Cyber Safety and Security

Front

Scenario 1: The "Urgent" Email

You receive an email that appears to be from the school principal. The subject line reads"Urgent: Payroll Discrepancy." The email asks you to click on a link to verify your banking details immediately or your next salary will be delayed. The link looks slightly off, and there are a few typos.

Back

This is a classic phishing attempt.

2. Do NOT click the link.

4. Do not reply to the suspicious email.

6. Report the email.

8. Delete the email. Once you've reported it, delete the email from your inbox.

Front

Scenario Card 2: The Online Bully

A student confides in you that they are being harassed and targeted with mean comments and

memes on a private social media group by a few classmates, even outside school hours. They are

very distressed and reluctant to come to school.

Back

1. Reassure the student. Let them know you take their concerns seriously and that you're there to help.

3. Gather information.

   • Which social media platform is this happening on?

   • Who are the classmates involved?

   • Can they show you any screenshots of the comments or memes? (If they're comfortable doing so, as this can be valuable evidence).

   • How long has this been going on?

5. Consult school policy. Familiarize yourself with your school's anti-bullying and cyberbullying policies.

7. Monitor the situation.

8. Follow up with the student regularly to ensure the bullying has stopped and that they feel safe and supported.

Front

Scenario Card 3

The Misinformation Storm

During an online class discussion, a student shares a widely circulated but false news article

claiming the school is implementing a new, controversial grading system. Other students start

reacting strongly in the chat, believing it to be true.

Back

1. Stop the spread immediately: Intervene verbally

2. Correct the misinformation:

   • State the facts clearly: "To be clear, the school is NOT implementing a new, controversial grading system.

   • Any official announcements regarding school policies will always come directly from the principal or official school channels."

   • Explain why it's misinformation:

   • Briefly explain the concept of misinformation and the importance of verifying sources. You could say, "This is a good example of why we need to be critical consumers of information online and always look for official sources."

4. Educate on digital literacy:

   • Discuss reliable sources: Guide students on how to identify credible sources (e.g., official school website, recognized news organizations with editorial standards, peer-reviewed articles).

   • Encourage verification:

   • Teach them to cross-reference information and be skeptical of sensational headlines or claims without supporting evidence.

5. Follow up (if necessary):

Front

Scenario Card 4:

The "Friend Request" from a Student

You receive a friend request on your personal social media profile from a current student. You

are unsure how to respond, as your school does not have a clear policy on teacher-student online

interactions outside official school platforms.

Back

1. Do NOT accept the request immediately. Pause and consider the implications.

3. Understand the risks:

   • Privacy: Your personal profile contains personal information that might be inappropriate for students to see.

   • Perception: Even if your intentions are good, it can be misinterpreted by students, parents, or colleagues.

Front

Scenario Card 5: The Suspicious Pop-up

You're preparing for an online class using a school computer. Suddenly, a pop-up appears

claiming your computer is infected with multiple viruses and urges you to click a link to

download "essential security software" to clean it immediately. It looks very official, even

displaying what appears to be a school logo.

Back

1. Do NOT click ANYTHING on the pop-up. Do not click "OK," "Cancel," "Download," or any "X" to close it. Clicking could initiate a download, give remote access, or validate your computer as "active" to the attackers.

3. Close the browser/application safely:

4. Disconnect from the Network: As soon as possible, disconnect the computer from the internet (unplug the Ethernet cable or turn off Wi-Fi). This prevents any potential malicious software from communicating with external servers.

6. Report the Incident Immediately:

   • Warn other staff members about this specific phishing/malware attempt.

     • Clean the computer if necessary.

8. Do not download any "free virus scanners" or "security tools" you find online, as these can often be malicious themselves. Leave it to the IT professionals.

10. Change Passwords (as advised by IT)