S
StandardCraft
NYS-Aligned Classroom Resource
NYS Computer Science and Digital Fluency Learning Standards (2020)
Cybersecurity & AI Education Grade 7 6-8 Lesson Plan

Phishing and Social Engineering: Defend Your Digital Life

Duration: 50 minutes · NYS Computer Science and Digital Fluency Learning Standards (2020)

Alignment Record

Built from publicly available New York State standards. Standard codes cited from official NYSED sources.

7-8.CY.1
Determine the types of personal information and digital resources that an individual may have access to that needs to be protected.
Source: NYS Computer Science and Digital Fluency Learning Standards (2020), Cybersecurity, Grades 7–8 — nysed.gov
Confidence: High Confidence Automated validation + founder oversight
#grade 7#cybersecurity#ai education#phishing#social engineering#7-8.CY.1#NYS CS standards#digital safety#SDI#MLL
Classroom use case

Use this resource for classroom instruction, small-group support, intervention, enrichment, independent practice, or planning support. Preview the alignment record before choosing whether to spend your signup credit.

Preview content
  • Lesson Plan for Grade 7 Cybersecurity & AI Education
  • NYS framework label: NYS Computer Science and Digital Fluency Learning Standards (2020)
  • Primary standard: 7-8.CY.1

Phishing and Social Engineering: Defend Your Digital Life

Grade 7 · Cybersecurity & AI Education · NYS 7-8.CY.1 · 50 Minutes

NYS-Aligned Standard

7-8.CY.1 — Determine the types of personal information and digital resources that an individual may have access to that needs to be protected. NYS Computer Science and Digital Fluency Learning Standards (2020)

Learning Objectives — “I Can” Statements

  • I can inventory the personal information and digital resources (accounts, files, devices) I have access to and need to protect.
  • I can define phishing and social engineering and explain why they target people, not just computers.
  • I can analyze a message for manipulation tactics and choose a safe response.

Essential Question

What do I actually need to protect online, and how do attackers try to trick people into giving it up?

Lesson Sequence

Hook / Warm-Up (8 min)

Quick-write: “List every online account or device you can access.” Surface that each one is a digital resource worth protecting (school login, email, games, cloud files, photos).

Direct Instruction (14 min)

  1. Asset inventory: personal information (name, birth date, address, student ID) and digital resources (accounts, files, devices, money/gift cards).
  2. Social engineering = manipulating a person into revealing information or access. Phishing is social engineering by fake message.
  3. Tactics: urgency, authority (“from your principal”), fear (“account locked”), reward (“you won”), familiarity (spoofed friend).

Guided Analysis (18 min)

In pairs, students analyze three original message cards using a Threat Decode organizer: What is the attacker after? Which tactic is used? What are the red flags? What is the safe action (don’t click, verify through a known channel, report)?

Closure (10 min)

Exit ticket: “Name one digital resource you must protect, one phishing tactic, and one specific step you’ll take to verify a suspicious message.”

SDI & Differentiation Block

Supports for MLLs/ELLs

Entering/Emerging (NYSESLAT Levels 1–2):

  • Visual tactic icons (clock = urgency, badge = authority, gift = reward).
  • Sentence frame: “This message wants my ___ . The trick is ___ .”

Transitioning/Expanding (NYSESLAT Levels 3–4):

  • Pre-teach: asset, digital resource, social engineering, phishing, verify, spoof.
  • Provide the Threat Decode organizer with the first row modeled.

Supports for Students with IEPs

SDI Adaptation Dimensions: methodology, delivery

  • Methodology: Use two message cards; provide a tactic word bank to match.
  • Delivery: Read messages aloud; allow verbal exit-ticket response.

Suggested Placement: ICT

Answer Key / Model Responses

Message A (account locked, click here): wants login credentials; tactic = fear/urgency; red flags = threat, link, generic greeting; safe action = don’t click, open the site by typing the known address, report. Message B (you won a gift card): wants money/personal info; tactic = reward; red flags = too good to be true, link, unknown sender. Message C (friend needs a gift-card code now): wants money/asset; tactic = familiarity + urgency; safe action = verify with the friend through a known number.

Exit ticket model: “I must protect my school email. A phishing tactic is urgency. I will verify by contacting the sender through a number or site I already know.”

Alignment Record

FieldValue
Standard Code7-8.CY.1
Standard TextDetermine the types of personal information and digital resources that an individual may have access to that needs to be protected.
FrameworkNYS Computer Science and Digital Fluency Learning Standards (2020)
Sourcenysed.gov — NYS CS & Digital Fluency Learning Standards (2020)
ConfidenceHigh Confidence
Validation NotesCode 7-8.CY.1 confirmed; CY = Cybersecurity, grade band 7–8. The asset-inventory step directly targets “determine the types of personal information and digital resources … that need to be protected.” All messages are original; no real data used.
Why teachers can trust this resource
✓
Original resource
Created as an original instructional support — not copied from marketplace content.
✓
Built from publicly available NYS standards
Standard codes and text sourced from NYS Computer Science and Digital Fluency Learning Standards (2020) — a publicly available official framework.
✓
Validated for classroom use
Checked for instructional clarity, classroom usability, and standards connection through automated validation and founder oversight.
✓
Alignment notes included
The alignment record above explains how this resource connects to the relevant NYS framework, with the exact standard code and source.
✓
Designed for classroom use
Supports whole-class instruction, small-group work, intervention, enrichment, independent practice, and planning support.
✓
No student data required
Teachers download and use this resource without entering student personally identifiable information.
Resource ID: SC-085 · StandardCraft NYS Resource Library v1.0
Get this resource free → View plans
Independence notice: StandardCraft is an independent resource platform and is not affiliated with, endorsed by, or sponsored by the New York State Education Department (NYSED). This resource is original content aligned to publicly available NYS standards. It is designed to support classroom planning and instruction and does not replace district curriculum, school-approved instructional programs, or teacher professional judgment.
StandardCraft — Original, educator-built resource aligned to publicly available NYS Computer Science and Digital Fluency Learning Standards (2020). Resource ID SC-085. Standard codes are cited from official NYSED sources. StandardCraft is independent and is not affiliated with, endorsed by, or sponsored by the New York State Education Department (NYSED). This resource supports — and does not replace — district curriculum, school-approved instructional programs, or teacher professional judgment.