National C3 Baseline Study: State of Cyberethics, Safety and Security Awareness in US Schools

National C3 Baseline Study: State of Cyberethics, Safety and Security Awareness in US Schools Funded by the National Cyber Security Alliance Contact: Davina Pruitt-Mentle, PhD Educational Technology Policy, Research and Outreach 301 503 8070 dpruitt@umd.edu

CONTENTS > Background and Research Objectives > Methodology > Sample Composition > Executive Summary Highlights > Detailed Findings Highlights > Appendix > Respondent Profiles 2

BACKGROUND NATIONAL CYBER ETHICS, CYBER SAFETY AND CYBER SECURITY EDUCATION RESEARCH PROJECT 3 > ETPRO is committed to youth and education and, through its National C3 Education Research Project, wants to empower citizens to make smart choices in the use of digital media. Improving citizen knowledge and awareness of Cyberethics, Cybersafety, and Cybersecurity (C3) concepts will provide them with the means to fully participate as informed, responsible, ethical and productive citizens---- enhancing the safety and security of our national infrastructure. > Current Research Projects > National C3 Education Study: Longitudinal Data > Review of Research: The Status of Cyberawareness in US Schools > Research Priorities in Cyberethics, Cybersafety and Cybersecurity: A Delphi Study > Effects of C3 Curriculum Integration on Attitudes of Teachers and Students > Students Perceptions of Internet Safety Modules > School-Based Staff Development for Teaching Cyberethics, Safety and Security Curriculum > Gender Differences in Student Attitudes Toward Internet Safety Curriculum

BACKGROUND NATIONAL CYBER ETHICS, CYBER SAFETY AND CYBER SECURITY EDUCATION RESEARCH PROJECT > C3 Framework: Cyberethics, Cybersafety and Cybersecurity > C3 Matrix Pruitt-Mentle, D. (2000). The C3 framework: Cyberethics, cybersafety and cybersecurity implications for the educational setting. MICCA, Baltimore, MD 4

RESEARCH OBJECTIVES National C3 Baseline Study: State of Cyberethics, Safety and Security Awareness in US Schools > 2005 Maryland Baseline Pilot Study > 2008 NCSA funded > The purpose of the survey was to explore the nature of Cyberethics, Cybersafety and Cybersecurity (C3) educational awareness policies, initiatives, curriculum and practices currently taking place in the U.S. public and private K-12 educational settings, and to establish base data for C3 awareness program design and provide the foundation for future studies either expanding particular subject areas or examining progress. 5

RESEARCH QUESTIONS National C3 Baseline Study: State of Cyberethics, Safety and Security Awareness in US Schools > What is the nature and extent of C3 learning in U.S. K- 12 schools? > Who are the major providers of C3 content in U.S. K-12 schools? > What is the perceived importance of C3 content for U.S. K-12 school programs? > What content is being delivered to educators, and how is it being taught? > What, if any, are the issues and barriers that impede the delivery of C3 content in U.S. K-12 school programs? 6

CONTENTS > Background and Research Objectives > Methodology > Sample Composition > Executive Summary Highlights > Detailed Findings Highlights > Teen Online Behavior > Teen Perceptions of Internet Safety > Families Talking to Teens about Internet Safety > Appendix > Respondent Profiles 7

METHODOLOGY 8 Sample Composition & Structure >1569 public and private U.S. K-12 educators >94 technology coordinators. >Descriptive analysis -Web-based survey >designed specifically for the study >organized around the C3 framework >questions emanating from the literature review and MD pilot >Input was added from educational organizations, internet safety curriculum providers, security specialists, and C3 experts. >2 versions >classroom educators >LEA technology coordinators. >Recruitment >State Educational Technology Directors Association (SETDA), and state, regional and local educational organizations, special interest groups, and educational media groups. >All data rendered anonymous >No data in this survey were out of range values. >Missing data were investigated to determine cause and coded as either not applicable to the respondent (structural), or applicable but no reply (non-response missing). >Used completed surveys or surveys with only structural missing data. >Data were input into the SPSS 16.0 statistical package for analysis.

METHODOLOGY Sample Composition & Structure >Open-ended survey question allowing them to enter their own words in a text box. >Group and individual interviews. >219 educators, local education agencies technology director/coordinators, and state technology directors and/or their representatives participated in these focus groups. >Focus groups and interviews lasted between one hour and one hour and 20 minutes. 9

METHODOLOGY Sample Composition & Structure 10

CONTENTS > Background and Research Objectives > Methodology > Sample Composition > Executive Summary Highlights > Detailed Findings Highlights > Appendix > Respondent Profiles 15

National C3 Baseline Study > Over half of educators responses revealed they do not know how their school informs students about protecting against, identifying, and responding to cyber-crime (e.g. identity theft, predators, cyberbullying, etc). > Almost 60% of educators surveyed indicated they do not know how their school informs students how to identify signs that documents and emails may contain viruses. > Policies focus on restrictions. Curriculum may include technology skills but only has limited content on C3 topics. 16

National C3 Baseline Study 17

National C3 Baseline Study Although not a part of your curriculum, if necessary or if the issues arise, how well prepared are you to talk about the below items. Rate each item on a scale of 1 to 5 with 1= Not at all prepared (I m not sure what to tell students. I would feel uncomfortable sharing guidance in this area) and 5 = very well pre-pared (I would feel comfortable sharing guidance in this area). 24

National C3 Baseline Study What C3 topics have come up with students, and what did teachers share? 27

National C3 Baseline Study Training 29

C3 Knowledge Comfort 31

C3 Knowledge Comfort Although perhaps not a part of your classroom curriculum or responsibility, if necessary or if the issues arise, how well prepared are you to talk about and give guidance to the topics listed below. Rate each item on a scale of 1 to 4 with 1= Not at all prepared (I m not sure what to tell students. I would feel uncomfortable sharing guidance in this area) and 4 = very well prepared (I would feel comfortable sharing guidance in this area). 08-09 N = 893 09-10 N = 1557 Cyberethics 2.9 2.6 2.5 Cybersafety 2.3 2.4 2.5 Cybersecurity 2.1 2.1 2.1 10-11 N = 2107 32

C3 Knowledge Comfort 08-09 N = 893 09-10 N = 1557 10-11 N = 2107 Cyberethics 2.9 2.6 2.5 Cybersafety 2.3 2.4 2.5 Cybersecurity 2.1 2.1 2.1 US AU Sing HK STDEV VAR Cyberethics 2.5 2.7 2.3 2.6 0.17.03 Cybersafety 2.5 2.5 2.5 2.5 0.17.01 Cybersecurity 2.1 2.1 1.8 2.6 0.36.13 Combined 2.4 2.4 2.2 2.5 0.18.03 33

CONTENTS > Background and Research Objectives > Methodology > Sample Composition > Executive Summary > Detailed Findings 34