Teacher's Guide

Learning objectives

• Explain Least privilege and Residual risk in the context of this lesson.
• Use the worked example to answer the three practice questions with supporting reasoning.
• Complete the activity, evaluate its result, and identify one limitation or possible improvement.

Prerequisites: The preceding grade sequence or equivalent introductory knowledge; begin with a short vocabulary review.

Suggested time: Three to five 45-minute sessions, including activity development and review. Language units need brief repeated spoken practice between sessions.

Teaching sequence

1. Introduce: Present the title as a question or problem. Ask learners what they notice and record two initial ideas without treating them as established facts.
2. Explain: Read the concept section and teach the two vocabulary items. Ask learners to paraphrase the distinction between them using a concrete example.
3. Model: Work through the example. Identify given information, assumptions, and the reason for the result or interpretation. Use a teacher's spoken model for language pronunciation.
4. Apply: Complete the activity individually or in pairs. Require a draft, a check against the task, and a brief revision. Discuss why different justified responses may be acceptable.
5. Retrieve and evaluate: Answer practice and vocabulary questions independently; use the answer key for feedback. Finish with the reflection and an activity rubric.

Assessment and differentiation

The companion CSV contains five retrieval entries: two vocabulary questions and three practice questions. Award one point per accurate answer, accepting equivalent wording that preserves the meaning. Language answers may be oral or written according to the goal. Revisit missed concepts rather than using the score as the only measure of learning.

Assess the activity separately with four criteria, each scored 0-2: correct use of lesson concepts; clear evidence or reasoning; completion of the task requirements; and a useful revision or acknowledged limitation. A 0 indicates missing or unsupported work, 1 indicates partial achievement, and 2 indicates clear achievement. Accept multiple designs, interpretations, and decisions when their reasons meet the criteria.

Support learners with a word bank, annotated example, smaller first step, or partner rehearsal. Extend by changing one assumption or constraint and asking how the result would change. Use invented personal details in financial and social tasks. Optional school character discussion can connect honesty, respect, cooperation, and stewardship to the activity; assess the subject knowledge and reasoning separately.

Student Worksheet

Concept and helping material

A threat model identifies assets, access, possible harms, and mitigations. Authentication and authorization answer different questions. Least privilege gives an actor only the permissions needed for a stated task. Security decisions involve tradeoffs and require evidence about effectiveness. Activities remain fictional and do not probe real accounts or systems.

Vocabulary

• Least privilege: Giving an actor only the access needed for the specified role or task.
• Residual risk: Risk remaining after the chosen protections are applied.

Worked example

A fictional learner can view a worksheet but cannot alter its answer key. A successful login establishes identity, while separate permission rules constrain editing.

Investigation or design task

Model a fictional homework application. Specify assets, three misuse scenarios, access rules, a backup plan, and residual risk without testing actual services.

Record your work: State the goal; show your drawing, dialogue, calculation, data, or argument; explain one choice; and describe one check or revision. Identify a limitation rather than claiming your work proves more than it does.

Practice

1. Does a successful login establish every editing permission?
2. Why separate access roles?
3. Does one mitigation remove all risk?

Vocabulary retrieval

1. Define Least privilege.
2. Define Residual risk.

Reflection

Choose one answer or activity decision. Explain the evidence, calculation, language pattern, or reasoning that supports it. Describe one change of context or assumption that could change your conclusion.

Answer Key

1. No.
2. Different tasks require different permissions.
3. No. Remaining risks and new conditions must be considered.

Vocabulary answers are the definitions above and appear in the CSV. Activity and reflection responses vary; use the teacher rubric and require specific reasoning tied to the task. A different supported interpretation is acceptable where the question allows it.

Source Reference

Everything You Need to Ace Computer Science and Coding in One Big Fat Notebook, PDF viewer pages 475 (1-based). Conceptual background; the examples, calculations, questions, and activities here are original adaptations. These pages were inspected in the supplied file; viewer numbering may differ from printed numbering. No source worksheets or illustrations are reproduced.

Companion question CSV | Grade guide