Cyber Risk in Banking

Overview

This 180-minute lesson launches a 5-month self-paced study journey connecting Harvard's CS50 course content with Security+ and ISC2 CC certification objectives, grounded in the student's fraud investigation and banking background. The lesson builds a personalized monthly study framework using cyber risk governance as the unifying theme.

Learning Intentions

• Students will understand how foundational computer science concepts connect to cybersecurity certification exam objectives.
• Students will identify how banking and fraud investigation experience maps directly to Technology Risk and Cyber Risk Governance domains.
• Students will create a structured 5-month study plan aligned to CS50 modules, Security+, and ISC2 CC exam objectives.
• Students will distinguish key technical terminology using real-world banking fraud scenarios as anchors.

Success Criteria

• I can explain core CS50 concepts (algorithms, data, security) in plain language using banking examples.
• I can match at least five Security+ and ISC2 CC exam domains to my fraud investigation experience.
• I can produce a monthly study guide template with goals, resources, and exam topic checkpoints.
• I can define technical cybersecurity terms at a clear, accessible level and apply them to real workplace situations.

Curriculum Links

• Cambridge A Level Information Technology: system security, data integrity, and threat management
• Cambridge A Level Computer Science: fundamentals of data representation, networking, and security protocols
• Cambridge AS Level Technology in Society: ethical, legal, and organizational impacts of digital systems
• Cambridge IGCSE ICT: security threats, authentication methods, and the role of technology in organizations

Lesson Structure (180 minutes)

0–15 min | Hook and Experience Mapping Open by asking: "What cyber threats did you see most in banking fraud work?" The student brainstorms a list of real incidents (phishing, account takeover, insider fraud) and maps these onto a blank "Cyber Risk Wheel" handout with six sections: Confidentiality, Integrity, Availability, Authentication, Authorization, Non-repudiation. This activates prior knowledge and immediately connects lived experience to the CIA Triad — a core concept in both Security+ and ISC2 CC.

15–45 min | CS50 Module 1 Overview and Guided Notes Work through a guided notes template for CS50 Week 0–1 topics: computational thinking, binary, algorithms, and abstraction. For each concept, the student writes a middle-school-level definition, then a banking example (e.g., "Algorithm = the step-by-step rule a fraud detection system uses to flag suspicious transactions"). Complete the first column of the Monthly Study Guide template for Month 1.

45–75 min | Exam Domain Crosswalk Activity Using a printed crosswalk worksheet, the student matches CS50 Week 1–2 topics to Security+ domains (Threats, Attacks and Vulnerabilities; Architecture and Design) and ISC2 CC domains (Security Principles; Business Continuity). For each match, write one sentence explaining the connection using a real fraud or banking scenario. This worksheet becomes a running reference document updated each month.

75–105 min | Monthly Study Plan Build (Month 1) Using the 5-Month Study Calendar template, map out Month 1 in detail. Assign CS50 weeks, corresponding Security+ chapters from Mike Chapple's "CompTIA Security+ Study Guide," and ISC2 CC chapters from the official "Certified in Cybersecurity Self-Paced Course" materials. Add exam objective codes from the official Security+ exam objectives document and ISC2 CC exam outline to each weekly block. Identify two homework tasks per week and one activity or worksheet.

105–135 min | Vocabulary and Terminology Builder Complete a two-column Terminology Tracker for 20 foundational terms drawn from CS50 Week 1, Security+ Domain 1, and ISC2 CC Domain 1. Column 1: plain middle-school definition. Column 2: technical name and real banking example. Sample terms include: malware, firewall, encryption, authentication, social engineering, risk appetite, threat actor, vulnerability, access control, and data breach. This tracker is a living document added to monthly.

135–165 min | Self-Assessment and Homework Prep The student completes a 10-question self-check quiz drawn from ISC2 CC practice questions and CS50 Problem Set 1 concepts. Review answers, identify weak areas, and flag those topics in the Monthly Study Guide for extra review. Assign homework: watch CS50 Lecture 1 in full, complete the CS50 Week 1 problem set in the edX platform, and read Chapter 1 of the Security+ study guide.

165–180 min | Wrap-Up and Month 2 Preview Review the completed Month 1 plan, terminology tracker, and crosswalk worksheet. Preview Month 2 themes: networking fundamentals, cryptography basics (CS50 Week 2 and Security+ Domain 3). Set a 5-month milestone goal — for example, sitting for the ISC2 CC exam by Month 4 and Security+ by Month 6.

Resources

• Harvard CS50 edX course platform (student's enrolled course)
• Mike Chapple, "CompTIA Security+ Study Guide" (Sybex, current edition)
• ISC2 Certified in Cybersecurity Self-Paced Course and official exam outline
• CompTIA Security+ Exam Objectives document (free PDF from CompTIA website)
• Blank "Cyber Risk Wheel" handout (teacher-created)
• Domain Crosswalk Worksheet (teacher-created)
• 5-Month Study Calendar Template (printable grid format)
• Terminology Tracker (two-column table, 20 rows per month)
• 10-question self-check quiz (ISC2 CC and CS50 Week 1 content)
• Notebook or digital document for guided notes

Assessment

• Completed Month 1 Study Plan is reviewed for alignment between CS50 topics, Security+ domains, and ISC2 CC objectives.
• Terminology Tracker is checked for accuracy of definitions and quality of real-world banking connections.
• Self-check quiz score identifies specific exam domains needing additional focus in Month 2 planning.

Differentiation

• Support: Pre-filled crosswalk worksheet with some domains already matched; sentence starters provided for banking connections.
• Extension: Research a real banking data breach case study and present findings mapped to Security+ and ISC2 CC domains.
• EAL/SEN: All technical terms include a plain-language definition before the formal terminology is introduced; visual concept maps available for the CIA Triad and exam domain structures.
• Pacing: As a one-student course, all timings are flexible; if guided notes run long, shift the quiz to homework.