Computer Science · Grade 9

Active learning ideas

Cybersecurity Ethics and Laws

Active learning works well for cybersecurity ethics and laws because students grapple with gray areas where abstract rules meet real dilemmas. Role-plays and debates let them test ideas in safe spaces before applying them to pressing issues like privacy or hacking.

• Ontario Curriculum Expectations
• CS.HS.CY.7
• CS.HS.S.14

• 35–50 min
• Pairs → Whole Class
• 4 activities

Activity 01

• Philosophical Chairs
• 45 min · Small Groups

Debate Carousel: Ethical Hacking

Assign small groups to pro or con positions on scenarios like white-hat hacking. Groups rotate every 10 minutes to debate at different stations, recording key arguments. End with a whole-class synthesis vote and personal reflection journal.

Analyze the ethical implications of hacking, even for 'good' intentions.

Facilitation Tip

During the Debate Carousel, assign clear time limits for each round to keep discussions focused and ensure all voices are heard.

What to look for

Pose the following scenario: 'A hacker discovers a critical security flaw in a hospital's patient record system that could lead to a massive data breach. They have the option to report it anonymously to the hospital or to exploit it for personal gain. What are the ethical considerations for the hacker in this situation, and what legal ramifications might they face?' Facilitate a class debate on the hacker's responsibilities.

• Analyze
• Evaluate
• Self-Awareness
• Social Awareness

Activity 02

• Jigsaw
• 50 min · Small Groups

Jigsaw: Privacy Laws

Form expert groups to study one framework, such as PIPEDA or Criminal Code cybercrime sections, using provided resources. Regroup into mixed teams where experts teach peers, then discuss applications to current events. Create a class chart of comparisons.

Compare different legal frameworks related to data privacy and cybercrime.

Facilitation Tip

For the Jigsaw Research activity, provide a template for expert groups to organize their findings on privacy laws to streamline sharing.

What to look for

Present students with short case studies describing different cybersecurity scenarios. Ask them to identify whether the actions described are ethically sound or questionable, and to cite specific laws or ethical principles that apply. For example, 'An employee shares their company password with a colleague to save time. Is this ethically acceptable? Why or why not?'

• Understand
• Analyze
• Evaluate
• Relationship Skills
• Self-Management

Activity 03

• Philosophical Chairs
• 35 min · Pairs

Role-Play Scenarios: Security vs Privacy

Pairs receive cards with roles like government official, citizen, or hacker in a surveillance dilemma. Perform short skits, then switch roles and debrief in whole class on ethical trade-offs. Record insights on shared digital board.

Critique the balance between national security and individual privacy in cybersecurity policies.

Facilitation Tip

Use the Role-Play Scenarios to assign roles in advance so students prepare arguments grounded in their assigned perspectives.

What to look for

Divide students into small groups to research and present on different aspects of cybersecurity law (e.g., PIPEDA, Criminal Code sections on cybercrime). After each presentation, group members will use a simple rubric to assess: 'Did the presenter clearly explain the law? Did they provide a relevant real-world example? Did they address potential ethical conflicts related to this law?'

• Analyze
• Evaluate
• Self-Awareness
• Social Awareness

Activity 04

• Philosophical Chairs
• 40 min · Small Groups

Dilemma Stations: Cyber Ethics

Set up stations with real-world cases, like ransomware or data leaks. Small groups analyze one case per station, propose solutions, and rotate. Conclude with gallery walk to view and critique peers' work.

Analyze the ethical implications of hacking, even for 'good' intentions.

Facilitation Tip

At each Dilemma Station, place a timer to encourage quick decision-making and immediate justification of choices.

What to look for

Pose the following scenario: 'A hacker discovers a critical security flaw in a hospital's patient record system that could lead to a massive data breach. They have the option to report it anonymously to the hospital or to exploit it for personal gain. What are the ethical considerations for the hacker in this situation, and what legal ramifications might they face?' Facilitate a class debate on the hacker's responsibilities.

• Analyze
• Evaluate
• Self-Awareness
• Social Awareness

A few notes on teaching this unit

Approach this topic by balancing concrete examples with open-ended questions, as research shows students retain ethical reasoning better when it’s tied to relatable scenarios. Avoid lecturing on laws—let students uncover nuances through guided discovery. Emphasize that ‘right’ answers often depend on context, mirroring real-world decision-making.

Successful learning looks like students articulating clear ethical stances supported by evidence, citing specific laws or principles, and revising views after peer discussion. They should connect theory to scenarios, showing they understand trade-offs between security and rights.

---

Watch Out for These Misconceptions

• During the Debate Carousel, some students may assume all hacking is illegal with no exceptions.

  During the Debate Carousel, redirect students to the provided case studies on white-hat hacking and bug bounties, asking them to identify where authorization or intent changes the legality of actions.

• During the Role-Play Scenarios, students might claim national security always overrides privacy.

  During the Role-Play Scenarios, provide the Charter of Rights and Freedoms excerpt to groups, asking them to argue both sides using specific rights as evidence.

• During the Jigsaw Research activity, students may think cybersecurity laws are the same globally.

  During the Jigsaw Research activity, have expert groups compare PIPEDA with GDPR in a Venn diagram, highlighting key differences in data handling and enforcement.

---

Methods used in this brief

• Philosophical Chairs
• Jigsaw