| 1. Kick-Off | 2-3 min | Prompt: "Have you ever seen a suspicious message or email? What made you hesitate to click it?" | Gather 2-3 short student stories. Transition: "You already practice cybersecurity every time you pause." |
| 2. Core Concepts | 5-7 min | Teach four core ideas: Phishing, Password Security, Cyber Hygiene, Privacy Settings. | Instructor Modeling: Display or read a fake phishing email/text (urgent tone, odd URL). Ask: "What are three red flags here?" Highlight that awareness = prevention. |
| 3. Guided Work Time | 12-15 min | Tier 1: "Spot & Stop"—students mark suspicious traits on 3 sample messages. Tier 2: "Security Checklist Workshop"—pairs create a 5-item personal cyber-hygiene checklist (e.g., update devices, avoid public Wi-Fi). | Circulate to ensure realism and variety. If possible, record top 5 best practices on board for class reference. |
| 4. Reflection / Exit Ticket | 2-3 min | "What's one change you'll make to stay more secure online?" | Encourage a concrete habit (enable 2FA, use passphrases). |