Cyber Safety Needs to be Included in Curriculum

More children than ever are using the internet, they’re using it younger than ever before and that means increased exposure to cyber threats.

What should be taught to them and how and when needs to be clarified and included in the Australian Curriculum according to a new report led by Edith Cowan University (ECU) Associate Professor and Security Research Institute (SRI) Deputy Co-Director Dr Nicola Johnson.

Assoc Prof Johnson has recommended consultation around cybersecurity curriculum needs to occur.

“We need to start early with five-year-olds. We need to get the curriculum ‘right’ for WA. There is a need to educate people from a young age to protect themselves from common cybersecurity threats,” says Prof Johnson.

The Cyber Security Cooperative Research Centre 2022 report determined that WA school children might miss out on learning key cybersecurity skills in the current curriculum.

“Exactly what needs to be taught surrounding cybersecurity needs to be very clear within the curriculum. Teachers need professional learning to help them teach cybersecure behaviour effectively and confidently."

While primary students are taught about the dangers of using the internet and how to be safe online, the report pointed to the vagueness of what is to be covered in the new version of the Australian Curriculum.

“It is only in year 11 and 12 elective subjects that students are taught what is now fundamental aspects of cybersecurity; this is too late,” Dr Johnson explained.

In year 11, students completing Computer Science as a part of their WA ATAR are required to learn the role of ethical hacking in network security, penetration testing, encryption, and two-factor authentication.

“There is a strong case for this key knowledge as well as Australian privacy principles and laws to be explicitly taught at much younger ages, given how cyber criminals so quickly and creatively come up with new ways to scam our citizens.”

Australia is experiencing a critical shortfall in the cybersecurity workforce, with an estimated 17,000 new jobs by 2026, Dr Johnson says more intensive cyber security teaching in schools could ease future shortages.

“By teaching content typically learned in senior secondary to younger children, we can reduce both future job shortages and the enormous cost of cyber crime,” Dr Johnson said.

“We acknowledge that for these changes to be implemented, attention needs to be given to resourcing, particularly in regional schools. This can be achieved by further consultation with industry providers and the Australian Cyber Security Centre (ACSC).”

Dr Johnson is co-facilitating stakeholder consultation workshops at the end of November. Interested participants should make contact. [email protected]