Layers of Defense: Updates, Built-In Protection and Firewalls

Section 5A showed how devices are attacked. Section 5B turns to defense, starting with the chapter that gave this unit its opening quotation. Dr. Al-Doori's central idea is that no single protection is powerful on its own, but several used together shrink your risk to a very small level. Security professionals call this defense in depth.

What you'll be able to do

Build a layered defense on your own devices and explain why no single layer is enough. By the end of this lesson you will be able to:

• name the layers that protect a personal device and what each one catches;
• turn on automatic updates and check that your built-in protection and firewall are working;
• recognize when a device has reached the end of its support and needs replacing.

Why Layers?

Think of a home. A good lock keeps most people out, but a window might be left open. An alarm notices someone who gets in anyway. Insurance helps you recover if the worst happens. None of these is perfect, but a burglar has to beat all of them.

Your devices work the same way. Updates close known weaknesses, but a brand-new one may not be fixed yet. Antivirus catches many threats, but not every one. Backups don't stop an attack, but they let you recover. Each layer covers some of the gaps in the others.

The Five Layers, Updated for 2026

Dr. Al-Doori describes five layers. Here they are, with what current guidance adds to each.

1. Back up your data. Copies of your files, kept away from your computer, make even a serious infection survivable. Lesson 5.5 updates this layer with the 3-2-1 rule and an offline copy.

2. Use a firewall. A firewall is a gatekeeper that checks connections going in and out of your device and blocks ones that don't belong. Windows and macOS both include one. On Windows, check that it is on in the Windows Security app; on a Mac, open System Settings, then Network, then Firewall, and turn it on if it is off.

3. Install updates. Updates, also called patches, fix weaknesses that criminals have discovered. Dr. Al-Doori calls unpatched software one of the most common ways in, and current data agrees: Verizon's 2026 Data Breach Investigations Report found that exploiting software weaknesses was the most common first step in the breaches it studied, at about 31%. Microsoft still releases its regular security updates for Windows on the second Tuesday of each month. Today's advice from CISA, the US Federal Trade Commission (FTC) and the NCSC is to go one step further than "install promptly": turn on automatic updates for your operating system, apps, browser and router, so you never have to remember.

There is one catch. Updates only help while the maker still produces them. When a product reaches end of life (also called end of support), it stops receiving security fixes, and every weakness discovered after that date stays open. A device that is out of support should be upgraded or replaced.

4. Use antivirus. Antivirus software looks for malware using signatures and behavior, as you saw in Lesson 5.1. Windows includes Microsoft Defender Antivirus, macOS includes XProtect, and Android phones include Google Play Protect. The UK's National Cyber Security Centre (NCSC) says that making sure your computer's built-in antivirus is switched on makes you safer, and warns that a separate product may not work well alongside it. Your task is to make sure it is switched on and updating.

5. Educate yourself. Dr. Al-Doori calls the user the most important layer, because no software can stop you from choosing to run a fake installer or paste a command. That is still true, and this whole course is part of that layer.

A layer to add: protect your accounts. Many attacks today don't touch your device at all; they simply use a stolen password. That is why CISA's Secure Our World campaign and the NCSC's Cyber Aware advice put strong, unique passwords (stored in a password manager) and multi-factor authentication alongside updates as core habits. Unit IV covered these in depth; here, just remember that account protection is now part of the stack.

Try It: A Ten-Minute Device Check

Do this on your own laptop or computer, privately. You don't need to record or share anything except, if asked, a confirmation that you finished.

1. Automatic updates. Open your settings and search for "update". Make sure automatic updates are on for the system. Then check your browser and your app store for the same option.
2. Pending updates. Install anything waiting, and restart if asked. Many updates only take effect after a restart.
3. Still supported? Look up your operating system's name and version in settings, and check on the maker's website that it still receives security updates.
4. Built-in protection. Open your security settings and confirm that virus and threat protection is on and up to date.
5. Firewall. In the same area, confirm the firewall is on.
6. Tidy up. Uninstall apps and browser extensions you no longer use. Each one is something that needs updating.
7. Accounts. Note privately which of your important accounts still lack multi-factor authentication, and plan to fix them using Unit IV.

Real-World Example

On 14 October 2025, Microsoft ended support for Windows 10. Computers running it still turn on and work, but they no longer receive the free security updates that close newly discovered weaknesses. Microsoft offers home users a paid Extended Security Updates option that runs until 12 October 2027, as a bridge while they upgrade or replace their machines.

For anyone still using Windows 10, this is the "updates" layer quietly disappearing. Everything looks normal, which is exactly why end-of-life dates are easy to miss. The fix is to check whether the computer can move to a supported version, use the paid bridge for a limited time if needed, or plan a replacement.

From the Book to 2026

What the book teaches. Chapter 16 sets out five layers: backups, a firewall, prompt patching, updated antivirus and an educated user, with the user as the most important layer. Together they make malware risk very small, though never zero.

Why it made sense. Defense in depth remains a basic principle of security, and each of the five layers still matters.

What has changed. Security guidance has evolved since the original text. Modern platforms have changed this risk: firewalls and antivirus are now built in, so the main job is to check that they are switched on. Updates can now install themselves, so the advice has moved from "install patches promptly" to "turn on automatic updates". Devices now have published end-of-support dates, after which they must be replaced or upgraded. And account protection, through unique passwords and multi-factor authentication, has joined the list.

What to do now. Current guidance now recommends automatic updates for everything, built-in antivirus and firewall switched on, replacing unsupported systems, backups with an offline copy, and strong account protection, alongside the alert user the book describes.

Watch: Update Software for Safety

This two-minute video from CISA, the US national cyber agency, focuses on the single layer that people most often postpone. It is short, practical and from a primary authority.

As you watch, notice:

• the very familiar moment of choosing "Remind me later" on an update alert, and why the video asks you to think twice;
• the advice to install all updates, and especially those for web browsers and antivirus software;
• where it suggests looking for the automatic-updates option: in your device settings, under Software or Security, or by searching for "automatic updates".

The video reinforces what you just read — the lesson is complete without it.

What Would You Do?

Your aunt's laptop runs Windows 10. It works perfectly for email and video calls, and she says: "I have antivirus, so I don't need to change anything." What would you tell her?

Knowledge Check

Key Takeaways

• No single layer is enough; together, layers make an attacker's job very hard. This is defense in depth.
• Turn on automatic updates for your system, apps, browser and router, and restart when asked.
• When a product reaches end of support, as Windows 10 did on 14 October 2025, upgrade or replace it.
• Built-in antivirus and firewalls are a strong starting point; make sure they are switched on and updating.
• Add account protection to the stack: unique passwords and multi-factor authentication.

Sources

• CISA — Secure Our World
• UK National Cyber Security Centre — What is an antivirus product? Do I need one?
• Microsoft Support — Stay protected with the Windows Security app
• Apple Platform Security — Protecting against malware in macOS
• Google Play Help — Use Google Play Protect to help keep your apps safe & your data private
• Apple Support — Change Firewall settings on Mac
• UK National Cyber Security Centre — Cyber Aware
• Microsoft — End of support for Windows 10
• Microsoft Learn — Update release cycle for Windows clients
• Verizon Business — 2026 Data Breach Investigations Report, Executive Summary (data)
• Dr. Tahseen Al-Doori — Cyber Security Essentials, Chapter 16