🗽

⚖️ NYS Education Law §805-b — mandatory digital literacy and cybersecurity instruction

New York K-12 Cybersecurity
Standards Alignment

Framework:NY K-12 Computer Science & Digital Fluency Standards (2020)

Effective:2021 (phased: K–5 by 2023, 6–8 by 2024, 9–12 by 2025)

Grade Bands:K–12 (cybersecurity emphasis grades 4–12)

New York's K-12 Computer Science & Digital Fluency Learning Standards (2020) establish mandatory CS/digital literacy education across all grade bands. The Cybersecurity (CY) strand and Digital Literacy (DL) strand provide specific competencies for recognizing threats, protecting personal data, and responding to online risks. Districts must demonstrate standards alignment for curriculum adoption.

✅

Covers all 37 missions with alignment to NY CY and DL strand codes across grades K–12; addresses 91% of the Cybersecurity strand competencies.

Mission × Standard Alignment

All 36 missions mapped to New York's framework codes, with the specific scene or objective that covers each standard.

Mission	New York Standard Codes	What's Covered	Status
🔐 Password Fortress Ages 8–12 · 100 XP	4-6.CY.1 7-8.CY.2 9-12.CY.1	Password strength quizzes map to grades 4–12 CY threat recognition competencies	✓ Covered
🎣 Phishing Pond Ages 8–12 · 100 XP	4-6.CY.3 7-8.CY.3 9-12.CY.3	Phishing email recognition; domain analysis; social engineering tactics	✓ Covered
🔏 Privacy Shield Ages 8–12 · 100 XP	4-6.DL.3 7-8.DL.3 9-12.DL.3	Personal data identification; app permissions; digital footprint management	✓ Covered
🌐 Social Savvy Ages 8–14 · 100 XP	4-6.DL.1 7-8.DL.1 4-6.CY.3	Digital permanence; privacy settings; safe social media behaviors	✓ Covered
🦠 Malware Maze Ages 10–14 · 120 XP	7-8.CY.1 9-12.CY.1 7-8.CY.2	Malware type classification; ransomware case studies; suspicious download evaluation	✓ Covered
🕵️ Phishing Inbox Detective Ages 10–14 · 120 XP	7-8.CY.3 9-12.CY.3 9-12.CY.4	Realistic phishing inbox; sender domain analysis; link destination evaluation; Cipher AI	✓ Covered
🔐 Password Fortress Interactive Ages 10–14 · 150 XP	7-8.CY.1 9-12.CY.1	Entropy-based password creation; passphrase techniques; dictionary attack demonstration	✓ Covered
🔑 Two-Factor Fortress Ages 10–14 · 150 XP	9-12.CY.2 7-8.CY.2 9-12.CY.4	2FA mechanism understanding; SIM-swap attack scenario; multi-factor authentication setup	✓ Covered
📵 Scam Spotter Ages 10–14 · 150 XP	7-8.CY.3 9-12.CY.3 7-8.DL.2	Robocall IVR; government impersonation scams; SMS phishing decision trees	✓ Covered
📍 Privacy Guardian Ages 10–14 · 150 XP	7-8.DL.3 9-12.DL.3 7-8.CY.3	Geotagged photo analysis; social profile privacy audit; location sharing risks	✓ Covered
🛡️ Cyberbullying Defender Ages 10–14 · 150 XP	4-6.DL.1 7-8.DL.1 9-12.DL.1	Cyberbullying classification; bystander response dialogue; platform reporting walkthrough	✓ Covered
🤖 AI & Deepfake Detective Ages 12–18 · 150 XP	9-12.CY.3 9-12.DL.2 9-12.CY.4	AI image artifact detection; voice clone scenarios; AI chatbot manipulation	✓ Covered
📡 Smart Device & Public Wi-Fi Defender Ages 10–16 · 150 XP	9-12.CY.1 9-12.CY.2 9-12.CY.4	IoT device security audit; evil-twin Wi-Fi identification; smart speaker data risks	✓ Covered
🪪 Identity Theft & Digital Footprint Defender Ages 12–18 · 150 XP	9-12.DL.3 9-12.CY.3 9-12.CY.4	Profile risk pin identification; identity theft scenario classification; account hardening	✓ Covered
🎮 Gaming Safety Defender Ages 8–16 · 150 XP	4-6.CY.3 7-8.CY.3 7-8.DL.1	Gaming platform friend request risk analysis; in-game scam detection; voice chat safety	✓ Covered
🤖 Deepfake & AI Scam Defender Ages 10–18 · 150 XP	9-12.CY.3 9-12.CY.4 9-12.DL.3	AI voice clone call scenarios; deepfake video classification; AI chatbot catfish thread	✓ Covered
📡 Smart Device & IoT Defender Ages 10–18 · 250 XP	9-12.CY.1 9-12.CY.2 9-12.DL.3	IoT default credential audit; least-privilege smart speaker audit; connected toy risk triage	✓ Covered
🔍 Synthetic Media Detective Ages 12–18 · 250 XP	9-12.DL.2 9-12.CY.4 9-12.CY.3	Viral clip verdict; voice message vault; screenshot squad — 3-scene synthetic media lab	✓ Covered
🛡️ Two-Factor Titan Ages 10–18 · 175 XP	9-12.CY.2 9-12.CY.4 9-12.CY.1	Credential stuffing stopped by 2FA; SIM-swap attack on SMS codes; MFA fatigue push-bomb recognition; authenticator setup simulation — 9-12.CY.2 (cybersecurity threat response); 9-12.CY.4 (advanced account security)	✓ Covered
🧠 Social Engineering Sentinel Ages 10–18 · 175 XP	7-8.CY.3 9-12.CY.3 9-12.DL.2	Pretext IT call; school impersonation scenario; physical tailgating; parent authority escalation; 4-vector boss battle — NY CY.3 social engineering threat recognition; NY DL.2 safe digital communication under pressure	✓ Covered

CSTA K-12 CS Standards (2017 Revised) — Universal Crosswalk

Every mission also maps to the national CSTA K-12 Computer Science Standards — the universal K-12 cybersecurity crosswalk districts cite alongside their state's framework.

Mission	CSTA Codes	What's Covered
🔐 Password Fortress Ages 8–12 · 100 XP	NI-2-6 NI-2-7 IC-2-4	Password Fortress — encryption concepts (NI-2-6); safe credential practices (NI-2-7); cybersecurity ethics (IC-2-4)
🎣 Phishing Pond Ages 8–12 · 100 XP	NI-2-7 IC-2-4 IC-3B-4	Phishing Pond — social engineering defense (NI-2-7); phishing as computing impact (IC-2-4); advanced threat analysis (IC-3B-4)
🔏 Privacy Shield Ages 8–12 · 100 XP	IC-2-4 IC-2-5 NI-2-6	Privacy Shield — privacy and personal data (IC-2-4, IC-2-5); digital data protection (NI-2-6)
🌐 Social Savvy Ages 8–14 · 100 XP	IC-2-4 IC-2-5	Social Savvy — digital citizenship and online identity (IC-2-4); societal impacts of computing (IC-2-5)
🦠 Malware Maze Ages 10–14 · 120 XP	NI-2-7 NI-3A-7 IC-2-4	Malware Maze — malware and network threats (NI-2-7); advanced network security (NI-3A-7); computing risks (IC-2-4)
🕵️ Phishing Inbox Detective Ages 10–14 · 120 XP	NI-2-7 NI-3A-7 IC-3B-4	Phishing Inbox Detective — advanced phishing simulation (NI-3A-7); threat analysis (IC-3B-4); safe behaviors (NI-2-7)
🔐 Password Fortress Interactive Ages 10–14 · 150 XP	NI-2-6 NI-2-7 NI-3A-6	Password Fortress Interactive — encryption and entropy (NI-2-6, NI-3A-6); authentication practice (NI-2-7)
🔑 Two-Factor Fortress Ages 10–14 · 150 XP	NI-2-7 NI-3A-6 NI-3A-7	Two-Factor Fortress — MFA implementation (NI-3A-6); authentication threats (NI-3A-7); safe access (NI-2-7)
📵 Scam Spotter Ages 10–14 · 150 XP	NI-2-7 IC-2-4 IC-3B-4	Scam Spotter — social engineering and phone-based threats (NI-2-7); computing impacts (IC-2-4); advanced analysis (IC-3B-4)
📍 Privacy Guardian Ages 10–14 · 150 XP	IC-2-4 IC-2-5 IC-3B-4	Privacy Guardian — privacy protection (IC-2-4, IC-2-5); advanced digital citizenship (IC-3B-4)
🛡️ Cyberbullying Defender Ages 10–14 · 150 XP	IC-2-4 IC-2-5 IC-3A-5	Cyberbullying Defender — computing impacts on individuals (IC-2-4); community impacts (IC-2-5); inclusive communities (IC-3A-5)
🤖 AI & Deepfake Detective Ages 12–18 · 150 XP	IC-3B-4 NI-3A-7 IC-2-4	AI & Deepfake Detective — advanced threats from computing (IC-3B-4); AI network threats (NI-3A-7); computing risks (IC-2-4)
📡 Smart Device & Public Wi-Fi Defender Ages 10–16 · 150 XP	NI-2-7 NI-3A-7 NI-3A-6	Smart Device & Wi-Fi Defender — IoT and network security (NI-2-7, NI-3A-7); cryptography in practice (NI-3A-6)
🪪 Identity Theft & Digital Footprint Defender Ages 12–18 · 150 XP	IC-2-4 IC-3B-4 NI-3A-7	Identity Theft Defender — identity privacy (IC-2-4); advanced identity threats (IC-3B-4); network-based attacks (NI-3A-7)
🎮 Gaming Safety Defender Ages 8–16 · 150 XP	IC-2-4 IC-2-5 NI-2-7	Gaming Safety Defender — online safety in games (IC-2-4, IC-2-5); gaming network threats (NI-2-7)
🤖 Deepfake & AI Scam Defender Ages 10–18 · 150 XP	IC-3B-4 NI-3A-7 IC-2-4	Deepfake & AI Scam Defender — AI-generated threats (IC-3B-4); network-based AI scams (NI-3A-7); defense behaviors (IC-2-4)
📡 Smart Device & IoT Defender Ages 10–18 · 250 XP	NI-3A-6 NI-3A-7 IC-3B-4	Smart Device & IoT Defender — IoT encryption (NI-3A-6); IoT threat vectors (NI-3A-7); emerging tech risks (IC-3B-4)
🔍 Synthetic Media Detective Ages 12–18 · 250 XP	IC-3B-4 NI-3A-7 IC-2-5	Synthetic Media Detective — synthetic media as computing threat (IC-3B-4); AI network risks (NI-3A-7); societal impacts (IC-2-5)
🤖 Mind Games: Outsmarting AI Tricksters Ages 12–18 · 175 XP	IC-3A-5 DA-3A-4 CS-3A-4	Mind Games — responsible use of AI tools (IC-3A-5); evaluating AI-generated data authenticity (DA-3A-4); understanding automated system vulnerabilities like prompt injection (CS-3A-4)
💜 Bully Block: Stopping Cyberbullying Ages 8–18 · 175 XP	IC-2-4 IC-2-5 IC-3A-5	Bully Block — impacts of computing on individuals and communities (IC-2-4, IC-2-5); fostering inclusive and safe computing communities (IC-3A-5); upstander identity and harassment documentation protocol
🛡️ Two-Factor Titan Ages 10–18 · 175 XP	NI-2-7 NI-3A-6 NI-3A-7	Two-Factor Titan — multi-factor authentication implementation (NI-3A-6); authentication threat modeling including SIM-swap and credential stuffing (NI-3A-7); safe access control behaviors (NI-2-7)
🧠 Social Engineering Sentinel Ages 10–18 · 175 XP	NI-2-7 IC-2-4 IC-3B-4	Social Engineering Sentinel — social engineering as a network and human-layer threat (NI-2-7); computing impacts from manipulation attacks on individuals (IC-2-4); advanced threat analysis of multi-vector social engineering combining pretext, authority, and isolation (IC-3B-4)

New York K-12 Cybersecurity
Standards Alignment

Mission × Standard Alignment

CSTA K-12 CS Standards (2017 Revised) — Universal Crosswalk

Recommended starting missions for New York classrooms

📄 Download the New York alignment packet

Ready to pilot in New York?

New York K-12 CybersecurityStandards Alignment

Mission × Standard Alignment

CSTA K-12 CS Standards (2017 Revised) — Universal Crosswalk

Recommended starting missions for New York classrooms

📄 Download the New York alignment packet

Ready to pilot in New York?

New York K-12 Cybersecurity
Standards Alignment