META24 WORKFORCE LAB · GRADED TO THE CORE · PROJECT-BASED · CYBERSECURITY · THE LAB'S YEAR · MIDDLE SCHOOL · UPPER SCHOOL · GRADE 6–12 · 1 CREDIT · COMPTIA SECURITY+ (PREP) · DEFENSE ONLY
Cybersecurity · the year
The Human Firewall · Cybersecurity · in The Human Firewall · Cybersecurity
Spot the phish · defend the network · win the blue-team competition — defense only, career-first
This year is laid from the lab’s own calendar — every course inside the lab end to end, then its floors — not written quarter by quarter. The weeks are the lab’s; the quarter windows are the catalog’s.
THE MIX · HOW MUCH OF EACH CORE SUBJECT THIS COURSE CARRIES · IN ORDER
CODING & AIREADING & WRITINGHISTORY, GEOGRAPHY & HUMANITIESBUSINESS & ENTERPRISEMATHSCIENCETECHNOLOGY & TRADESART & DESIGN
The squares are a picture of a course — how much of each core subject its own rooms carry, read from the rooms’ text — never a score of a student. Every course in a lab is graded to the core across the board; the squares say which columns it feeds most.
WHAT YOU WILL BE ABLE TO DO
- Spot phishing + social engineering
- Defend a network (defense-only, career-first)
- Run an incident response
AT A GLANCE · 36 WEEKS
Q1 The Human Firewall · the course — A defended campaign
Q2 The Human Firewall · the course → AI Governance · controls, implementer, auditor, agents, the session — An incident playbook
Q3 The floor — A defended campaign
Q4 The floor — An incident playbook
THE COURSES INSIDE THIS LAB · 2
THE ROOMS · 11 · BEHIND LOGIN
Semester 1
WEEKS 1–18 · QUARTERS 1 AND 2Quarter 1 · The Human Firewall · the course
WEEKS 1–9 · IN THIS OFFERINGTHE WEEKS · THE ROOMS EACH ONE OPENS
WK 1The Three DoorsTHE HUMAN FIREWALL · THE COURSE
Almost every real breach comes through one of three boring, preventable doors - an unpatched flaw, a phish, or a stolen password - so a defender's job is checking known locks every day, not building a magic wall.
WK 2The Tell
A phish attacks the human, not the machine, using urgency to shut off thinking - so the defense is a trained eye that reads the tells (lookalike domain, hidden link, pressure) and one unbeatable habit: never act from…
WK 3The Reuse Cascade
Almost everyone reuses passwords, so one leak becomes a master key that attackers automatically "stuff" into your other accounts - and the two things that break the cascade cold are a unique password per site (a…
WK 4The Con
Social engineering is hacking the person, not the machine — it works by pulling human levers (authority, urgency, trust, a believable story), so the only reliable defense is a habit that does not depend on being fooled:…
WK 5The Cost of Downtime
Ransomware is a business whose only product is your own data sold back to you, so its leverage lives entirely in your lack of a clean, offline, tested backup — but because modern attackers also STEAL the data before…
WK 6Run the Incident
Incident response is a rehearsed process, not improvisation — professional teams run the NIST lifecycle (Prepare → Detect & Analyze → Contain, Eradicate & Recover → Post-Incident), and the team that practiced the steps…
WK 7The Range and the Line
The only thing separating a security professional from a criminal is authorization — permission, in writing, before — and the whole industry, and the law, and every hiring manager, turn on that one word.
WK 8The Box Keeps a Diary
I can open the login diary a machine keeps on itself, find a burst of failed attempts and the one success that followed, and say — with timestamps, source, and count — whether it is normal for us or the moment we were…
WK 9What the Café Can See
I can capture the traffic leaving my own machine, pick out a DNS lookup, a TLS handshake, and one thing sent in the clear, and explain exactly what a stranger on the same café Wi-Fi can and cannot see — and which one…
THE PROJECT · WHAT THE QUARTER IS FOR
A defended campaign
The question. Can you spot phishing + social engineering?
The make. A defended campaign
The evidence. Handed in through The Human Firewall · Cybersecurity’s own surface and kept in My Work; the Report reads it from there.
Quarter 2 · The Human Firewall · the course → AI Governance · controls, implementer, auditor, agents, the session
WEEKS 10–18 · IN THIS OFFERINGTHE WEEKS · THE ROOMS EACH ONE OPENS
WK 10Close the Doors You Didn't Know Were OpenTHE HUMAN FIREWALL · THE COURSE
I can take a deliberately broken machine, work a twelve-item checklist down it door by door, and produce a before/after record with a command or screenshot proving each fix — the tier-1 defensive job, once, end to end.
WK 11The Voice Was Real
The machine con is the Week 4 con with the mask made by software: a cloned voice, a generated face, an instruction hidden where an AI will read it.
WK 12The Flaw Has a Number
A CVE is a public ID for one flaw in one piece of software; the CISA KEV list is the short set attackers are using right now. A defender does not ask "is it bad?" -- the number says.
WK 13Put It in Order
An incident is a true story told out of order by machines that did not know they were witnesses. The analyst puts every relevant event on one clock, in order -- because order shows cause and cause shows where the…
WK 14The 38 ControlsAI GOVERNANCE · CONTROLS, IMPLEMENTER, AUDITOR, AGENTS, THE SESSION
AI Governance · controls, implementer, auditor, agents, the session — week 1 of 5.
WK 15Lead Implementer
AI Governance · controls, implementer, auditor, agents, the session — week 2 of 5.
WK 16Lead Auditor
AI Governance · controls, implementer, auditor, agents, the session — week 3 of 5.
WK 17Agents for Internal Monitoring
AI Governance · controls, implementer, auditor, agents, the session — week 4 of 5.
WK 18AI Governance
AI Governance · controls, implementer, auditor, agents, the session — week 5 of 5.
THE PROJECT · WHAT THE QUARTER IS FOR
An incident playbook
The question. Can you defend a network (defense-only, career-first)?
The make. An incident playbook
The evidence. Handed in through The Human Firewall · Cybersecurity’s own surface and kept in My Work; the Report reads it from there.
Semester 2
WEEKS 19–36 · QUARTERS 3 AND 4Quarter 3 · The floor
WEEKS 19–27 · IN THIS OFFERINGTHE WEEKS · THE ROOMS EACH ONE OPENS
WK 19–24Spot the phishTHE FLOOR
The floor — the work is done in the room, logged in the room, kept in My Work.
WK 25–27Defend the network
The floor — the work is done in the room, logged in the room, kept in My Work.
THE PROJECT · WHAT THE QUARTER IS FOR
A defended campaign
The question. Can you run an incident response?
The make. A defended campaign
The evidence. Handed in through The Human Firewall · Cybersecurity’s own surface and kept in My Work; the Report reads it from there.
Quarter 4 · The floor
WEEKS 28–36 · IN THIS OFFERINGTHE WEEKS · THE ROOMS EACH ONE OPENS
WK 28–30Defend the network (continued)THE FLOOR
The floor — the work is done in the room, logged in the room, kept in My Work.
WK 31–36Win the blue-team competition — defense only, career-first
The floor — the work is done in the room, logged in the room, kept in My Work.
THE PROJECT · WHAT THE QUARTER IS FOR
An incident playbook
The question. Can you spot phishing + social engineering?
The make. An incident playbook
The evidence. Handed in through The Human Firewall · Cybersecurity’s own surface and kept in My Work; the Report reads it from there.
A course is a quarter, a semester or a year — nine, eighteen or thirty-six weeks — a project a quarter. Offered as the year, a semester or a quarter, it is the same course seen through a window. A lab is a family: its year, each of its tracks as a course, and its rooms. The evidence is what a student hands in through the room; the Report reads it from there. Nothing in the catalog is a grade.
THE PASS · THIS COURSE AND EVERY OTHER ONE
One pass includes Cybersecurity · the year and every course in the catalog. Pick a pass, or enter a school code; checkout stays on this page.