JSS 2 First Term

Lesson objectives

By the end of the week, learners should be able to:

1. Name five common threats such as phishing, malware and password guessing.
2. State the protection for each threat.
3. Judge whether a given source is reliable by checking author, date and organisation.
4. Use two-factor authentication on at least one account.
5. Report a suspicious email message to the teacher.

Key vocabulary

• Cybersecurity: protecting systems, data and networks from attack.
• Threat: anything that can harm a computer system or user.
• Phishing: a fake message tricking a user into revealing credentials.
• Malware: malicious software installed without permission.
• Password guessing: attempting to crack a password by trial or brute force.
• Two-factor authentication: a second verification step after the password.
• Reliability check: judging a source by author, date and organisation.

Common misconceptions

• "Only adults need to worry about cybersecurity." Learners send emails and browse regularly and face the same threats.
• "A strong password stops everyone." Strong passwords help but phishing and malware bypass strength.
• "Reporting a suspicious email makes no difference." Reporting helps staff block threats schoolwide.

Teacher activities

1. Starter: display two emails, one genuine and one clearly fake; ask which looks more trustworthy.
2. Name five threats and pair each with a protection rule.
3. Demonstrate a reliability check on two sources and mark the trustworthiness.
4. Show two-factor authentication and activate it on a test account.
5. Give learners a suspicious email scenario and ask them to report it.
6. Close with the exit question comparing phishing with malware.

Student activities

1. Choose the more trustworthy email from the starter and explain the reason.
2. Name five threats and state the protection for each.
3. Apply a reliability check to two sources and mark each as reliable or not with a reason.
4. Turn on two-factor authentication on a test account and confirm the setup.
5. Decide whether a suspicious email is phishing and write the report action.
6. Answer the exit question in one sentence about phishing versus malware.

Practical / learning evidence

A five-threat-with-protection chart, a two-source reliability checklist and a one-page incident-report form. Submit all three for marking.

Resources and preparation

Printed threat cards, blank reliability checklist and an incident-report template. A test account with two-factor authentication enabled for demonstration. Disable camera capture during the demo.

Assessment for learning

Inspect the threat chart for five distinct threats with matched protections. Mark the reliability checklist for correct author, date and organisation checks. Check the incident report for a clear phishing judgement and action. Record any learner who dismisses suspicious emails.

Inclusion and homework

Provide the threat cards with matched protection labels preprinted for learners who need scaffolding. Allow oral completion of the reliability checklist. Extend confident learners with a four-threat extension list. Homework: enable two-factor authentication on one account you use regularly.