is copied into the Memory Address Register (MAR), fetched from memory and placed in the Memory Data Register (MDR).
  • Decode: the Control Unit works out what the instruction means.
  • Execute: the instruction is carried out, often using the Arithmetic Logic Unit (ALU) for maths/logic, with results held briefly in registers like the Accumulator.

Common mistake: mixing up MAR (holds an address) and MDR (holds the actual data/instruction).

Von Neumann architecture

Most computers use Von Neumann architecture: one memory stores both data and instructions, and they travel along shared buses (address bus, data bus, control bus). The system clock generates pulses that pace the fetch-execute cycle.

CPU performance

Three main factors affect CPU performance:

  • Clock speed: measured in GHz (billions of cycles per second); higher means more fetch-execute cycles per second.
  • Number of cores: more cores can process more instructions in parallel, but only if software is written to use them.
  • Cache size: a small, very fast memory on the CPU itself that stores frequently used data/instructions, cutting down slow trips to RAM.

Common mistake: assuming clock speed alone determines speed — cache and cores matter just as much, and software must be optimised to benefit.

Embedded systems

An embedded system is a computer built into a larger device to perform one specific, dedicated task (e.g. a washing machine controller, a satnav, a microwave). They are usually cheap, small, and have limited processing power compared to general-purpose computers.

Memory: RAM vs ROM

  • RAM (Random Access Memory): volatile (loses contents when powered off), stores currently running programs and data, can be read from and written to.
  • ROM (Read Only Memory): non-volatile, stores the BIOS/bootstrap program that starts the computer, cannot normally be written to.

Common mistake: saying RAM is 'permanent storage' — RAM is temporary and volatile; only secondary storage and ROM keep data without power.

Secondary storage

Secondary storage is non-volatile and holds data/software long-term when the computer is off. Three types with trade-offs on capacity, speed, portability and durability:

  • Magnetic (e.g. hard disk drives): large capacity, cheap per GB, but slower and has moving parts that can fail.
  • Optical (e.g. DVD, Blu-ray): cheap, portable, but lower capacity and can scratch.
  • Solid state (e.g. SSD, USB flash): fast, durable (no moving parts), more expensive per GB.

Units and data storage

Data is stored in bits (0 or 1); 8 bits = 1 byte. Storage scales in these approximate steps: 1000 bytes = 1 kilobyte, 1000 KB = 1 megabyte, 1000 MB = 1 gigabyte, 1000 GB = 1 terabyte. Know how to compare file sizes and storage capacity, and calculate how many files fit in a given space.

  • The fetch-execute cycle has three stages: fetch, decode, execute, repeated continuously while the computer is on.
  • The Program Counter (PC) holds the address of the next instruction to be fetched.
  • The MAR (Memory Address Register) holds an address; the MDR (Memory Data Register) holds the actual data or instruction.
  • Von Neumann architecture stores both data and instructions in the same memory, connected by address, data and control buses.
  • CPU performance depends on three main factors: clock speed (GHz), number of cores, and cache size.
  • RAM is volatile working memory that loses its contents when power is removed; ROM is non-volatile and holds the bootstrap/BIOS program.
  • An embedded system is built into a larger device to perform one specific, dedicated task, e.g. a washing machine controller.
  • Secondary storage is non-volatile and comes in three types: magnetic, optical and solid state, each with capacity/speed/durability trade-offs.
  • 8 bits make 1 byte, and storage units scale by 1000: byte, kilobyte, megabyte, gigabyte, terabyte.
  • The Arithmetic Logic Unit (ALU) performs all arithmetic and logical operations inside the CPU.
  • The Control Unit decodes instructions and directs the operation of the rest of the CPU during the cycle.
What are the three stages of the fetch-execute cycle?
Fetch, decode, execute.
tap to reveal
What does the Program Counter (PC) store?
The memory address of the next instruction to be fetched.
tap to reveal
What is the difference between the MAR and the MDR?
The MAR holds a memory address; the MDR holds the actual data or instruction found at that address.
tap to reveal
What is Von Neumann architecture?
An architecture where data and instructions share the same memory and are transferred along common buses (address, data, control).
tap to reveal
Name the three main factors affecting CPU performance.
Clock speed, number of cores, and cache size.
tap to reveal
What does clock speed measure and in what unit?
How many fetch-execute cycles the CPU can perform per second, measured in GHz (gigahertz).
tap to reveal
Why doesn't doubling the number of cores always double performance?
Because software must be specifically written to make use of multiple cores running in parallel.
tap to reveal
What is cache and why does it speed up the CPU?
A small, very fast memory on the CPU that stores frequently used data/instructions, avoiding slower trips to RAM.
tap to reveal
What is the key difference between RAM and ROM?
RAM is volatile (loses data when powered off) and holds running programs; ROM is non-volatile and holds the bootstrap/BIOS program.
tap to reveal
Define an embedded system and give an example.
A computer built into a larger device to perform one specific dedicated task, e.g. a microwave controller or satnav.
tap to reveal
Name the three types of secondary storage.
Magnetic, optical, and solid state.
tap to reveal
Why is solid state storage often preferred despite costing more per GB?
It is faster and more durable because it has no moving parts, unlike magnetic storage.
tap to reveal
How many bits make one byte?
8 bits = 1 byte.
tap to reveal
Put these in order from smallest to largest: megabyte, byte, gigabyte, kilobyte, terabyte.
Byte, kilobyte, megabyte, gigabyte, terabyte.
tap to reveal
What is the role of the ALU?
The Arithmetic Logic Unit performs all arithmetic and logical operations during the execute stage.
tap to reveal

Networks & security

Networks: types and hardware

A LAN (Local Area Network) covers one site, like a school or office, and is owned by one organisation.

A WAN (Wide Area Network) covers a large geographical area and links multiple LANs, often using infrastructure owned by third parties (the internet is the biggest WAN).

Key hardware: a switch connects devices within a LAN and sends data only to the correct device using MAC addresses; a router connects different networks together and directs data between them using IP addresses; a wireless access point (WAP) lets devices connect without cables; a network interface card (NIC) lets a device connect to a network at all, wired or wireless.

Network topologies

Star topology: every device connects to a central switch. If one cable fails only that device drops off, but if the switch fails the whole network goes down. This is the standard setup in schools and offices.

Mesh topology: devices connect directly to many other devices, giving strong reliability with no single point of failure, but it is expensive and complex to set up.

Wired vs wireless and protocols

Ethernet is the standard for wired connections; Wi-Fi is the standard for wireless. Wired is generally faster and more secure but less flexible.

TCP/IP is the protocol suite that governs how data is split into packets, addressed and reassembled across the internet.

Common application protocols: HTTP (unencrypted web browsing), HTTPS (encrypted web browsing, uses TLS), FTP (file transfer), SMTP/IMAP/POP3 (email sending and receiving).

The key common mistake is mixing up HTTP and HTTPS, or forgetting that HTTPS uses encryption via TLS, not just 's' for 'secure' with no mechanism behind it.

Network security threats

Malware includes viruses (attach to files, need a host to spread), worms (self-replicate across networks without a host), trojans (disguised as legitimate software) and ransomware (encrypts files and demands payment).

Social engineering exploits human weakness rather than technical flaws: phishing (fake emails/links to steal data) and shoulder surfing are the classic exam examples.

Brute-force attacks try every possible password combination; SQL injection inserts malicious SQL code into input fields to access or damage a database; DoS (Denial of Service) attacks flood a server with traffic to take it offline.

Prevention methods

Firewalls monitor and filter incoming and outgoing traffic based on rules.

Encryption scrambles data so it is unreadable without a key, protecting data in transit.

Strong passwords, user access levels and biometric authentication reduce unauthorised access.

Physical security (locked server rooms) and regular software updates/patches close known vulnerabilities.

A common exam mistake is calling a firewall 'anti-virus' -- they are different: anti-virus detects and removes malware already on a device, a firewall controls network traffic.

  • A LAN covers one site and is owned by one organisation; a WAN spans a wide area and links multiple LANs.
  • A switch uses MAC addresses to direct data within a LAN; a router uses IP addresses to direct data between networks.
  • Star topology has all devices connected to a central switch: single cable failure is isolated, but switch failure takes down the whole network.
  • Mesh topology has no single point of failure but is expensive and complex.
  • HTTPS encrypts web traffic using TLS; HTTP does not encrypt anything.
  • TCP/IP is the protocol suite that splits data into packets, addresses them and reassembles them across networks.
  • A virus needs a host file to spread; a worm self-replicates across a network without needing a host.
  • Phishing is a social engineering attack using fake emails or links to trick users into giving up data.
  • A DoS attack floods a server with traffic to overwhelm it and take it offline.
  • SQL injection inserts malicious code into input fields to access or damage a database.
  • A firewall filters network traffic by rules; anti-virus software detects and removes malware already on a device -- they are not the same thing.
  • Encryption scrambles data so it cannot be read without the correct decryption key.
What is the difference between a LAN and a WAN?
A LAN covers one site and is owned by one organisation; a WAN spans a wide geographical area and links multiple LANs.
tap to reveal
What does a switch do and how?
Connects devices within a LAN and sends data to the correct device using MAC addresses.
tap to reveal
What does a router do and how?
Connects different networks together and directs data between them using IP addresses.
tap to reveal
Star topology: what happens if the central switch fails?
The whole network goes down, because every device relies on that single switch.
tap to reveal
Star topology: what happens if one device's cable fails?
Only that device drops off; the rest of the network keeps working.
tap to reveal
What is the main advantage and disadvantage of a mesh topology?
Advantage: no single point of failure, very reliable. Disadvantage: expensive and complex to set up.
tap to reveal
What does TCP/IP do?
It is the protocol suite that splits data into packets, addresses them, and reassembles them correctly across a network.
tap to reveal
What is the difference between HTTP and HTTPS?
HTTPS encrypts data using TLS; HTTP sends data unencrypted.
tap to reveal
What is the difference between a virus and a worm?
A virus needs a host file to spread; a worm self-replicates across a network without needing a host file.
tap to reveal
What is phishing?
A social engineering attack using fake emails or links to trick users into revealing personal data.
tap to reveal
What is a DoS attack?
Flooding a server with traffic to overwhelm it and take it offline for legitimate users.
tap to reveal
What is SQL injection?
Inserting malicious SQL code into an input field to access, change or damage a database.
tap to reveal
What is the difference between a firewall and anti-virus software?
A firewall filters incoming and outgoing network traffic by rules; anti-virus detects and removes malware already on a device.
tap to reveal
What does encryption do?
Scrambles data so it is unreadable to anyone without the correct decryption key, protecting it in transit.
tap to reveal
Name three common prevention methods against network attacks.
Firewalls, encryption, strong passwords/user access levels (also biometric authentication and regular software patches).
tap to reveal

Ethical, legal & environmental issues

Why this topic matters

Computing has huge impact on individuals, society and the environment. AQA expects you to discuss issues sensibly, giving both benefits and drawbacks, and to know the key laws that regulate computer use in the UK.

Ethical and legal issues

  • Ethical issues are about right and wrong even when something is legal, eg using AI to generate fake images, monitoring employees, or web scraping without permission.
  • Legal issues are about breaking actual laws.
  • Key UK laws to name exactly:
  • The Data Protection Act 2018 (and UK GDPR) controls how personal data is collected, stored and used. Data must be accurate, kept no longer than necessary, and kept secure.
  • The Computer Misuse Act 1990 makes it illegal to gain unauthorised access to computer systems or data, to gain unauthorised access with intent to commit further crime, and to make unauthorised modifications to data (this covers spreading malware).
  • The Copyright, Designs and Patents Act 1988 protects original work such as software, music and images from being copied or distributed without permission.
  • The Regulation of Investigatory Powers Act 2000 (RIPA) governs surveillance and interception of communications by public bodies.

Common mistakes

  • Mixing up the three sections of the Computer Misuse Act 1990 — learn all three offences separately.
  • Saying 'hacking is illegal' without naming the Act.
  • Forgetting that copying software counts as breaking copyright law, not just copying music or films.

Environmental issues

  • E-waste: old devices contain toxic materials (lead, mercury) and need proper recycling, not landfill.
  • Energy use: data centres consume large amounts of electricity and water for cooling; this drives interest in energy-efficient hardware and renewable power.
  • Manufacturing: mining rare earth metals for chips and batteries damages ecosystems and often happens in developing countries.
  • Planned obsolescence, where devices are designed to become outdated quickly, increases waste. Some manufacturers are moving to modular, repairable designs to reduce this.

Cultural and social issues

  • The digital divide: unequal access to technology and the internet based on income, location or age can exclude people from services, education and jobs.
  • Automation and AI can remove jobs but also create new roles; exam answers should weigh both sides.
  • Online communication changes culture (eg social media, remote working) with both positive (connection) and negative (cyberbullying, misinformation) effects.

Exam tip

When asked to 'discuss', always give a balanced answer with at least one benefit and one drawback, and use precise legal or technical terms rather than vague statements.

  • The Data Protection Act 2018 and UK GDPR control how personal data must be collected, stored and used.
  • The Computer Misuse Act 1990 covers three offences: unauthorised access, unauthorised access with intent to commit further crime, and unauthorised modification of data.
  • The Copyright, Designs and Patents Act 1988 makes it illegal to copy or distribute software, music or images without permission.
  • RIPA (Regulation of Investigatory Powers Act 2000) governs how public bodies can carry out surveillance and intercept communications.
  • E-waste contains toxic materials like lead and mercury and must be recycled properly, not sent to landfill.
  • Data centres use large amounts of electricity and water, raising environmental concerns about energy-efficient computing.
  • Mining rare earth metals for electronics damages ecosystems and is linked to environmental and ethical concerns in developing countries.
  • The digital divide describes unequal access to technology and the internet, often linked to income, location or age.
  • Planned obsolescence means products are designed to become outdated quickly, increasing e-waste.
  • Automation and AI can both remove and create jobs, so exam answers should always be balanced.
  • Spreading malware or viruses counts as unauthorised modification of data under the Computer Misuse Act 1990.
  • Exam 'discuss' questions require both a benefit and a drawback to score full marks.
What does the Data Protection Act 2018 (with UK GDPR) control?
How personal data is collected, stored and used; it must be accurate, kept no longer than necessary, and kept secure.
tap to reveal
Name the three offences under the Computer Misuse Act 1990.
Unauthorised access, unauthorised access with intent to commit further crime, and unauthorised modification of data.
tap to reveal
Which law protects software, music and images from being copied without permission?
The Copyright, Designs and Patents Act 1988.
tap to reveal
What does RIPA (2000) regulate?
Surveillance and interception of communications by public bodies.
tap to reveal
Under which law is spreading malware illegal?
The Computer Misuse Act 1990, as unauthorised modification of data.
tap to reveal
Why is e-waste an environmental problem?
It contains toxic materials like lead and mercury and pollutes if sent to landfill instead of being recycled.
tap to reveal
Why do data centres raise environmental concerns?
They use huge amounts of electricity and water for power and cooling.
tap to reveal
What is planned obsolescence?
Designing products to become outdated or fail quickly, increasing e-waste and consumer spending.
tap to reveal
What is the digital divide?
Unequal access to technology and the internet, often due to income, location or age.
tap to reveal
Give one benefit and one drawback of automation for jobs.
Benefit: increases efficiency and creates new tech roles. Drawback: removes some traditional jobs.
tap to reveal
What environmental issue is linked to manufacturing computer chips?
Mining rare earth metals damages ecosystems and raises ethical concerns about working conditions.
tap to reveal
What is the difference between an ethical issue and a legal issue in computing?
Ethical issues are about right and wrong even if legal; legal issues involve breaking an actual law.
tap to reveal
How should you answer a 'discuss' question in the exam?
Give a balanced answer with at least one benefit and one drawback, using precise legal or technical terms.
tap to reveal