Objective:

• Define phishing as the use of fake emails/websites to trick users into providing secrets.
• Emphasize that phishing is one of the largest digital threats in the world and it is growing exponentially.
• Explain that phishing started with the “advance fee scam” (aka Nigerian prince letter).
• Identify key characteristics that help identify a phishing email.

Standards:

• CSTA Compatibility Standards
  • 3A-IC-29: Explain the privacy concerns related to the collection and generation of data through automated processes that may not be evident to users.

Guiding Question:

• Why is phishing considered the largest source of malware delivery and identity theft?

Resources:

• Lesson Slides Lesson Slides Cyber1 2.2.1.pptx available on Google Classroom

Assignment:

1. Follow along with the Lesson Slides Cyber1 2.2.1.pptx presentation in today’s class.
2. We will complete a Phishing Lab Activity in class tomorrow using the information provided today.

Posted: September 9th, 2026

Objective:

• Compare and contrast different types of social engineering techniques.

Standards:

• CompTIA Security+ SYO-701 Standard
• 2.2 – Explain common threat vectors and attack surfaces
  • Principles of Social Engineering
    • Authority
    • Intimidation
    • Consensus
    • Scarcity
    • Familiarity
    • Trust
    • Urgency

Guiding Question:

• What are 7 types of social engineering techniques?

Resources:

• Lesson Slides Lesson 2.2.2 Principles Of Social Engineering.pptx and Case Study Influence Campaigns.pdf available on Google Classroom
• Cybersecurity Lab 1.1.B Handout available on Google Classroom

Assignment:

1. Follow along with the Lesson 2.2.2 Principles Of Social Engineering.pptx presentation in today’s class.
2. Complete the Case Study Influence Campaigns.pdf Activity using the document and Form posted in the Google Classroom.

Assigned: September 8th, 2026
Teacher Pacing Due Date: September 9th, 2026

Objective:

• Define the steps used in typical digital attacks.
• Define social engineering as the human risk in organization security.
• Identify techniques for social engineering and how to mitigate against these techniques.

Standards:

• CSTA Compatibility Standards
  • 3A-IC-29 :Explain the privacy concerns related to the collection and generation of data through automated processes that may not be evident to users.

Guiding Question:

How can we protect against social engineering?

Resources:

• Lesson Slides Cyber1 2.1.1.pptx and Lab PPT Cyber1 2.1.1.pptx Presentations available on Google Classroom
• Cybersecurity Lab 1.1.B Handout available on Google Classroom

Assignment:

1. Follow along with the Lesson Slides Cyber1 2.1.1.pptx presentation in today’s class.
2. Next, walk through the Lab PPT Cyber1 2.1.1.pptx Activity provided in the Google Classroom. This will review the use of the SET application introduced in yesterday’s lab.
3. If you have not yet done so, use what you have learned today to complete yesterday’s Lab Activity by end of day today.

Assigned: September 2nd, 2026
Teacher Pacing Due Date: September 2nd, 2026

Objective:

• Students will learn to implement the tools to design a secure network.

Standards:

CompTIA Security+ SYO-701 Objective:
3.2 – Given a scenario, apply security principles to secure enterprise infrastructure

• Secure communication/access
  • Virtual private network (VPN)
  • Remote access
  • Tunneling
    • Transport Layer Security (TLS)
    • Internet protocol security (IPSEC)
  • Software-defined wide area network (SD-WAN)
  • Secure access service edge (SASE)
• Selection of effective controls

Guiding Question:

How are secure networks designed?

Resources:

• Lesson 3.2.3 – Secure Communication – Access and Efective Controls Presentation available on Google Classroom

Assignment:

1. Follow along with the 5.2.1 – Risk Management.pptx presentation in today’s class.
2. Complete the Case Study – NordVPN Hack Activity in class using the materials provided in Google Classroom.

Assigned: October 13th, 2025
Teacher Pacing Due Date: October 14th, 2025

Objective:

• Students will:
  • Be able to explain how organizations can be more cyber resilient.
  • Investigate common methods to enhance Operating System security and implement monitoring measures in an enterprise.
  • Compare and contrast various types of security controls

Standards:

CompTIA Security+ SYO-701 Objective:
4.1 – Given a scenario, apply common security techniques to computing

• Application security
  • Input validation
  • Secure cookies
  • Static code analysis
  • Code signing
• Sandboxing
• Monitoring

4.5 – Given a scenario, modify enterprise capabilities to enhance security

• Operating system security
  • Group Policy
  • SELinux
• File integrity monitoring
• DLP
• Network access control (NAC)
• Endpoint detection and response (EDR)/extended detection and response (XDR)
• User behavior analytics

1.1 – Compare and contrast various types of controls

• Category
  • Technical,
    • Managerial,
    • Operational,
    • Physical,
  • Control Type
    • Preventive
    • Deterrent
    • Detective
    • Corrective
    • Compensating
    • Directive

Guiding Questions:

• How are applications secured?
• What are some common methods for an enterprise to enhance Operating System security and implement monitoring measures?
• What are some different control categories and control types?

Resources:

• Lesson 4.1.4 – Application Security.pptx, Lesson 4.5.2 – Endpoint – OS & Monitoring.pptx and Lesson 1.1.1 – Security Controls.pptx Presentations and Security Concepts Guided Notes – Fall 2025 Form available on Google Classroom

Assignment:

1. Read through the Lesson 4.1.4 – Application Security.pptx, Lesson 4.5.2 – Endpoint – OS & Monitoring.pptx and Lesson 1.1.1 – Security Controls.pptx presentations in today’s class.
2. Complete the Security Concepts Guided Notes – Fall 2025 Form using the materials provided.

Assigned: September 30th, 2025
Teacher Pacing Due Date: October 1st, 2025

Objective:

• Students will be able to explain how organizations can be more cyber resilient.

Standards:

• CYBER.ORG Cybersecurity Learning Standards
  • 9-12.CS.LOSS- Develop a plan for risk mitigation that implements redundancy.
• CSTA Compatibility Standards
  • 3A-DA-10: Evaluate the tradeoffs in how data elements are organized and where data is stored.

Guiding Question:

How can organizations prepare for and recover from cyber incidents to protect their core purpose?

Resources:

• Lesson PPT Cybersecurity 1.2.C.pptx Presentation and Lab 1.2.C – Remote Backups.pptx available on Google Classroom

Assignment:

1. Read through the Lesson PPT Cybersecurity 1.2.C.pptx presentation in today’s class.
2. Complete the Lab 1.2.C – Remote Backups using the materials provided.

Assigned: September 10th, 2025
Teacher Pacing Due Date: September 12th, 2025

Objective:

• Students will be able to summarize authentication and authorization design concepts.

Standards:

• CompTIA Security+ SYO-701 Objective:
  • 1.2 – Summarize fundamental security concepts

Guiding Question:

How do the principles of the CIA Triad interact with authentication, authorization, and accounting framework to ensure the overall security of information systems?

Resources:

• Lesson 1.2.1 – CIA Triad and AAA.pptx Presentation available on Google Classroom

Assignment:

1. Read through the Lesson 1.2.1 – CIA Triad and AAA.pptx presentation in today’s class.
2. Complete the in-class Activity using the materials provided.

Assigned: September 9th, 2025
Teacher Pacing Due Date: September 9th, 2025