DSE ICT — Network Security and Data Protection: Lesson Prep Guide (Tutor Edition)

2026-11-03

Tutor lesson-prep guides · Secondary ICT

Every student owns accounts, yet few can explain why eight lowercase letters and eight mixed characters differ by more than three thousand times. This lesson skips the scare stories and works with numbers: password space, cracking time, multiplying probabilities and an expected loss, ending in three actions they can take tonight.

Objectives — Students can: (1) compute 208,827,064,576 passwords for 8 lowercase letters and 722,204,136,308,736 for the full 72-character set, then convert each into roughly 209 seconds and 8.4 days at 1,000,000,000 guesses per second; (2) take 1000 phishing emails at a 3% click rate and a 20% entry rate to 30 clicks and 6 compromised accounts, and show that two-factor authentication multiplies two probabilities; (3) use likelihood times impact to price risk at 10,000 before controls, 1,000 after, a net gain of 6,000, and state the three numbers of a 3-2-1 backup.

01 Prerequisites (3-minute check)

If any of these fails, fix it before the lesson starts.

Skill	Quick check	Pass mark
Binary and character encoding	How many values fit in one byte?	256, which is 2 to the power 8
Indices	What is 2 to the power 10 roughly?	About 1000, one thousand-block
Probability	How do you combine two independent events?	Multiply their probabilities
Files and backup	How does syncing differ from backing up?	Syncing copies deletions and encryption too

02 Lesson flow (60 minutes)

Time	Stage	Tutor does	Student does
0–8 min	Password warm-up	The same 8-place password with digits only and with four character classes	208,827,064,576 versus 722,204,136,308,736
8–18 min	Cracking time	Divide each space by 1,000,000,000 guesses per second	209 s and 8.4 days
18–30 min	Three attacks	Phishing, password reuse, ransomware	1000 emails yield 6 accounts
30–42 min	Three layers	Password manager, 2FA, updates and backups	Probabilities multiply, not add
42–52 min	Question drills	One space, one probability, one risk, one backup item	Eight minutes unaided
52–60 min	Exit check	Three written items marked on the spot	Independent

03 Teaching script (read it out)

Scene 1: Password space is the only honest measure

Eight lowercase letters give 26 to the power 8, which is 208,827,064,576 combinations. Eight characters drawn from upper case, lower case, digits and symbols give 72 to the power 8, which is 722,204,136,308,736 — over three thousand times more, and every extra place multiplies again. Make students press the calculator themselves, then draw the conclusion: length beats complexity because each added character is another multiplication, while adding a symbol class only lifts the base from 26 to 52, 62 or 72. Keep the hackers out of this section and stay with the arithmetic.

Ask students to restate why length beats symbols.

Scene 2: Phishing is a probability question

1000 emails at a 3% click rate is 30 clicks; 20% of those people type their password, so 6 accounts fall. That is why attackers do not need clever victims, only a small fraction. Two-factor authentication does not make the password harder to guess: it makes “has the password” and “has the second factor” conditions that must both hold, so the chance moves from 0.001 to 0.001 times 0.000001, about one in a billion. Students should say what that product means: two independent failures at once, not a longer password.

Ask students to restate which probability 2FA changes.

Scene 3: Defend in order of expected loss

Risk is likelihood times impact: a 20% chance of losing 50,000 is an expected 10,000; after backups and 2FA the chance drops to 2%, or 1,000, saving 9,000 against a control cost of 3,000, a net 6,000. The same arithmetic can reject spending: if the control costs more than it saves, skip it. Then land 3-2-1: three copies, two media, one offline. Ransomware can sit undetected longer than 7 days, so keep backups beyond 7 days and unplug the offline copy, because syncing will happily copy the encrypted files.

Ask students to restate why syncing is not a backup.

04 Question types and worked steps

Type	Example	Steps	Answer
Password space	8 places from a 72-character set	(1) size the character set (2) raise to the number of places (3) compare settings	722,204,136,308,736 combinations
Cracking time	1,000,000,000 guesses per second	(1) divide space by speed (2) convert to days (3) note the average is half	about 8.4 days
Phishing success	1000 emails, 3% click, 20% enter	(1) multiply layer by layer (2) keep the unit as people (3) name the conditional step	30 clicks, 6 accounts
Risk and backup	Likelihood times impact, then 3-2-1	(1) compute expected loss (2) recompute with controls (3) compare with cost	net 6,000

Sanity check (teach this): Sanity checks: password space is a whole number and each extra place multiplies the base; cracking time is stated as an average, so say “about” rather than a fixed figure; probabilities stay between 0 and 1 and only shrink when multiplied; expected loss is an average, not a promise; copies and media are different counts; write 208,827,064,576 as about 209 billion, never as 2 billion.

05 Independent practice (3 questions)

Question	Answer	What to watch
How many passwords of 8 lowercase letters exist?	208,827,064,576	Check they use 26 to the power 8, not 26 times 8
Of 1000 emails with a 3% click rate, how many clicks?	30	Check they multiply instead of adding percentages
Impact 50,000 at 20% likelihood: expected loss?	10,000	Check they convert the percentage to a decimal first

06 Common mistakes and what to say

Mistake	Student writes	Say this
Treating symbols as equal to length	“One more symbol makes it much safer”	Moving from 26 to 72 only changes the base; one extra place multiplies by the base again.
Quoting cracking time as certain	“It takes three days, guaranteed”	State the average as half the space, and say “about”, because the speed assumption drives the answer.
Describing 2FA as a longer password	“2FA makes my password complex”	2FA adds an independent condition; the gain comes from multiplying probabilities, and the password is unchanged.
Calling sync a backup	“My cloud sync covers me”	Sync copies the encrypted files too; the offline copy must be older than 7 days to survive ransomware.

07 Homework (paper, section and question numbers)

Secondary ICT chapter index — Copy three key terms from the network security chapter and define each in one sentence
Networks and data transmission (S4 chapter) — Redo question 2 in the practice set and describe the roles of packets and IP addresses
Network security and encryption (S5 chapter) — Read the common errors section and explain in your own words how symmetric and asymmetric encryption divide the work

08 Exit check (last 5 minutes)

Question	Answer	Decision
8 places from 72 characters: roughly how many digits?	About 15 digits	Wrong answer 576 means re-teach indices
1000 emails, 3% click, 20% enter: how many accounts?	6	Wrong answer 30 means re-teach layer-by-layer multiplication
What are the three numbers of 3-2-1 backup?	Three copies, two media, one offline	Wrong answer “three backups” means re-teach offline copies

09 Tutor FAQ

Which year is this for?

S4 ICT network security; S5 can use it as an entry point to encryption and networking.

Is 60 minutes enough?

Yes. If indices are shaky, spend ten minutes on powers of two and set the risk calculation as homework.

Is there practice attached?

The homework column links to site chapters, and the practice set carries answers.

Find a tutor — free Tutor Registration →

A TutorZone lesson-prep guide. Written by the TutorZone team; questions and lesson flow are original and are not taken from any school or publisher material.