Characterizing Security and Privacy Teaching Standards for Schools in the United States

Katherine Limes, Colorado School of Mines; Nathan Malkin, New Jersey Institute of Technology; Kelsey R. Fulton, Colorado School of Mines

Increasingly, students begin learning aspects of security and privacy during their primary and secondary education (grades K-12 in the United States). Individual U.S. states and some national organizations publish teaching standards—guidance that outlines expectations for what students should learn. However, research has not yet examined what is covered by these standards and whether the topics align with what the broader security and privacy community thinks students should know. To shed light on these questions, we manually examined 12,201 standards from all U.S. states and eight national organizations. We labeled 3,920 of them as being related to security and privacy, further classifying these into 109 topics ranging from encryption to appropriate online behavior.

USENIX Security '26 Open Access Sponsored by
King Abdullah University of Science and Technology (KAUST)

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

BibTeX
@inproceedings {320593,
author = {Katherine Limes and Nathan Malkin and Kelsey R. Fulton},
title = {Characterizing Security and Privacy Teaching Standards for Schools in the United States},
booktitle = {35th USENIX Security Symposium (USENIX Security 26)},
year = {2026},
isbn = {978-1-939133-58-8},
address = {Baltimore, MD},
pages = {3913--3930},
url = {https://www.usenix.org/conference/usenixsecurity26/presentation/limes},
publisher = {USENIX Association},
month = aug
}