Cyber Core Organizer Cyber Core
Conceptual Map // Security Fundamentals
REVISION: 1.0.4
STATUS: UNCLASSIFIED
Agent Name
Date
The CIA Triad
Cybersecurity is built on three main pillars. Define each and provide a real-world example of a breach.
Confidentiality
Example Breach:
Integrity
Example Breach:
Availability
Example Breach:
Common Threats
Phishing
Ransomware
Social Eng.
Defense in Depth
Outer Layer
Middle Layer
Inner Layer
Identify a security measure for each layer of defense.
CORE-OS
Digital Fortress Guide Digital Fortress
Project-Based Learning Guide
MISSION_ID
DF-2026
THE BRIEF
"Local start-up 'Neo-Noodle' delivers futuristic ramen via automated drones. They've recently been targeted by a series of minor digital attacks. As lead security consultants, your team must design a Digital Fortress to protect their customer data, drone flight paths, and secret recipes."
Phase 1: Risk Assessment
Identification
Analyze the business model. What are the three most critical assets that need protection? Why?
1
2
3
Phase 2: Security Architecture
Implementation
Using the Defense in Depth model, list one specific security tool or policy for each layer:
Physical
Network
Human
TURN PAGE FOR PHASE 3 AND EVALUATION CRITERIA
Digital Fortress // Continued
Phase 3: Incident Response
Simulation
> ALERT: RANSOMWARE DETECTED ON SERVER_04
Outline your 4-step Incident Response Plan (IRP) for this scenario:
Step 1: Containment
Step 2: Eradication
Step 3: Recovery
Step 4: Post-Mortem
Final Submission
Create a visual map of your "Fortress" (Poster or Slides) including the CIA Triad application and the Incident Response Plan.
Criteria Novice (1) Expert (3) Threat ID Identifies generic threats. Connects threats directly to Neo-Noodle assets. CIA Triad Mentions terms without context. Clear strategies for Confidentiality, Integrity, and Availability. Defenses Only one layer addressed. Comprehensive "Defense in Depth" (Physical, Tech, Human).
REF: PBL-CS-01 COPYRIGHT © 2026 DIGITAL SHIELD EDU
Cyber Vocab Cards Cyber Vocabulary
Flashcard Set // Rev 1.0
Cut along the dotted lines. Fold or glue back-to-back to create double-sided study cards.
CIA Triad
Phishing
Multi-Factor Authentication (MFA)
Social Engineering
Ransomware
Encryption
Firewall
Malware
Cyber Definitions
Back Sides
A deceptive practice where attackers send fraudulent emails or messages to trick individuals into revealing sensitive information like passwords or credit card numbers.
The foundation of security: Confidentiality (keeping secrets), Integrity (preventing unauthorized changes), and Availability (ensuring access).
Psychological manipulation used to trick people into divulging confidential information or performing actions that compromise security.
A security system that requires more than one method of authentication from independent categories to verify the user's identity.
The process of converting information or data into a code, especially to prevent unauthorized access. Only those with the "key" can read it.
A type of malicious software designed to block access to a computer system until a sum of money is paid.
Short for "malicious software," it refers to any software specifically designed to disrupt, damage, or gain unauthorized access to a computer system.
A network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Cyber Basics Quiz Cyber Fundamentals
Assessment // Module 01
Student Name
Date
I Multiple Choice
1. Which pillar of the CIA Triad is compromised when a hacker changes the grade in a student's record?
Confidentiality
Integrity
Availability
Authentication
2. What is the primary purpose of Multi-Factor Authentication (MFA)?
To speed up the login process for users.
To encrypt data while it travels across the internet.
To require multiple independent forms of proof of identity.
To block all incoming traffic from unknown IP addresses.
3. An email that looks like it's from your bank but asks you to click a link and "verify" your password is an example of:
DDoS Attack
Phishing
Ransomware
Firewall Breach
Page 1 of 2 // Digital Shield Edu
II Application Scenarios
4. Define "Defense in Depth" and give one reason why it is more effective than a single security measure.
5. Scenario: You receive a text message from a friend's number saying "Hey, check out this video of us!" with a weird link. What should you do and why?
6. How does Ransomware specifically target the "Availability" portion of the CIA triad?
BONUS: Social Engineering
Describe a situation where a hacker might use social engineering *without* using a computer at all.
End of Assessment // Total Points: 25
Cyber Basics Answer Key Cyber Fundamentals
Master Answer Key // Module 01
I Multiple Choice
Which pillar of the CIA Triad is compromised when a hacker changes the grade in a student's record?
Integrity
Reason: Integrity ensures data hasn't been modified by unauthorized parties.
What is the primary purpose of Multi-Factor Authentication (MFA)?
To require multiple independent forms of proof of identity.
Reason: MFA adds layers of security (Something you know, something you have, something you are).
An email that looks like it's from your bank but asks you to click a link and "verify" your password is an example of:
Phishing
Reason: Phishing uses deception to trick users into revealing credentials.
II Application Scenarios
4. Defense in Depth definition & effectiveness.
Definition: Using multiple layers of security controls (physical, technical, administrative) to protect an asset.Why: It eliminates a single point of failure. If one defense is breached, others are still in place to stop the threat.
5. Text message scenario action.
Action: Do not click the link. Report as junk/delete.Why: It's a "Smishing" attack (SMS Phishing). The link likely leads to malware. Verifying via a different channel (calling the friend) is the best practice.
6. Ransomware vs. Availability.
Ransomware encrypts the user's files. While the data still exists, it is no longer accessible or available to the authorized user until a key is provided.
Bonus: Social Engineering (Non-Digital)
Examples include: "Tailgating" into a secure building, "Shoulder Surfing" at an ATM, or "Pretexting" over the phone (pretending to be IT or a manager) to get someone to divulge a password.
Teacher Resource // Confidential
Digital Shield Slides System Status: Online
Digital
Shield
Cybersecurity Fundamentals
MODULE_01 // SECURE_CORE
The Big Picture
Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks.
"It's not just about code—it's about people, privacy, and infrastructure."
Why it matters:
Protecting personal identity
Securing critical utilities (Power, Water)
Defending national interests
The Foundation
The CIA Triad
Confidentiality
Integrity
Availability
Security experts use this model to evaluate how well a system is protected.
01. Confidentiality
"Only the right people should have access."
The goal is to prevent sensitive information from reaching unauthorized users.
How we do it:
Strong Passwords
Encryption
Multi-Factor Auth (MFA)
02. Integrity
"The data must be accurate and trustworthy."
Integrity ensures that data has not been modified or tampered with by unauthorized parties.
How we do it:
Digital Signatures
Audit Logs
Access Controls
03. Availability
"Systems must work when needed."
Availability ensures that systems, networks, and data are available for users when they need them.
How we do it:
System Backups
DDoS Protection
Hardware Maintenance
Common Threats
Phishing
Deceptive emails designed to steal passwords or sensitive data.
Ransomware
Software that locks your files until a "ransom" payment is made.
Social Eng.
Manipulating people into giving up secrets or access.
The Strategy
Defense in Depth
A security strategy that uses multiple layers of defense to protect data.
Physical Controls (Fences, Cameras)
Technical Controls (Firewalls, Encryption)
Administrative Controls (Training, Policies)
Mission: Neo-Noodle
Project Briefing
"Build a digital fortress for a futuristic ramen delivery company. Protect their drones, their customers, and their top-secret recipes."
Digital Shield Teacher Guide Facilitation Guide
Digital Shield // Unit 1
TEACHER_ACCESS_ONLY
Duration
90 - 120 Mins
Grade Level
6th - 10th
Subject
Computer Science
Learning Objectives
Define and apply the CIA Triad to real-world security scenarios.
Identify common cyber threats including Phishing and Ransomware .
Explain the concept of Defense in Depth using physical, technical, and human layers.
Collaboratively design a risk assessment and response plan for a fictional organization.
Pacing & Flow
15 MIN
Introduction & Slides
Walk through the CIA Triad. Use the prompt on Slide 2 to spark a discussion about why privacy matters to students personally.
20 MIN
Core Organizer (Guided)
Students complete the CIA Triad and Common Threats sections of the Cyber Core Organizer as you present the corresponding slides.
45 MIN
Project: Neo-Noodle
Groups of 3-4 work on the Digital Fortress Guide. Encourage them to be creative with "Physical" defenses (e.g., drone cages, biodetection).
15 MIN
Assessment & Debrief
Individual quiz. Wrap up with the "Bonus" question as a class discussion on "Human" errors in security.
Socratic Discussion Prompts
"If you had to sacrifice one part of the CIA Triad for a medical app, which would it be? Why?"
"Why is the human layer often called the 'weakest link' in cybersecurity?"
"How does the concept of 'trust' change when we are interacting digitally vs. in person?"
REF_DOC: TG-DS-01 DIGITAL SHIELD EDUCATION FRAMEWORK v1.0
Project Deep Dive
Scenario Context: Neo-Noodle
The drone delivery startup scenario is designed to make abstract concepts tangible. When students are filling out the Digital Fortress Guide , push them to think about:
Confidentiality: Who should see the delivery route? (Customer and Pilot only).Integrity: What happens if a hacker changes the GPS coordinates mid-flight?Availability: What happens if the ordering website goes down during dinner rush?
Common Misconceptions
"Passwords are enough."
Remind students about MFA and physical security. A strong password doesn't help if someone steals the laptop.
