Skip to content
Study Hall
Lesson 3 of 5Leadership, Projects and Technology
Unit 4 · Lesson 3 of 5

Digital Tools and Data Security

Digital tools help even the smallest business plan, sell and communicate, but each has costs, limits and risks, so a business should choose tools to fit the task and protect its accounts and its customers' personal information.

6 min read1 quick check9 practice questionsInteractiveAsk AI about this →

Key things to remember

  1. 1Weigh every tool on benefits, limitations, costs (subscription, transaction fees, equipment, learning time) and risks.
  2. 2Security basics: strong unique passwords with a password manager, two-factor authentication, updates, backups.
  3. 3Phishing signs: urgency, a mismatched sender or link, requests for passwords, codes or money.
  4. 4Protect personal information: consent, collect only what you need, store it securely, use it only for the stated purpose (the idea behind Canada's privacy laws such as PIPEDA).
  5. 5Decision matrix: weighted score , with weights adding to 100%.

A few years ago, starting a small business meant renting a shop, printing flyers and keeping records on paper. Today a student team can design a logo on a free app, build an online store in an afternoon, take card payments on a phone and share a budget spreadsheet with every member at once. Digital technology has made business cheaper and faster to start. But every tool comes with a cost, something it cannot do well, and a way it can go wrong. One stolen password can empty an account or leak every customer's email address. This lesson surveys the tools, weighs their benefits and risks, shows how to stay safe online, and gives you a method for choosing the right tool for a job.

A Small Business's Digital Toolbox

Tool typeWhat it does for a businessExample use in a student venture
SpreadsheetCalculates and organizes numbers in rows and columnsBudget, inventory count, sales tracker
Word processorCreates written documentsProject charter, letters to sponsors, meeting notes
Presentation and design appsCreates slides, posters, logos and social media imagesPitch deck, price signs, a logo
Website builders and e-commerce platformsBuild a website or online store without codingAn online order page for custom phone cases
Social mediaReaches customers and builds a followingAnnouncing the pop-up shop date and showing products
Point-of-sale (POS) and payment appsRecord sales and accept card or tap paymentsTaking card payments at the shop with a phone and card reader
Cloud storage and collaborationStores files online so a team can edit them togetherA shared folder with the schedule, budget and posters
AI assistantsGenerate drafts, summaries, ideas and images from a typed requestBrainstorming product names or a first draft of a poster slogan
Common digital tools and what they do for a small venture.

Emerging technologies are newer tools that are changing quickly and are not yet used everywhere, such as AI assistants, tap-to-pay on an ordinary phone, and tools that let a business automate routine messages. They can give an early advantage, but they are also less tested, and the rules around them are still developing.

Benefits, Limitations, Costs and Risks

ABenefits
  • Saves time by automating calculations and repeated tasks
  • Reaches more customers, including online
  • Lets a team work together from anywhere
  • Makes records more accurate and easier to search
  • Many tools are free or cheap to start
BLimitations and risks
  • Needs a device, power and an internet connection
  • Takes time to learn; errors in a formula spread everywhere
  • Accounts can be hacked; data can be lost or leaked
  • AI tools can produce confident but wrong answers
  • Free plans may limit features or use your data

Costs are not always obvious. A tool may be free to download but charge a monthly subscription for useful features. Payment apps usually charge a transaction fee: a small percentage of each card sale, sometimes plus a few cents per sale. A card reader is a one-time equipment cost. And every tool has a time cost: the hours it takes to learn and set up. When comparing tools, add up all of these, not just the sticker price.

Check what the AI tells you
AI assistants can write a useful first draft, but they can also make up facts, prices or rules that sound completely believable. Treat their output as a draft to check, never as a final answer, and never paste customers' personal information into them.

Online Safety and Data Security

Data security means protecting information from being stolen, changed or lost. For a business, that means protecting its own accounts (email, bank, payment app, social media) and the personal information of its customers. Personal information is anything that identifies a person, such as a name, email address, phone number, home address or payment details.

Six habits that keep a small business safe onlineStrong, uniquepasswordsLong passphrases,different for everyaccountA password managerremembers them for youTwo-factorauthenticationA code from an app ortext, as well as thepasswordTurn it on for email,banking, social mediaKeep everything updatedInstall updates forphones, laptops, apps andwebsite plug-insUpdates fix security holesSpot phishingUrgent or threatening toneSender address or linkdoesn’t matchAsks for passwords, codesor gift cardsBack up your filesKeep copies in two places,one off-site or in thecloudTest that you can restorethemProtect customer dataCollect only what you needAsk for consent andexplain whyStore it securely; deleteit when doneIn Canada, privacy law (PIPEDA) requires businesses to get consent and protect the personal information they collect.
Fig 1Six habits that protect a business and its customers online.
  • Strong, unique passwords: long (a passphrase of several random words works well) and different for every account, so one leak does not unlock everything. A password manager stores them all safely so you only remember one.
  • Two-factor authentication (2FA): a second check, such as a code sent to your phone or an authenticator app, so a stolen password alone is not enough to get in.
  • Updates: install updates for devices and apps promptly. Many updates fix security holes that attackers already know about.
  • Backups: keep a second copy of important files in a separate place, so a lost phone or a deleted folder is not a disaster.
  • Phishing awareness: phishing is a fake message designed to trick you into giving away a password, money or personal information.
  • Protect customer data: collect only what you need, tell customers why you are collecting it, store it securely and limit who can see it.
Signs of a phishing message
Pressure to act right now ("your account will be closed in 24 hours"); a sender address that does not quite match the real company; a link whose real address is different from what it claims; a request for a password, a code or payment; spelling mistakes and a generic greeting. When in doubt, do not click. Go to the real website or app yourself and check there.

Canada has privacy laws about personal information. The federal law, PIPEDA (the Personal Information Protection and Electronic Documents Act), applies to private-sector organizations that collect, use or share personal information in the course of commercial activities, and some provinces have similar laws of their own. The core ideas are simple and good practice even for a club: get people's consent, collect only what you need for a stated purpose, keep it safe, and do not use it for something else without asking.

Quick checkTry it before you read on
1
The club's sign-up form for a raffle asks for name, email, home address and date of birth. Only an email is needed to contact the winner. What should the club do?
VideoFrom the Government of Canada's Get Cyber Safe campaign: how phishing messages imitate trusted organizations and how to avoid being fooled.Watch on YouTube

Choosing the Right Tool for the Job

There is rarely one perfect tool. A good way to choose is a decision matrix: list the options, choose the criteria that matter for this task, give each criterion a weight (how much it matters, adding to 100%), score each option on each criterion from 1 (poor) to 5 (excellent), then multiply each score by its weight and add. The highest total is the best fit for your priorities. When two totals are close, look at what each does badly; sometimes the best answer is to use both.

Loading interactive…
Compare three ways to take payments at the pop-up shop. Change the weights to see whether the winner changes.

Worked examples

Reveal one step at a time and try to beat it to the next line.

Example 1
Choose how to take payments at the pop-up shop. Options: a cash box, a phone payment app with a card reader, or an online order form paid by e-transfer. Criteria and weights: cost 30%, ease of use 25%, speed at the table 25%, security 20%. Scores (1 to 5): cash box 5, 5, 3, 2; card reader 3, 4, 5, 4; online form 5, 3, 2, 4.
Example 2
The club treasurer receives an email: "URGENT: Your payment account is locked. Verify within 2 hours or lose your funds. Click here and enter your password and the 6-digit code we texted you." The sender is support@paymnt-help.co. Analyse it.
Example 3
A payment app charges a 2.5% fee on each card sale (a made-up rate for this example). The shop expects $400 of card sales. What will the fees cost, and what does the club actually receive?

Where marks get lost

  • Using the same password for the club's email, payment app and social media, so one leak unlocks all three.
  • Comparing tools only by their price tag and forgetting transaction fees, subscriptions and the time it takes to learn them.
  • Clicking a link in an urgent email instead of opening the real app or website directly to check.
  • Collecting extra personal information "just in case" and storing it in a shared folder anyone can open.
  • Trusting an AI assistant's facts or figures without checking them against a reliable source.

Flashcards 8

Emerging technology
Two-factor authentication (2FA)
Password manager
Phishing
+ 4 more

Practice

1
Match each task to the most suitable tool.
Tracking the budget and calculating totals
Taking tap payments at the shop
Letting the whole team edit the schedule at once
Designing a poster and a logo
2
Why does two-factor authentication make an account much safer?
3
Which is the strongest password choice for the club's payment account?
4
Using a decision matrix with weights cost 40%, ease 35% and features 25%, an app scores 4, 3 and 5. What is its weighted score? Give your answer to two decimal places.
5
A payment app charges a 3% fee on card sales (a made-up rate). A club takes $650 in card sales. How much is the fee, to the nearest cent?
$
6
Which of these is the strongest sign that a message is phishing?
7
What is the name of Canada's federal privacy law for private-sector organizations' commercial activities? (Give the short form.)
8
Which is a limitation of relying on an AI assistant to write a business plan's market research section?
9
Put the steps of choosing a tool with a decision matrix in order.
  1. 1Compare totals and check each option's weak spots
  2. 2Multiply scores by weights and add
  3. 3Score each option on each criterion
  4. 4List the options
  5. 5Choose criteria and give each a weight

Spot a mistake on this page? Let us know