Cybersecurity Basics
Protect accounts, devices, information, families, and small organizations from common threats.
Think Like a Defender
Learning objective
By the end of this lesson, the learner will be able to explain think like a defender, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Protect confidentiality, integrity, and availability by understanding assets, threats, vulnerabilities, and controls.
Instructor teaching guidance
Begin by establishing what the learner already knows about think like a defender. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
List your five most important digital assets.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
Security begins with knowing what must be protected.
Knowledge check
Ask the learner to explain why “Security begins with knowing what must be protected.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
Passwords and Passkeys
Learning objective
By the end of this lesson, the learner will be able to explain passwords and passkeys, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Use unique passwords, a password manager, MFA, and passkeys where available.
Instructor teaching guidance
Begin by establishing what the learner already knows about passwords and passkeys. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Audit three important accounts for reused passwords and MFA.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
One compromised password should not unlock everything.
Knowledge check
Ask the learner to explain why “One compromised password should not unlock everything.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
Phishing and Social Engineering
Learning objective
By the end of this lesson, the learner will be able to explain phishing and social engineering, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Attackers exploit urgency, authority, fear, curiosity, and trust.
Instructor teaching guidance
Begin by establishing what the learner already knows about phishing and social engineering. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Analyze a suspicious message before clicking anything.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
Verify through a separate trusted channel.
Knowledge check
Ask the learner to explain why “Verify through a separate trusted channel.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
Device Security
Learning objective
By the end of this lesson, the learner will be able to explain device security, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Updates, screen locks, encryption, backups, and trusted applications reduce risk.
Instructor teaching guidance
Begin by establishing what the learner already knows about device security. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Review the security settings on one phone or computer.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
Patching closes known doors.
Knowledge check
Ask the learner to explain why “Patching closes known doors.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
Safe Networks and Browsing
Learning objective
By the end of this lesson, the learner will be able to explain safe networks and browsing, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Use secure connections, recognize deceptive domains, and limit exposure on public networks.
Instructor teaching guidance
Begin by establishing what the learner already knows about safe networks and browsing. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Inspect the full address of three websites you use.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
The lock icon does not prove the site is honest.
Knowledge check
Ask the learner to explain why “The lock icon does not prove the site is honest.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
Protecting Personal and Business Data
Learning objective
By the end of this lesson, the learner will be able to explain protecting personal and business data, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Classify information and share the minimum necessary through approved channels.
Instructor teaching guidance
Begin by establishing what the learner already knows about protecting personal and business data. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Sort example information into public, internal, confidential, and restricted.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
Data protection follows the sensitivity of the information.
Knowledge check
Ask the learner to explain why “Data protection follows the sensitivity of the information.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
Responding to an Incident
Learning objective
By the end of this lesson, the learner will be able to explain responding to an incident, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
Contain, preserve evidence, reset access, notify stakeholders, recover, and learn.
Instructor teaching guidance
Begin by establishing what the learner already knows about responding to an incident. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Write a five-step response to a stolen phone.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
Move quickly without destroying evidence.
Knowledge check
Ask the learner to explain why “Move quickly without destroying evidence.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.
AI and Cybersecurity
Learning objective
By the end of this lesson, the learner will be able to explain ai and cybersecurity, apply it to a realistic situation, and defend the chosen action with evidence.
Core lesson
AI can strengthen detection and also scale scams, impersonation, and malicious automation.
Instructor teaching guidance
Begin by establishing what the learner already knows about ai and cybersecurity. Teach the principle in plain language, define unfamiliar terms, then connect it to the course goal. Ask the learner to explain the idea back in their own words before moving to application.
Applied exercise
Create a verification phrase for family emergencies.
Facilitation sequence
Guide the learner through the application in five steps: describe the present situation, identify the lesson principle, choose an action, name the evidence to review, and define how success will be measured. Use follow-up questions when an answer is vague or unsupported.
Mastery standard
Treat unexpected voice or video requests as potentially synthetic.
Knowledge check
Ask the learner to explain why “Treat unexpected voice or video requests as potentially synthetic.” is the correct standard, then identify one limitation, one risk, and one piece of evidence that could change the answer. Do not mark mastery from confidence alone; require clear reasoning and practical application.