Cyber Security Threats

Overview

This 60-minute lesson is the second in a six-lesson unit titled "Cyber Security Essentials" for GCSE students (ages 14-16). The lesson aims to build students’ understanding of key cyber security threats aligned with the National Curriculum for England’s Computing programme of study, focusing on safe and responsible use of technology and recognising risks.

---

National Curriculum Links

• Key Stage 4 Computing Programme of Study
  • Understand risks posed by cyber security threats
  • Develop safe practices to protect personal and organisational data
  • Recognise social engineering tactics and forms of malware
  • Evaluate the impact of security breaches
• Personal, Social, Health and Economic Education (PSHE): online safety, recognising cyberbullying and digital risks

---

Learning Objectives

By the end of this lesson, students will be able to:

1. Define and explain common cyber security threats: social engineering, malware, and weak passwords.
2. Identify real-world examples of these threats and their consequences for individuals and organisations.
3. Analyse how these threats can be mitigated through awareness and preventative measures.

---

Resources Needed

• Interactive whiteboard or projector
• Pre-prepared slides highlighting definitions, case studies, and examples
• Printed or digital student worksheets (scenarios and quiz)
• Devices with internet access for a brief research activity (optional)
• Sticky notes or index cards
• Cyber security threat cards (for group activity)

---

Lesson Structure

1. Starter Activity (10 minutes)

• Engage with Prior Knowledge: Ask students to list any cyber security threats they have heard of or experienced personally (e.g. phishing emails, weak passwords). Write responses on the board.
• Quick Think-Pair-Share: Students discuss in pairs why these threats might be dangerous. Share ideas with the class. This draws on prior knowledge to activate engagement and sets the context.

2. Introduction to Cyber Security Threats (15 minutes)

• Direct Teaching: Present clear definitions on slides of:
  • Social Engineering: Manipulating people to divulge confidential info (e.g. phishing, pretexting)
  • Malware: Malicious software types including viruses, ransomware, trojans, spyware
  • Weak Passwords: How easy-to-guess passwords enable unauthorised access
• Highlight Real-World Examples: Discuss notable incidents such as recent phishing attacks on large companies or the NHS WannaCry ransomware attack. Emphasise real consequences on data security and personal privacy.

3. Group Activity: Cyber Threat Sorting (15 minutes)

• Divide students into groups of 5-6.
• Give each group a set of “Cyber Threat Cards” describing different attack scenarios (e.g. fake emails requesting login info, a USB stick with malware, password ‘1234’).
• Groups classify the scenarios under ‘Social Engineering’, ‘Malware’ or ‘Weak Passwords’.
• After classification, groups discuss and write the possible consequences of each threat and a key prevention strategy on sticky notes.
• Groups stick their notes on the board or designated area, then share their findings briefly.

4. Class Discussion and Implications (10 minutes)

• Facilitate a whole-class discussion on how people and organisations suffer when these threats are successful: data loss, identity theft, financial loss, reputational damage.
• Question students on the importance of vigilance and personal responsibility in cyber security. Emphasise ethical behaviour and safe digital citizenship.

5. Assessment: Quick Quiz and Reflection (5 minutes)

• Hand out a short quiz with multiple choice and true/false questions to assess understanding of key terms and examples.
• Ask students to write one new thing they learned and one question they still have about cyber threats on an index card or digital form for teacher review.

6. Plenary and Homework (5 minutes)

• Recap main points with a quick quiz game using interactive polling tools (e.g. Mentimeter or Kahoot! if tech available) or verbally.
• Set homework: Students to research a recent cyber security breach news story and summarise the threats involved and lessons learned to share in lesson 3.

---

Differentiation and Inclusion

• Provide templates with sentence starters and vocabulary lists for lower ability students.
• Encourage higher ability students to critique the effectiveness of threat prevention methods during the group activity.
• Use multimedia and visuals to support EAL learners.

---

Extension Ideas

• Invite a guest speaker from a local cyber security firm or police cybercrime unit for a future lesson or virtual Q&A.
• Run a simulated phishing email activity to demonstrate social engineering risks safely.

---

Reflection and Teacher Notes

• Monitor group discussions to correct misconceptions in real-time.
• Use student questions from the exit tickets to tailor follow-up lessons.
• Emphasise the relevance of cyber security in everyday life and future career opportunities, boosting engagement and motivation.

---

By the end of this lesson, students will not only understand key cyber security threats but appreciate the real impact these have and be more prepared to recognise and respond to risks safely and responsibly.