Cyber Security and Online Safety

---

Concepts

This study delivers 1 primary concept and 0 secondary concepts.

Primary concept: Ethics, Privacy and the Social Impact of Computing (CO-KS34-C004)

Type: Knowledge | Teaching weight: 3/6

Computing technologies are transforming society in profound ways, creating new opportunities and new risks. Algorithmic decision-making - using programs to make or assist decisions about credit, employment, criminal sentencing, medical diagnosis - raises questions about fairness, transparency and accountability when algorithms encode or amplify biases. Mass surveillance enabled by digital data collection challenges privacy and civil liberties. Automation threatens some forms of employment while creating others. Artificial intelligence raises questions about responsibility, creativity and the nature of intelligence. At KS3 and KS4, pupils develop the conceptual tools to engage with these ethical and social dimensions of computing as informed citizens.

Teaching guidance: Use real-world case studies to anchor abstract ethical discussions: algorithmic bias in hiring tools, facial recognition errors, data breaches. Teach pupils to identify stakeholders in technology systems and whose interests may be served or harmed. Develop vocabulary for ethical analysis: fairness, accountability, transparency, consent, privacy. Explore both the benefits and the risks of AI, social media and surveillance technologies. Connect to legal frameworks: GDPR, computer misuse legislation, intellectual property. Encourage pupils to evaluate technology critically rather than accepting or rejecting it wholesale. Key vocabulary: ethics, privacy, surveillance, algorithm, bias, fairness, transparency, accountability, artificial intelligence, automation, data, consent, right, responsibility, impact Common misconceptions: Pupils may assume that algorithms are neutral because they are mathematical. The data used to train machine learning models reflects historical human decisions and can encode and amplify historical biases. The idea that privacy is only a concern for people with 'something to hide' is common but misguided; developing nuanced understanding of privacy as a social good prevents this. Technology is neither inherently good nor bad; its impacts depend on how it is designed, deployed and governed.

Differentiation

Model response (Emerging): 1) If a friend knows your password, they could access your accounts and read private messages, change your settings or post things pretending to be you. 2) Even if your friend is trustworthy, they might accidentally reveal the password to someone else, or their own device could be compromised, exposing your password to hackers.

Model response (Developing): A digital footprint is the trail of data you leave behind when using the internet: social media posts, comments, photos, search history, website visits, and online purchases. It matters because this data is often permanent and searchable. Employers routinely search candidates' social media before hiring — a post made at age 14 could affect a job application at age 25. Universities, landlords and even potential partners may search your name. Your digital footprint also determines what advertisements and content you are shown, as companies build profiles from your data to target you commercially.

Model response (Secure): The AI system is trained on historical hiring data — data about which candidates were previously selected by human recruiters. If those recruiters had biases (conscious or unconscious) — for example, preferring candidates from certain universities, with certain names, or of certain genders — the AI will learn to replicate those biases, encoding them into its algorithms. The system might systematically disadvantage: women (if the company historically hired mainly men); ethnic minorities (if names associated with certain backgrounds were previously filtered out); people with non-traditional career paths (if the training data only includes conventional backgrounds). The harm is significant: qualified candidates are rejected not because they are unsuitable but because the AI has learned to discriminate. The bias is harder to detect than human bias because the algorithm appears objective — people trust 'the computer said no' more than 'the manager said no'. Stakeholders harmed: rejected candidates (denied opportunities), the company (misses diverse talent), and society (systemic inequality is reinforced and automated at scale).

Model response (Mastery): For government access: terrorism, child exploitation and organised crime use encrypted messaging to coordinate harmful activities. If law enforcement cannot access these communications even with a court order, serious crimes may go undetected and lives may be lost. Democratic societies already permit surveillance warrants for phone calls and letters — encrypted digital communication should not be exempt from the rule of law. Against government access: creating a 'backdoor' in encryption that the government can access fundamentally weakens the encryption for everyone. Security researchers have consistently demonstrated that any backdoor intended for government use can be discovered and exploited by criminals and hostile states. The same weakened encryption would compromise the communications of journalists protecting sources, political dissidents in authoritarian regimes, businesses protecting trade secrets, and ordinary citizens' private conversations. Once a backdoor exists, there is no way to guarantee it is used only by authorised parties. My position: strong encryption without backdoors should be maintained. The security of billions of private communications should not be compromised because a small number of criminals use the same technology. Alternative investigative methods (metadata analysis, undercover operations, device seizure with warrants) can address criminal use without weakening the infrastructure that protects everyone. The history of surveillance powers shows consistent mission creep — powers granted for terrorism are routinely expanded to lesser offences.

---

Thinking lens: Perspective and Interpretation (primary)

Key question: Whose perspective is this, what shapes it, and what might be missing? Why this lens fits: Analysing the ethical implications of algorithmic decision-making, surveillance and AI requires pupils to evaluate the same technology from the perspectives of different affected groups — individuals, communities, corporations and governments — making perspective-taking the central intellectual demand. Question stems for KS3:

What contextual factors shaped this perspective?

How does the author's position affect the reliability of this account?

Whose perspective is missing from this record, and why does that matter?

How have interpretations of this event changed over time, and what drove those changes?

Secondary lens: Cause and Effect — The social impact strand asks pupils to trace the second- and third-order causal consequences of technological choices — how widespread surveillance causes chilling effects on free expression, or how algorithmic bias perpetuates systemic discrimination.

---

Session structure: Discussion and Debate

Discussion and Debate

A structured sequence for exploring contested issues or multiple perspectives. Begins with a stimulus that raises a question or dilemma, builds knowledge through research, develops arguments through structured discussion techniques, captures thinking in writing, and reflects on how views may have changed.

stimulus → research → structured_discussion → writing → reflection Assessment: Balanced written argument or persuasive piece demonstrating understanding of multiple perspectives, supported by evidence, with a reasoned personal conclusion. Teacher note: Use the DISCUSSION AND DEBATE template: present a substantive question or ethical dilemma. Expect pupils to research different perspectives and prepare evidence-based arguments. Facilitate structured discussion using protocols such as Harkness or four corners. Guide pupils to produce a written response that acknowledges multiple viewpoints and justifies their own position. KS3 question stems:

What are the strongest arguments on each side of this issue?

What evidence supports this perspective, and how reliable is it?

How would you respond to the main counter-argument?

How has the discussion changed or strengthened your view?

---

Computing focus

Computational concepts: digital literacy, networking Abstraction level: Visual Themes: cyber security, online safety, data protection, privacy

---

Why this study matters

KS3 online safety escalates from KS2's personal safety focus to understanding the technical and social dimensions of cyber security. Pupils learn how attacks work (phishing, social engineering, malware, SQL injection at a conceptual level), why passwords are important (hashing, brute force), and how organisations protect data (encryption, firewalls, access control). Understanding the attack surface makes pupils more effective at protecting themselves and prepares for GCSE content on ethical hacking and network security.

---

Pitfalls to avoid

Scare-based teaching without empowerment -- teach what TO do, not just what to fear

Only covering passwords -- cyber security encompasses social engineering, phishing, network security and data protection

Not connecting to GDPR and data protection law -- KS3 pupils need to understand their data rights

---

Cross-curricular opportunities

---

Computational thinking skills (KS3)

These disciplinary skills should be woven through teaching, not taught in isolation:

Algorithm design (KS1) — Create precise, unambiguous sequences of instructions to accomplish a goal; understand that a computer follows instructions exactly as written; design, implement and debug simple programs as algorithms expressed in a programming environment; use logical reasoning to predict what a simple program will do.

Pattern recognition (KS2) — Identify patterns and regularities in data sets and program behaviours; use pattern recognition to select appropriate control structures (repetition for repeated actions, selection for conditional branching); generalise from specific examples to produce reusable solutions; recognise when an existing algorithm or program component can be reused to solve a new problem.

Pattern recognition (KS3) — Identify and exploit structural patterns in computational problems to select or design efficient algorithms; recognise recurring algorithmic patterns such as searching, sorting and divide-and-conquer; use pattern recognition to understand when different data structures naturally suit a problem's access patterns; analyse trends in data and use them to inform computational solutions.

Abstraction (KS1) — Focus on the most important features of a problem or task while ignoring unnecessary detail; represent real-world actions as simple step-by-step instructions that capture the essential logic without irrelevant specifics.

Pattern recognition (KS1) — Notice repeated elements in sequences of instructions or in real-world tasks; identify when a set of steps recurs and recognise that repetition can be expressed more efficiently using loops; spot similarities between different problems that suggest the same solution approach can be applied.

Data representation (KS3) — Understand how data of various types — integers, text, images, sound — is represented and manipulated in binary form; convert between binary and decimal number representations and perform simple binary arithmetic; understand how data structures (arrays, lists, records) organise data in programs; understand that all digital information is encoded as binary digits regardless of its perceived type.

---

Vocabulary word mat

Prior knowledge (retrieval plan)

Pupils should already know the following from earlier units:

---

Scaffolding and inclusion (Y7)

---

Knowledge organiser

Key terms:

cyber security

phishing

social engineering

malware

encryption

firewall

authentication

two-factor authentication

GDPR

data protection

hashing

brute force

Core facts (expected standard):

Ethics, Privacy and the Social Impact of Computing: Analyses the social impact of computing technologies including algorithmic bias, surveillance and automation, using structured ethical frameworks to evaluate benefits and harms to different stakeholders.

---

Graph context

Node type: ComputingTopicSuggestion | Study ID: TS-CO-KS3-006 Concept IDs:

CO-KS34-C004: Ethics, Privacy and the Social Impact of Computing (primary)

Cypher query:

``cypher

MATCH (ts:ComputingTopicSuggestion {suggestion_id: 'TS-CO-KS3-006'})

-[:DELIVERS_VIA]->(c:Concept)

-[:HAS_DIFFICULTY_LEVEL]->(dl)

RETURN c.name, dl.label, dl.description

``

---

Generated from the UK Curriculum Knowledge Graph — zero LLM generation.