It’s Never too Early to Learn Cybersecurity Skills

By Scott Campbell

There’s a saying in the technology industry—that “every company is a tech company.” Meaning that every bakery, bank and bike shop—and yes, every school too—has to use and understand tech to do their job. It’s one reason why CompTIA Spark developed free curriculum for middle school educators so they can help students see how tech is used in real-world environments. But in some ways, it’s not enough anymore.

Today, every company also needs to be a cybersecurity company too. After all, cybersecurity is not tech, or at least not just tech—it also includes processes and workflows to better know where vulnerabilities may lie.

To get students familiar with cybersecurity concepts—and risks—CompTIA Spark curriculum includes a Cybersecurity unit that provides a high-level introduction to cyber concepts through short instructional videos, games and simulations, and class discussion.

Designed for middle school students (and teachers) of all abilities, the cybersecurity unit helps students learn how computers exchange data over networks, how networks are built to ensure reliability and efficiency, how computers communicate with servers (to load content like videos, web pages, etc.), how servers can be vulnerable to a cyberattack, and how companies can better protect themselves from threats.

“It is important for students to not only be exposed to cybersecurity concepts and technologies but computer science in general as early as middle school,” said Omar Varela, a technology teacher at William D. Slider Middle School, part of Socorro Independent School District in El Paso, Texas. “In my experience, I have seen how students who are exposed to these concepts in middle school are better prepared for high school especially when it comes to choosing their career paths.”

The Importance of Learning Digital Security Skills

The goal of the cybersecurity unit is to introduce students to concepts and skills to begin building proper cyber hygiene now, according to Henry Mann, senior director of product development at CompTIA Spark.

“Cybersecurity education is crucial for middle school students because it equips them with essential skills to navigate the digital world safely and responsibly,” Mann said. “My eldest daughter is approaching her middle school years, and like her peers, she is beginning to explore the world with some independence. Just as I expect her to learn how to safely cross streets and avoid dangerous situations, I also recognize the need for her to understand how to function responsibly and safely online.”

Recent studies find that today’s middle school students spend almost five hours a day online, but traditional safety skills—such as waiting for a turn in line or keeping track of personal property—do not apply to their digital interactions. Instead, students need to learn cybersecurity, online safety, and basic internet knowledge, according to Mann.

“These are the digital equivalents of the social skills we expect young people to master. By integrating cybersecurity education into the middle school curriculum, we empower students to understand how the internet works, and how to protect themselves in the digital world,” he said. “In essence, teaching cybersecurity is as vital as teaching them to look both ways before crossing the street.”

Building Cybersecurity Curriculum from the Ground Up

CompTIA Spark started developing the cybersecurity curriculum after talking to middle school teachers across the country to identify gaps in current educational offerings, according to Travis Bower, senior manager of curriculum development at CompTIA Spark.

“Two main issues stood out. First, many students didn’t understand the basics of how the internet works. One teacher said, ‘If the internet feels like magic to students, how can we expect them to understand its vulnerabilities?’ Second, teachers were looking for more engaging ways to teach cybersecurity concepts,” Bower said.

To address both issues, CompTIA Spark designed a unit that could be both informative and engaging, leveraging CompTIA’s network of cybersecurity experts to ensure the content was authentic and up to date.

“Our goal was to create lessons that used real world scenarios and interactivity to make cybersecurity concepts clear, approachable, and interesting for middle school students,” Bower said. “Using a fun and engaging approach, students build an interest and foundation in computer science that they can then pursue in their high school years and careers.”

What Should Teachers Expect?

At the heart of the Cybersecurity unit from CompTIA Spark is the organization’s proprietary CyberSim—a series of collaborative digital games where students work together to simulate how data travels across the internet and how it can be vulnerable to attackers.

These activities are scaffolded and increase in difficulty, allowing students to apply what they’ve learned to solve increasingly complex real-world challenges. The unit culminates in a case study research project and an exploration of cybersecurity-related careers, giving students a comprehensive understanding of the field.

“Teachers will appreciate that our unit is designed to be plug-and-play, with detailed lesson plans, instructional resources, standards alignment, rubrics, and multiple assessment options included,” Mann said.The unit is designed to be student-focused with most of the activities being collaborative in nature. Through CyberSim, students work in groups to investigate how packets of data and files are transferred across a network. The unit has been aligned with Computer Science Teachers Association’s Computer Science Teachers Association’s standards, as well as International Society for Technology in Education Society for Technology in Education, Common Core Core and and Next Generation Science Standards Generation Science Standards

Industry Experience, Expertise Not Necessary

Like all of CompTIA Spark’s curriculum, instructors do not need to be experts in the subject—in this case they don’t need to be proficient in cybersecurity to effectively teach the content to students.

“The Cybersecurity unit was easy to teach and appealed to students because it was interactive and the videos clarified many of the questions and doubts the students had when completing the lessons. The students liked the videos and the games that helped them better understand the concepts,” Varela said. “I would recommend the unit to other teachers and districts. The fact that it is appealing to students—it captures their attention and they do not realize that they are learning—makes an awesome unit.”

The curriculum is student-centered and self-guided, featuring high-quality instructional videos, step-by-step instructions for student activities, and auto-graded quizzes. All CompTIA Spark curriculum is delivered through an intuitiveonline learning platform, making it simple for teachers to facilitate the lessons.

“The unit is crafted to empower teachers with all the tools they need, ensuring that students receive a comprehensive and engaging cybersecurity education without the need to be an expert in the field,” said Bower. “That said, the unit can also easily be switched to being teacher-led by using an included slide deck to drive instruction and discussion. It is entirely up to teachers to decide what style suites them and their students best.”

As Cybersecurity Needs Change, So Will the Curriculum

One constant about cybersecurity is its complete inconstancy. Threats, and responses to those threats, are always changing. The CompTIA Spark curriculum will also evolve to make sure the lessons and skills learned remain relevant to current needs, according to Mann.

“We are always gathering feedback about our units and making changes as needed. In preparation for the start of the school year we will be releasing an updated version of the unit that includes changes to our lessons as well as CyberSim,” he said. “These changes are designed to make our cybersecurity unit even easier to implement and provide improved in-simulator support for students who may need more support to find success.”

There are also additional CyberSim levels and instructional content to cover network protocols in greater detail.

In the 2023-24 school year, more than 6,500 students interacted with the Cybersecurity unit, to overwhelmingly positive feedback, Mann said. “One teacher shared that the unit was ‘a great interactive program’ and that ‘it taught more than I could have and in a fun way.’ Another teacher reported that they ‘loved how relevant the lessons were’ and that their students were ‘engaged throughout the unit,’” he said.