With the increasing frequency of digital crimes and malicious cyber attacks, cybersecurity has moved beyond being a mere technical field to become a core competency required for modern citizens, and even a vital part of maintaining social security. In recent years, the Hong Kong Education Bureau has actively promoted information literacy education, emphasizing that students must possess self-protection capabilities. The school-based cybersecurity course launched by SEED Foundation aims to deconstruct cyber threats from a technical level while cultivating students' risk awareness, judgmental skills, and sense of digital responsibility, empowering them to become responsible digital citizens who can proactively respond to challenges.

Core Philosophy and Teaching Objectives

Specially structured for the local secondary school curriculum, this course transforms complex cybersecurity theories into interesting and practical online teaching modules, with a particular emphasis on the following three educational values:

1. Deepening Information Literacy and Moral Education

True cybersecurity education begins with ethics. Before teaching technical skills, we prioritize the cultivation of students' cyber ethics and legal awareness, emphasizing the importance of legality and compliance. Instructors cite real-world cases to teach students to distinguish the boundaries of online behavior, ensuring that students use the skills they learn for the right purposes and become responsible digital citizens.

2. Starting from Digital Citizenship to Activate Future Technology Vision

The Dataverse course uses real cases and interactive learning to develop students' ability to identify cyber threats. It covers common risks such as AI deepfake scams, phishing emails, and malware. Students learn about password management, privacy settings, and understanding the motives and common tactics used by scammers to collect personal information, thereby increasing their awareness of protecting their own and others' data. The course also guides students to understand data regulations and ethical codes, helping them use technology responsibly in their daily lives and build good digital citizenship qualities.

3. Free Participation with Flexible Integration into On-campus Teaching

Designed for secondary school students, Dataverse is conducted entirely online and is free to join, requiring no funding applications or extra administrative arrangements. The course content can be flexibly integrated into regular classrooms or STEAM teaching units. Whether used as a cross-curricular activity, extended learning, or to complement subjects like ICT and DAT, it can be implemented elastically according to the school timetable, allowing students to learn autonomously while enhancing their digital literacy and cybersecurity awareness.

Course Structure

The course is designed in an interactive format with a total length of approximately 2 hours, divided into several sections of about 5 minutes each to allow students to learn at their own pace. Each module focuses on a key concept, accompanied by case explanations and short Q&A exercises, suitable for flexible integration into classroom teaching or student self-study progress to improve absorption and engagement.

Module 1: Identifying Cyber Threats

• Phishing: Recognize common phishing emails and fraudulent website tactics, and learn how to identify suspicious links and email content.
• Malware: Introduce different types of malicious programs such as viruses, Trojans, and ransomware, and learn about the intrusion process and prevention methods through simulated cases.

Module 2: Preventing Online Scams

• Fake Online Shops and Quick Money Traps: Analyze the operational models and warning signs of common shopping scams and "quick money" advertisements.
• AI Deepfake: Understand how AI technology can be misused to create fake videos/audio and how to verify the authenticity of information.
• Impersonation Scams: Explore tactics used on social media platforms to impersonate acquaintances and how to explain anti-fraud methods to elders and peers.
• Job Scams / Sextortion: Analyze scam tactics targeting teenagers and learn how to protect oneself and the correct way to respond when being extorted.

Module 3: Safely Navigating the Digital Universe

• Understanding HTTPS: Explain the difference between HTTP vs HTTPS and how to determine if a website connection is secure.
• Cookies and Ad Trackers: Learn how websites collect user behavior data and discuss the impact of personalized advertising and data trading.

Module 4: Responsibly Handling Others' Information

• Precautions when using personal data on websites, apps, and AI tools: Explore how platforms like ChatGPT and image generation tools collect and process user data.
• Basic principles of personal information collection and related legal ordinances: Understand the six Data Protection Principles (DPPs) under the Personal Data (Privacy) Ordinance and the legal responsibilities students may face inside and outside of school.
• Data Minimization and Anonymization: Learn how to collect only necessary data and protect the identities of others through anonymization.
• Practices for protecting others' privacy and data: Discuss the ethics and responsibilities of photographing, sharing, and forwarding information in daily life—for example, not taking photos of others or reposting unauthorized content without permission.

Frequently Asked Questions (FAQ)

Q: Which grade levels is the course suitable for?

A: Our cybersecurity course is primarily designed for students from Secondary 1 to Secondary 6. It progresses from basic to advanced levels, and no technical background is required to participate.

Q: Why should secondary school students take a cybersecurity course?

As secondary school students spend more time online daily—from social media and online shopping to generative AI tools—the risk of personal data exposure increases accordingly. A cybersecurity course does not just teach technology; it helps students establish the correct awareness of digital citizenship, learning how to protect themselves and others and avoid risks such as phishing scams, AI forgeries, and account theft. These abilities are not only useful for daily life but are also essential fundamental literacies for future learning and careers. Through interactive learning and real cases, students can grow safely in the digital world with more confidence.

Q: What is the importance of implementing secondary school cybersecurity education for students' long-term development?

A: In the era of the Internet of Everything (IoE), cybersecurity has become the cornerstone of all industries. SEED Foundation’s course not only responds to the social demand for education in information literacy and digital security maintenance but also fills the gap in practical technical teaching within the academic sector. By gaining early exposure to compliant defensive thinking and technology, students will be better equipped to participate in innovation and technology development and become vital members in safeguarding social digital security.