EXERCISE MODE: ACTIVE

CYBERSMART
READY

K-12 Educator Cybersecurity Tabletop Exercise

Practice safer decisions before a real cybersecurity incident occurs. Draw a scenario, make the call, face an inject, then compare your response with course-aligned guidance — built for educators, campus leaders, and school staff.

30Scenarios
5Course Modules
30Capacity Indicators
6CSF Functions

How to Play

Designed for educators, campus leaders, coaches, counselors, librarians, office staff, and other school employees. Play as teams or use the scenarios for individual reflection.

01

Form Teams

Use 2–6 teams of 3–5 people. Pick a spokesperson and, if desired, a recorder.

02

Draw a Scenario

Use the generator or select a card from the 30-scenario library. Everyone works from the same brief.

03

Deliberate

Take 5–8 minutes. Use the CyberSmart Response framework below and commit to a first action.

04

Reveal the Inject

Open the complication. Teams get 2–3 minutes to adjust their plan without erasing the original decision.

05

Present and Score

Teams present. Award 0–2 points each for protection, verification, action, reporting, policy, and learning.

06

Reveal Guidance

Compare the team plan with the course-aligned response, discuss gaps, then let the winning team roll the die.

🎲
RESULT

Click the die to roll for team movement. The winning team rolls after each round.


CyberSmart Response

Every response should answer these six questions. The goal is not to become a security engineer; it is to make a safer, role-appropriate decision and know when to ask for help.

Q1 — Protect

What is at risk?

Name the people, data, accounts, devices, services, or school operations you are protecting.

Q2 — Pause

What feels wrong?

Identify warning signs, missing information, pressure tactics, or assumptions that need to be checked.

Q3 — Verify

How will you confirm?

Use a trusted path that does not depend on the suspicious message, caller, link, QR code, or request.

Q4 — Act & Report

What happens first?

Stop risky activity, choose the safest first action, preserve useful observations, and report when appropriate.

Q5 — Policy & Recovery

What process applies?

Use district-approved tools, access methods, reporting routes, backups, and recovery procedures.

Q6 — ACE

What changes next?

Articulate the lesson, Connect it to current practice, and Extend it into a concrete next action.


The Six Functions

Scenarios map to the NIST CSF 2.0 functions so teams can connect classroom decisions to a recognized national framework.

GVGovern
IDIdentify
PRProtect
DEDetect
RSRespond
RCRecover

Scenario Generator

Filter by module, role, or difficulty — or leave everything on “Any” for a random draw from the full library.

● SYSTEM READY30 SCENARIOS LOADED
🎲

Set your filters and generate a scenario.


All 30 Scenarios

Each scenario maps directly to one course capacity-matrix indicator. Open a card to view the situation, discussion prompts, delayed inject, response guidance, and framework connections.


Capacity Matrix Coverage

The library is intentionally balanced: six scenarios per module, one for each capacity indicator, for complete 30-item coverage.

#ModuleScenarioCapacity Matrix Indicator