Digital literacy is the ability to use digital technologies effectively, critically, safely and responsibly. It includes finding information, communicating, creating content, protecting data and understanding the consequences of digital actions.
Example: Knowing how to search for information is useful, but digital literacy also requires judging whether the result is trustworthy.
Practice: List five digital activities and identify the skill needed for each.
Remember: Digital literacy combines technical ability with critical judgement and responsible behaviour.
2
Digital Footprints and Long-Term Online Records
A digital footprint is the trail of information connected with online activity. Posts, comments, account records and shared media can remain accessible or be copied even after the original user removes them.
Example: A screenshot can preserve a message after the original post has been deleted.
Practice: Identify five actions that can contribute to a digital footprint.
Remember: Think before posting because control over shared information can be difficult to regain.
3
Online Identity, Reputation and Personal Branding
Online identity is shaped by what people publish, how they interact and what others share about them. Responsible digital behaviour helps build a positive and accurate online reputation.
Example: Public comments made under a real name may later be seen by schools, employers or other communities.
Practice: Write four rules for maintaining a respectful online reputation.
Remember: Online behaviour can have offline consequences.
4
Advanced Web Search and Research Skills
Effective online research involves choosing precise keywords, refining searches, comparing sources and tracing important claims back to reliable evidence. Search ranking does not automatically indicate truth.
Example: Adding specific terms such as a date, organisation or document type can narrow an overly broad search.
Practice: Rewrite three vague search queries to make them more precise.
Remember: Finding a webpage is only the beginning of research; the information must still be evaluated.
5
Evaluating Online Sources and Evidence
Source evaluation considers authorship, expertise, evidence, publication date, purpose, transparency and corroboration. Reliable conclusions are stronger when important claims can be confirmed through independent trustworthy sources.
Example: An anonymous post making a major scientific claim without evidence deserves more caution than a transparent research source.
Practice: Create a six-question checklist for evaluating a webpage.
Remember: Professional appearance alone does not prove reliability.
6
Misinformation, Disinformation and Verification
Misinformation is inaccurate information shared without necessarily intending harm, while disinformation is deliberately created or spread to mislead. Verification involves checking evidence, context, date and independent sources before sharing.
Example: An old photograph may be reposted with a false claim that it shows a current event.
Practice: Write a verification process for a surprising viral claim.
Remember: Emotional or sensational content deserves careful checking before amplification.
7
Copyright, Attribution and Responsible Content Use
Digital content is often protected by copyright even when it is easy to copy. Students should understand permissions, licences, attribution and the difference between using a source and presenting someone else’s work as their own.
Example: Finding an image through a search engine does not automatically make it free to reuse without conditions.
Practice: Explain how attribution differs from permission to reuse content.
Remember: Easy access to digital content does not remove intellectual-property rights.
🔐 Privacy and Account Security
8
Personal Data and Privacy
Personal data can include names, contact information, photographs, identifiers, location details and other information linked to a person. Privacy-conscious users share only what is necessary and consider who can access it.
Example: A photograph can unintentionally reveal a school name, address or location in the background.
Practice: Classify examples as public information, personal information or highly sensitive information.
Remember: Information can become sensitive when several small details are combined.
9
App Permissions and Data Collection
Apps may request access to the camera, microphone, contacts, files or location. Permissions should be considered according to whether the requested access is genuinely needed for the app’s function.
Example: A simple calculator normally has little reason to require access to a user’s contacts.
Practice: Review the types of permissions common apps may request and identify which are functionally necessary.
Remember: Permission requests deserve attention rather than automatic approval.
10
Strong and Unique Password Practices
Account security improves when passwords are long, difficult to guess and not reused across important accounts. A password manager can help users maintain unique credentials without memorising every password.
Example: Reusing one password means a breach of one service can put several other accounts at risk.
Practice: Explain why password length and uniqueness matter without writing any real passwords.
Remember: Never share real passwords in classroom exercises or messages.
11
Multi-Factor Authentication and Account Protection
Multi-factor authentication adds another verification step beyond a password. This can reduce the chance that a stolen password alone will give an attacker access to an account.
Example: An account may require both a password and approval through a trusted authentication method.
Practice: Explain how a second authentication factor changes account security.
Remember: Verification codes and approval prompts should be treated as sensitive.
🛡️ Cyber Threats and Defensive Habits
12
Recognising Phishing Attempts
Phishing messages try to persuade users to reveal information, open malicious attachments or visit deceptive pages. Warning signs can include unexpected urgency, unusual requests, suspicious sender details and mismatched destinations.
Example: A message claiming an account will be closed immediately unless the user enters credentials through an unexpected link should be treated cautiously.
Practice: Analyse a fictional phishing message and mark its warning signs.
Remember: When uncertain, access an account through a known official route rather than an unexpected message link.
13
Social Engineering and Manipulation
Social engineering targets human trust, fear, curiosity or authority rather than relying only on technical weaknesses. Attackers may impersonate trusted people or organisations to obtain information or actions.
Example: Someone pretending to be support staff may ask for a verification code that legitimate staff should not need.
Practice: Identify which emotions a fictional scammer is trying to exploit.
Remember: Verify identity independently before responding to unusual requests.
14
Malware and Common Forms of Malicious Software
Malware is software designed to cause harm, steal information, disrupt systems or gain unauthorised access. Defensive habits include trusted software sources, updates, careful handling of files and appropriate security tools.
Example: An unknown attachment may contain malicious code disguised as an ordinary document.
Practice: Compare viruses, ransomware and spyware at a high level by their effects.
Remember: Do not experiment with real malware; cybersecurity learning should remain defensive and safe.
15
Software Updates and Vulnerability Reduction
Software can contain security weaknesses that developers later fix. Installing legitimate security updates helps close known vulnerabilities and can improve reliability.
Example: An outdated browser may lack security fixes included in a newer supported version.
Practice: Create an update checklist for a personal computer or phone.
Remember: Use trusted update mechanisms rather than unknown download links.
16
Network Safety and Public Wi-Fi Awareness
Networks connect devices and allow information to travel between them. Public or unfamiliar networks require extra caution because users may not know who manages them or what protections are in place.
Example: Sensitive account activity should be approached carefully when using an unfamiliar public network.
Practice: Write five safe habits for using shared or public networks.
Remember: A network name that looks familiar does not by itself prove the network is trustworthy.
17
Backups and Protecting Important Data
Backups create additional copies of important information so that files can be recovered after device failure, loss or other incidents. Important backups should not depend entirely on the same device as the original data.
Example: Keeping the only copy of an assignment on one laptop creates a single point of failure.
Practice: Design a simple backup plan for school documents and photographs.
Remember: A backup is useful only if it can be accessed and restored when needed.
🌐 Safe Online Participation
18
Social Media Privacy and Safe Sharing
Social media can connect communities but also increases the speed and reach of information sharing. Users should review audiences, avoid unnecessary personal details and ask permission before posting information about others.
Example: Sharing a group photograph without asking can affect the privacy of everyone shown.
Practice: Create a pre-post checklist containing audience, privacy, accuracy and permission questions.
Remember: Privacy settings reduce exposure but cannot guarantee that shared content will remain private.
19
Cyberbullying, Harassment and Reporting
Cyberbullying and online harassment can cause real harm. Safer responses include avoiding retaliation, preserving relevant evidence where appropriate, using platform safety tools and seeking support from trusted adults or school authorities.
Example: Repeated humiliating messages in a group chat can be harmful even when the sender calls them a joke.
Practice: Create a safe response plan for a student receiving repeated abusive messages.
Remember: Serious threats or immediate danger should be escalated to responsible adults or appropriate authorities.
20
Online Scams and Fraud Warning Signs
Scams may use fake prizes, impersonation, urgent payment requests or offers that appear unusually attractive. Verification, patience and scepticism toward unexpected requests reduce risk.
Example: A message saying you have won a contest you never entered should raise suspicion.
Practice: Identify five warning signs in a fictional online offer.
Remember: Urgency is often used to prevent people from checking a claim carefully.
21
Safer Online Shopping
Before purchasing online, users should verify the seller, understand the product and price, review return information and use trusted payment methods. Fake stores can imitate professional websites.
Example: A heavily discounted product on an unfamiliar site deserves additional verification before payment.
Practice: Develop a six-point checklist for evaluating an unfamiliar online shop.
Remember: A polished website and a low price are not proof that a seller is legitimate.
22
Digital Payment Safety
Digital payments require careful verification of recipients and protection of authentication information. Passwords, PINs, one-time codes and approval prompts should not be shared with people requesting them unexpectedly.
Example: Before confirming a payment, check the recipient and amount rather than relying only on a message or QR code.
Practice: Write a safe sequence for checking a digital payment request before approving it.
Remember: Pause and verify before authorising money transfers.
🤖 Emerging Digital Challenges
23
AI-Generated Content and Verification
Generative AI can create convincing text, images, audio and other content, but generated material may contain errors or misleading information. Important claims still require reliable verification.
Example: A confident AI-generated explanation can contain a false date or invented reference.
Practice: Create a four-step process for checking factual claims in AI-generated content.
Remember: Fluency and confidence do not prove accuracy.
24
Deepfakes and Synthetic Media Awareness
Synthetic media can alter or generate realistic-looking images, video or audio. Context, source verification and corroboration become increasingly important when media could have been manipulated.
Example: A short viral video of a public figure should not automatically be treated as authentic without verification.
Practice: List questions to ask before sharing a surprising video clip.
Remember: Seeing or hearing something online is no longer sufficient evidence that it happened exactly as presented.
🤝 Digital Citizenship and Responsible Technology Use
25
Digital Citizenship, Rights and Responsibilities
Digital citizenship involves participating online safely, ethically and respectfully. Users have rights such as privacy and expression, alongside responsibilities toward other people’s safety, dignity and intellectual property.
Example: Freedom to comment online does not justify targeted harassment of another person.
Practice: Create two columns listing digital rights and corresponding responsibilities.
Remember: Responsible online participation combines freedom with accountability.
26
Netiquette and Respectful Online Communication
Netiquette refers to respectful communication practices in digital spaces. Tone can be harder to interpret online, so clear language, context and consideration are important.
Example: A short message written in anger can appear harsher when the reader cannot hear the speaker’s tone.
Practice: Rewrite an aggressive online reply as a constructive response.
Remember: A screen does not remove the need for empathy and respect.
27
Digital Wellbeing and Attention Management
Healthy technology use supports learning, relationships, sleep and physical activity instead of constantly interrupting them. Attention can be protected by managing notifications, creating focused study periods and taking appropriate breaks.
Example: Turning off non-essential notifications during homework can reduce repeated distractions.
Practice: Audit one day’s technology use and identify two changes that could improve focus or rest.
Remember: Digital wellbeing depends on how, why and when technology is used, not only total screen time.
28
Responding to a Cybersecurity Incident
If an account or device may be compromised, users should remain calm, stop risky interaction, seek trusted help and use legitimate recovery procedures. Relevant account security measures may need to be reviewed from a safe device.
Example: If an account sends messages the owner did not create, the user should report the issue and follow the service’s official recovery process.
Practice: Arrange a set of defensive incident-response actions in a sensible order.
Remember: Quick reporting and official recovery channels can limit harm.
29
Cybersecurity Careers and Ethical Practice
Cybersecurity careers include security analysis, digital forensics, risk management, secure software development and incident response. Professionals require technical skills, communication, ethics and respect for legal authorisation.
Example: A security professional tests systems only with appropriate permission and defined scope.
Practice: Choose one defensive cybersecurity career and identify five useful skills.
Remember: Cybersecurity knowledge should be used to protect systems and people, not access systems without permission.
30
Creating a Personal Digital Safety Plan
A digital safety plan combines account protection, privacy settings, backups, verification habits, safe communication and a clear response process for problems. Reviewing the plan periodically helps it remain useful as technology changes.
Example: A student can review important accounts, enable available security protections and identify trusted adults to contact if an online problem occurs.
Practice: Create a personal checklist covering passwords, authentication, privacy, backups, scams, social media and incident reporting.
Remember: Cyber safety is strongest when secure habits are routine rather than used only after something goes wrong.