Understanding by Design

1. Understand the company’s workplace internet use policy which includes social media use, information protection, and data classifications.
2. Recognize when and where the policy is applicable.
3. Identify potential risks of downloading files and software.
4. Know where to locate information when in doubt.

1. Correctly apply the workplace internet policy to their daily internet activities
2. Locate additional information when in doubt.

UNDERSTANDINGS

Students will understand that…

1. Adherence to the workplace internet policy helps protect the company and it’s restricted information.
2. How the policy impacts the employee’s personal use of the internet inside and outside of the workplace.

ESSENTIAL QUESTIONS

1. Why does the company consider some information to be sensitive or restricted?
2. What could result if sensitive or restricted information was made public?
3. What should employees consider when using social media when it relates to the company?
4. How could business be impacted due to a ransomware attack?

Acquisition

Students will know…

1. The different classification of company data and information (public, proprietary, and restricted)
2. In what settings information can be shared online.
3. What are acceptable personal uses of the internet during business hours.
4. How to correctly request software they need at work.
5. Where can additional information and guidance be located.

Students will be skilled at…

1. Recognizing if the company information they posses can be shared online.
2. Knowing acceptable use of social media while at work.
3. Locating additional policy information when in doubt.

Evaluative Criteria

Assessment Evidence

Acquisition

PERFORMANCE TASK(S):

Explain/Apply
Correctly classify company data/information as: Public, Propriety, or Restricted

1. Employee is presented with different type of information (earning statement, customer information, pricing sheets) and groups that information into the correct category

Acquisition

Self-Understanding
Employee can locate full workplace internet policy on company intranet site for additional information.

1. Clicks link policy page on intranet and reviews full policy.
2. Clicks link to software request page.

Meaning

Perspective

Employee is presented with a scenario where information that should not be shared is hinted at in a social media posting.

1. Employee determines if this is acceptable based on potential impact to the company.

Meaning

Empathy

Employee is presented with a scenario where customer information has been compromised by ransomware.

1. Employee identifies the potential impact to the customer and the company.

Transfer

OTHER EVIDENCE:

Self-Understanding

2 weeks after completion of training employee will receive an email with a link to download a time saving application to their computer or visit a restricted site.

1. Deleting the email/forwarding email to appropriate intake will prompt a positive response to the employee.
2. Clicking on the link will prompt a negative response and take the employee to a review of the workplace internet policy.

Randomized variations of these tests will be sent out to employees.

Learning will take place as a series of online modules delivered primarily via videos and interactive exercises.

1. Introduction to workplace internet policy
   • Video of why the policy is necessary. (Acquisition/Meaning)
   • Video on responsible use of social media. (Acquisition)
2. Company data and the internet
   • Video that defines different types of data as of Public, Proprietary and Restricted. (Acquisition)
   • Interactive activity to correctly classify data based on provided description. (Acquisition)
   • Video example of sharing company information online (Acquisition)
   • Interactive scenario where employee is identifies correct and incorrect internet activity that involves company data (Meaning/Transfer)
3. Ransomware and you
   • Video on ransomware tactics. (Acquisition)
   • Video example of ransomware impact to company and customers. (Acquisition/Meaning)
   • Interactive scenarios where employee is presented with different situations involving ransomware attacks and identifies impact to customers/company (Meaning/Transfer)
   • Video of how to request software (Acquisition)
   • Employee is given links to software request portal. (Acquisition)
4. Randomized summative assessment
   • Emails sent out to employees and their actions dictate their understanding of company policy. (Acquisition/Transfer)
   • Secondary emails sent out latter in the year to ensure compliance. (Acquisition/Transfer)