Procedure

This task consists of two parts.

In the first part, participants divide into small groups of 2–4 people and go through the individual stations in any order. Here, they first complete the respective game at each station and then collect ideas related to the station on a flipchart provided – a specific task is described at each station.

In the second part, the results of the individual stations (on the flipchart) are evaluated together in a plenary session and any open questions are clarified.

Preparation

• The individual stations and their games/tasks must be prepared and equipped with a flipchart or Metaplan paper for collecting ideas.

Notes on moderation

• With the exception of station 1, it is advisable to equip the individual stations with (at least) one stationary device (laptop, tablet, etc.), as each task is accompanied by a website. Participants can also complete the tour of the stations using their own devices.
• Since the stations do not build on each other, individual stations can be omitted or others expanded in scope without any problems.
• Each station is designed to be completed in teams of 2–4 people, but some stations can also be completed individually.
• For the final discussion in the plenary session, it may be useful to ask participants in advance to note down any questions that arise during the tour.
• The Security Risks Game in Station 6 is in English. It is therefore advisable to ensure that at least one person in each team has a basic knowledge of English. The game does not work fully on touchscreens – if you have a device with a keyboard available, use it at the station instead.

Stations with learning objectives + preparation notes

• Safety buzzwords (worksheet 1):
• Here, participants think together about terms related to protecting their digital environment. They then write down any terms they did not know on the flipchart provided.
• Either print out the cards from worksheet 1 and cut them out, or write the terms on small pieces of paper.
• Password memory game (worksheet 2):
• Participants compete against each other to come up with the strongest passwords possible and memorize them. They then reflect on their password strategies on the flipchart provided.
• Pens and small pieces of paper should be available for participants. A list of the times achieved by the participants is also required.
• Mythbusters Passwords (worksheet 2a):
• The participants first read through the myths about passwords and then move on to the explanations.
• The material should be prepared and cut out so that the myths are always on the front of the cards and the answers are on the back.
• Recognizing phishing (worksheet 3):
• How can I recognize fake emails that appear in my inbox and are trying to access my data? After the participants have identified such emails in an online game, they collect strategies for recognizing phishing emails on the flipchart.
• At least one device with the Google website open can be set up here. A list of the times achieved by the participants is also required.
• Reflection on data disclosure (working material 4):
• This station includes a test on personal data disclosure on the internet, which gives participants a score at the end. They should then write tips on protecting personal data on the flipchart.
• At least one device with the website https://netzpolitik.org/ open can be set up here. A list of the times achieved by the participants is also required.
• X/Twitter race (working material 5):
• Here, participants try to find a specific privacy or account security setting as quickly as possible within an X account. They then add their tips and tricks for social network account settings to the flipchart.
• It is advisable to set up at least two devices with newly created X accounts. The search tasks should be printed out in multiple copies, cut out, and placed face down on the table. A list of the times achieved by the participants is also required.
• Security Risks Game (Worksheet 6):
• In this English-language click-and-search game, participants identify potential security risks in an office. They then collect other potential security risks and add them to the flipchart.
• At least one device with the Living Security website open can be set up here. A list of the times achieved by the participants is also required.

Further links

As an introduction, the three-minute excerpt “Mike Ehrmantraut, Security Consultant [Part 1]” from the series Better Call Saul (AMC) can be watched on YouTube. Alternatively, the series can also be accessed via a streaming service – it is season 4, episode 1, between 34:30 and 42:40. In this episode, the character Mike visits a company for which he is supposed to work as a security consultant, but the company knows nothing about his plans. At the end of the scene, he lists various security risks he has encountered.