CREST Practitioner Security Analyst (CPSA) Practice 2025 - Free CPSA Practice Questions and Study Guide

The Computer Misuse Act 1990 was established to provide a legal framework for prosecuting individuals involved in unauthorized computer use and cyber activities. The Act specifically targets actions that compromise the security and integrity of computer systems.

Deliberately planting viruses falls under the category of causing unauthorized modification of computer material, which is a direct violation of the Act. Such malicious behaviors can harm data, disrupt services, and compromise systems, making them illegal.

Hacking without consent is also a key focus of the Act, which criminalizes accessing computer systems or files without permission. This includes unauthorized access and any actions taken on systems without the owner's consent.

Both of these actions—planting viruses and hacking without consent—are explicitly illegal under the Computer Misuse Act 1990. This is why the correct answer encompasses both of these points, as it accurately reflects the scope of the Act in addressing various forms of computer-related offenses.