Cyber Shield Teacher Guide TEACHER GUIDE
Cyber Shield
Communicative Tech Safety for Adult Saudi Female ELLs (B1)
LEVEL: B1 / Intermediate
DURATION: 60 Minutes
Lesson Objectives
Identify and pronounce 12 key cybersecurity terms (e.g., phishing, backup, 2FA, scam).
Give safety advice using modals should / shouldn't in peer discussions.
Analyze and respond to local digital security scenarios involving apps like Absher, Nafath, and STC Pay.
Core Local Context
Highly relevant to adult learners in Saudi Arabia. Focuses on authentic interactions with national platforms (Nafath, Absher ), online shopping (Noon, SPL ), and mobile banking (STC Pay ).
60-Minute Lesson Timeline
07 mins Warm-Up
Digital Habits Check-In
Activate prior knowledge. Project introductory questions. Ask: "How often do you change your WhatsApp or Absher passwords?" or "Have you ever received a SMS scam from 'SPL'?" to spark initial conversation.
15 mins Vocab & Drill
Pronunciation & Meaning Anchor
Present key terms using the slide deck. Conduct choral drills focusing on syllable stress (e.g., phi-shing [fɪ-ʃɪŋ], ve-ri-fi-ca-tion [ve-rɪ-fɪ-keɪ-ʃən]). Clarify difference between Nafath verification codes and random SMS phishing links.
15 mins Sorting Board
Interactive Vocabulary Board (Group Negotiation)
Divide students into groups of 3. Distribute the Advice Sorter Worksheet . Students must read cybersecurity recommendations, debate their validity, and write them in the correct column while using target phrases like "I agree, we should always..."
18 mins Roleplay
Cyber Dilemmas (Structured Conversations)
Distribute either the standard Cyber Dilemmas Cards or the Advanced Dilemmas Cards (for high-level speakers). Pairs select cards and roleplay. Advanced learners focus on verifying identities and analyzing complex social engineering patterns.
05 mins Cool-Down
Shield Wall Pledge
Quick exit reflection. Each student must share one verbal pledge using the target vocabulary: "I promise to turn on two-factor authentication for my STC Pay today."
Cyber Shield Lesson Plan | Riyadh, Saudi Arabia Page 1 of 2
Teaching Tips & Cultural Context
L1 Pronunciation Support
Arabic speakers often substitute the /p/ sound with /b/ . Pay extra attention to:
Password : ensure it's not pronounced "bassword"STC Pay : practice the /p/ sound in "Pay"Backup : stress the first syllable: BACK-up Phishing : explain that "ph" sounds exactly like "f"
The "Nafath" Context
In Saudi Arabia, Nafath is a national IAM portal. Scammers frequently trigger random verification alerts to lock citizens out or access their government files.
Key Advice: Never click "Approve" on Nafath unless you requested the verification immediately before.
Classroom Script Examples
To introduce "Phishing" vs. "Real" messages: "Class, imagine you get an SMS: 'Your SPL package is waiting. Pay 5 SAR to deliver it. Click here.' Is this real or a fake trick? Excellent, it's fake. This is called phishing . It is a scam designed to steal your credit card data."
To scaffold the Sorting Activity: "Work together with your group. One of you should read the advice aloud. Discuss: Is this advice 'Safe', 'Unsafe', or a 'Risk'? Use your target phrases. Tell your partner: 'I think sharing verification codes is unsafe because...'"
Differentiation Strategies
Support (Struggling Learners)
Hand out Side A of the Differentiated Task Sheet .
Includes a highly visual, match-and-circle safety task to simplify decision-making.
Reinforces should/shouldn't structure through guided choices.
Challenge (Advanced / Fast Finishers)
Provide Advanced Dilemmas Activity Cards or Side B of the Differentiated Task Sheet .
Promotes high-level analysis of corporate hacking, STC Pay QR fraud, and Wi-Fi networks.
Enforces causal vocabulary without structured visual scaffolds.
Cyber Shield Lesson Plan | Riyadh, Saudi Arabia Page 2 of 2
Cyber Shield Slides Cyber Shield | Riyadh Female Academy
Staying Safe in a
Digital World
Practical cybersecurity language & skills for your daily life.
Protect Your Identity & Money
B1 Level English Course
Interactive Hook Slide 2 of 6
Is this Real or a Scam?
Imagine you receive this SMS on your phone right now. What do you do first?
Talk with your partner:
"I would delete it because..."
"I would never click on..."
SMS Message Today, 11:24 AM
SPL Shipping
Your package is blocked at Riyadh Hub. Please pay 5.40 SAR immediately to avoid return. Click link: http://spl-riyadh-delivery.net/payment
*This is an example of an unsafe link. Do not click.
Key Vocabulary Slide 3 of 6
WORD OF THE DAY
Phishing
Pronunciation: /ˈfɪʃ.ɪŋ/ (sounds like "fishing")
A fake message (email, SMS, WhatsApp) designed to steal your money or secrets.
Why Phishing is Unsafe
RISK
They ask for your credit card details or bank login passwords.
RISK
They use fake logos of companies like STC Pay or Noon.
SAFE
Always delete these messages. Never click on unknown links.
National Platform Safety Slide 4 of 6
Nafath & Verification Codes
Two-Factor
Authentication (2FA)
Using two ways to prove who you are. This protects your accounts!
How to protect your Identity:
Use your fingerprint or face recognition to unlock.
Never share any verification codes .
If Nafath asks you to approve a request you did not start, tap REJECT .
Daily Practices Slide 5 of 6
Weak Password
An easy password to guess. Do not use these!
123456 Fatima1995
Why? It contains common names, patterns, or birthdays.
Strong Password
A difficult password to guess. Safe!
Kd#89!mR$z Shield_99@stc
Why? It mixes letters, numbers, symbols, and capitals.
Rule: Change your passwords every 3 to 6 months!
Advice Sorter Worksheet STUDENT ACTIVITY
Advice Sorter Worksheet
Practice safety vocabulary and discuss local apps with your partner.
Name:
Date:
1 The Sorting Bank: Read the Actions
Read these real-life scenarios with your partner. Pay attention to bold target vocabulary.
A
Approve random Nafath verification alerts on your mobile phone.
B
Change your STC Pay passcode or password every 3 months.
C
Connect to an open public Wi-Fi at a mall to check bank balances.
D
Turn on two-factor authentication (2FA) on Snapchat and WhatsApp.
E
Receive an SMS claiming to be from SPL with a payment link, and download the app.
F
Create a strong password with numbers, symbols, and capitals.
G
Ignore system alerts and wait to update your smartphone software.
H
Save a digital backup of your personal photos and contact files.
I
Share your WhatsApp verification code with a contact claiming she is an administrator.
2 The Sorting Board: Write the Letters Below
Discuss with your partner. Negotiate which letters go into which category. Write the letters and a short summary inside the boxes.
Safe Actions
Unsafe Actions
Risky Actions
Peer Speaking Scaffold
Use these speaking formulas to debate with your group. Speak only in English!
How to argue your point:
"I think action A is unsafe because you shouldn't share code details."
"Action D is definitely safe because we should protect our phone."
How to agree or disagree:
"I agree with you completely! That's correct."
"I'm not sure... I think it is risky rather than safe."
Cyber Shield Series | Advice Sorter Worksheet Riyadh Adult English Program
Cyber Dilemmas Activity Cards CLASSROOM ROLEPLAY
Cyber Dilemmas Activity Cards
Cut these cards or read them in pairs. Practice giving advice using should/shouldn't .
Name:
Date:
How to Play:
Sit in pairs (Student A and Student B). Pick a dilemma card together.
Student A: Read the card scenario aloud. Act worried!Student B: Give safety advice using the target words and the Speaking Scaffold .
DILEMMA 1 Nafath Identity
Fatima's Mystery Verification
Fatima is sitting with her friends drinking tea. Suddenly, her mobile phone alerts her with a Nafath app notification asking her to approve a login request. She is not using any government website.
Target Words to Use:
Verification Code Scam Reject
DILEMMA 2 Fake Call
Mona's Surprise Cash Prize
Mona receives a call from a regular mobile number. A polite man says: "Assalamu Alaikum, I am calling from STC Pay. You have won 10,000 SAR! To transfer the money, please read me the code we just sent to your device."
Target Words to Use:
Phishing Password Fraud
DILEMMA 3 Online Shop
Lujain's Mega Abaya Discount
Lujain sees an Instagram account selling gorgeous designer abayas for only 50 SAR. The account has no website link. The bio says: "To buy, send us a WhatsApp message with your full name and a photo of your credit card."
Target Words to Use:
Trusted Website Personal Data Unsafe
DILEMMA 4 Social Media
Sara's Friend Hack
Sara gets a Snapchat text message from her friend Reem saying: "Hey, check this! Riyadh Boulevard is giving free entry codes. Click this link and sign in with your email and password." It looks slightly suspicious.
Target Words to Use:
Suspicious Link Hacker Identity Theft
Speaking Scaffold for Student B (Advisor):
"Oh no! Fatima, you shouldn't click on that..."
"Mona, this is a phishing scam ! Hang up!"
"You should always check if the website is secure."
"This looks very suspicious because..."
"Never give your verification code to a stranger!"
"You should change your password immediately."
Differentiated Task Sheet FLEXIBLE PRACTICE
Digital Safety Practice
Choose Side A (Alternative Support) or Side B (Fast Finisher Challenge).
Name:
Date:
A Alternative Support Activity (Easier Match & Circle)
Lower B1 / Scaffolded
Read the situation. Circle the correct vocabulary word and the best advice.
💬
An SMS says: "Your STC Pay has won 5,000 SAR. Tap here to log in."
This is a: Scam / Backup
You should / shouldn't click the link.
🔑
You want to lock your WhatsApp so other people cannot open it.
You need: 2FA / Virus
You should / shouldn't share the code.
📲
Your iPhone tells you there is a new iOS update ready to install.
This is an: Update / Phishing
You should / shouldn't install it today.
B Fast Finisher Challenge (Family Alert Builder)
Advanced B1+ / Creative
Imagine there is a dangerous phishing scam on WhatsApp targeting families in Riyadh.
Challenge Checklist (Check box when used):
"suspicious link" "password / verification" "should / shouldn't"
Family Safety Alert Message
Delivered • Today
Cyber Shield Series | Differentiated Task Sheet Riyadh Adult English Program
Advanced Dilemmas Activity Cards ADVANCED COMMUNICATIVE CHALLENGE
Advanced Dilemmas Activity Cards
High-level cybersecurity scenarios. Debate real situations, analyze risks, and justify decisions with minimal scaffolding.
Name:
Date:
Task Guidelines:
Select a scenario card in pairs. Take 1 minute of silent preparation to analyze the underlying exploit.
Roleplay the situation, but focus on the long-term solutions and verifications rather than simple "Yes/No" options.
Justify your security advice with concrete logical connectors (e.g., "on the grounds that" , "as a result of" ).
PRO CARD 1 Admin Intercept
The University Nafath Prompt
Reema works part-time in her university's registration office. She gets an urgent email from "Academic IT Admin" warning that her payroll credentials have expired and she must verify her identity immediately on Nafath via an embedded link to avoid suspension of payments.
Critical Prompts:
How can Reema verify this request without clicking the link?
What corporate data is at risk if she approves this verification?
PRO CARD 2 Merchant Fraud
The Instagram Store QR Swap
Alanoud runs a successful home-bakery business via Instagram. A self-proclaimed "STC Pay Business Consultant" contacts her offering a high-tech QR payment barcode that guarantees zero processing fees. All her customers' payments will bypass normal banking apps.
Critical Prompts:
Analyze the risk of bypassing official secure gateways.
What steps should Alanoud take to verify the agent's identity?
PRO CARD 3 Social Engineering
The WhatsApp Voice Clone
Noura receives an automated voice note on WhatsApp from her aunt's profile saying: "I had an accident in my car near the Riyadh Boulevard and need 4,000 SAR for the emergency towing fee. Please transfer to this new STC Pay account immediately."
Critical Prompts:
How does the attacker exploit emotional urgency?
What protocol should Noura use to verify if this is her aunt?
PRO CARD 4 Network Attack
The Unsecured Cafe Certificate
Sarah is studying for her business degree at a busy café. To access the "Free_Cafe_WiFi_VIP" network, she is prompted to download a special security profile to her laptop. Once installed, her browser warns that her traffic is being decrypted.
Critical Prompts:
