Cybersecurity Threats

Overview

This lesson supports students in developing a critical understanding of the varied cyber security threats they may encounter or hear about. Aligning with the National Curriculum for England (Computing Programme of Study for Key Stage 4), it focuses on safeguarding personal and organisational data, understanding the ethical and legal implications, and developing safe and responsible use of technology.

---

National Curriculum Links

• Computing Programme of Study (KS4):

  • 1d: Understand computer networks, including the internet; how they can provide multiple services, such as the World Wide Web; and the opportunities they offer for communication and collaboration.
  • 2a: Understand and apply the fundamental principles and concepts of computer science, including abstraction, logic, algorithms, and data representation.
  • 3a: Understand how instructions are executed within hardware and software to create programs and applications.
  • 4b: Understand the risks associated with online activities including cyber security threats, and methods to mitigate these risks.

• English KS4:
  Develop clear oral and written communication skills through explaining complex topics such as cyber threats.

---

Learning Objectives

By the end of the lesson, students will be able to:

1. Identify common cyber security threats including social engineering, malware, pharming, weak passwords, misconfigured access rights, removable media threats, and outdated software.
2. Explain how these threats operate and why they pose risks to individuals and organisations.
3. Evaluate the potential impact of these threats on data confidentiality, integrity, and availability.
4. Demonstrate awareness of preventative practices aligned to maintain security.

---

Resources Needed

• Whiteboard and markers
• Projector and laptop (for presentation)
• Pre-prepared slides covering each cyber threat
• Cyber threat scenario cards (physical or digital)
• Student notebooks or devices for note-taking
• A password strength checker tool (offline or web-based, shown by teacher)
• Printable worksheet for reflection and assessment

---

Lesson Structure (90 minutes)

Starter (10 minutes)

• Activity: Quick brainstorming
  • Prompt students to name any cyber security threats they already know.
  • Write responses on the board categorized into “technical” vs “human/social” threats.
  • Briefly set out lesson objectives and explain the importance of understanding these threats.

---

Introduction to Threats (20 minutes)

• Teacher-led presentation:

  • Cover definitions and examples of:
    • Social Engineering: phishing, pretexting, baiting, tailgating
    • Malware: viruses, worms, Trojans, ransomware
    • Pharming: redirection to fake websites
    • Weak Passwords: common passwords, dictionary attacks
    • Misconfigured Access Rights: excessive user privileges
    • Removable Media: USB-based malware infection
    • Outdated Software: vulnerabilities not patched by updates

• Use real-life UK-based case study examples or recent news snippets where appropriate to enhance relevance.

---

Interactive Group Activity (30 minutes)

• Scenario Analysis
  • Provide the student with various scenario cards describing cyber threats in different contexts (e.g., a phishing email received by a bank employee; removable media found on company premises).
  • Student categorises each scenario by threat type and writes a brief explanation of the threat and its risks.
  • Challenge: For each, propose one way to mitigate or prevent the threat.
  • Discuss answers with teacher facilitating to clarify misconceptions and deepen understanding.

---

Practical Password Exercise (10 minutes)

• Using a password strength checker introduced by the teacher, the student will:
  • Create three example passwords of varying strength.
  • Test and record the strength feedback.
  • Reflect in notes on how to improve password security.

---

Assessment and Reflection (15 minutes)

• Written worksheet:

  • Short answer questions prompting explanation of each threat and its impact.
  • A question on why updating software is crucial for security.
  • Opinion question: “Which cyber security threat do you think is most dangerous and why?”

• Self-assessment:

  • Student rates their confidence understanding different threats on a scale of 1-5.
  • Set personal target for improving awareness in next lessons.

---

Plenary (5 minutes)

• Recap key learning points verbally.
• Reflect on why cyber security knowledge is essential beyond the classroom, in daily life and future careers, aligned to broader computing literacy aims of the National Curriculum.

---

Differentiation & Personalisation

• Scaffold scenario complexity to the student’s prior knowledge.
• Use multimodal inputs (visuals, text, discussion) to support varied learning preferences.
• Incorporate real-time Q&A for personalised clarification and extension.

---

Extension/Homework Suggestion

• Research a recent UK cyber attack from a credible source and prepare a one-page summary explaining the threat involved and how it was mitigated or exploited.

---

Teacher Reflection

• Evaluate understanding through responses and ability to explain threats in their own words.
• Reflect on engagement with scenarios – was the student able to make relevant connections?
• Adapt upcoming lessons to address any clearly observed gaps, especially relating to practical mitigation strategies.

---

This lesson plan offers an engaging, National Curriculum aligned approach to developing critical knowledge and skills around cyber security threats at GCSE level, encouraging analytical thinking and practical awareness.