Shields Up for Cyber Safety Lesson Plan
Grade Level: 7–9
Duration: 45-60 Minutes
Author: Matthew Johnson, Director of Education, MediaSmarts
![]()
This lesson is part of USE, UNDERSTAND & ENGAGE: A Digital Media Literacy Framework for Canadian Schools.
Overview
In this lesson, students learn the concept of the Dual-Shield Defense for cybersecurity:
- The Outer Shield (Technical Perimeter Defenses): Automatic, structural blocks that prevent risks from ever reaching a user's account or device. This includes DNS (domain name system) filtering tools such as CIRA Canadian Shield, ad blockers, multi-factor authentication (MFA), and device-level Stolen Device or Theft Protection.
- The Inner Shield (Human Cognitive Verification): Active mental habits that allow users to spot, analyze, and neutralize scams that get past the outer shield. This includes detecting psychological triggers (Urgency, Fear, Authority, Secrecy), applying the "Take Five, Tell Two" rule, and using robust offline verification protocols.
Learning Outcomes
Framework topics: Students will know:
- Privacy and security:
- Outer Shield Tools: The operational mechanics of CIRA Canadian Shield (DNS-layer filtering), Multi-Factor Authentication (MFA), browser-level ad and script blockers and hardware/software theft protections.
- Inner Shield Red Flags: The scammer's psychological playbook of emotional triggers—Urgency, Fear/Panic, Fake Authority, and Secrecy/Isolation.
- Critical Verification Methods: The "Take Five, Tell Two" pause rule, direct URL entry and bookmarking, family code words for voice clones, and the "live hand-wave" test for real-time video deepfakes.
Key concepts: Students will understand that:
- Digital media are networked: Active digital safety is an act of independence that keeps predatory developers, data brokers, and bad actors from manipulating our choices, finances, and data.
- Digital media experiences are shaped by the tools we use: Technical shields are essential for blocking automated noise, but human critical thinking is the ultimate defense when sophisticated threats launder their content through real, trusted services.
- Interactions through digital media have a real impact: Scammers are organized, industrial-scale operators using advanced behavioral psychology to bypass human instincts. Being targeted is a crime of manipulation, and reporting it openly is a sign of strength.
Core competencies: Students will be able to:
- Access: Match and layer Outer Shield settings and Inner Shield habits to neutralize complex, youth-targeted digital risks.
- Use: Make a "Dual-Shield Blueprint" that protects their device and account perimeter while reinforcing their mental verification habits.
- Understand: Deconstruct digital communications to identify the exact point where an Outer Shield was bypassed and where an Inner Shield is required.
This lesson and all associated documents (handouts, overheads, backgrounders) is available in an easy-print, pdf kit version.
Sponsored by

Disclaimer: CIRA provides financial support to MediaSmarts. This resource has been developed in collaboration between CIRA and MediaSmarts. MediaSmarts does not endorse any commercial entity, product or service.