The integration of an AI assistant into a cybersecurity module aligns with ISTE Standard 2.5 (Designer) and 2.6 (Facilitator) by creating personalized, responsive support during case-based problem solving. Students interact with the AI in a simulated helpdesk format to troubleshoot security breaches, ask for terminology clarification, or request real-time guidance through labs. This supports autonomous learning and inquiry, especially for learners working asynchronously or remotely.
Using the UDL framework, the AI assistant supports multiple means of:
Representation: It provides examples, definitions, and visuals on demand.
Engagement: Students feel supported and less isolated when learning complex material.
Action & Expression: Learners can respond through text, audio, or uploaded reports, based on their preferred modality.
From a QM perspective, the plan ensures that:
The tool is introduced with a tutorial and usage boundaries
Accessibility features are built-in (text-to-speech, simplified interface)
Privacy is addressed with a disclaimer about AI data use and student choice to opt out
The storyboard maps AI usage across a 3-week simulation-based unit. AI prompts are scaffolded, and reflection points ask students to evaluate whether the AI responses were accurate and ethical. This promotes critical thinking, safeguards against misinformation, and supports ethical use of emerging tech.
Overview:
TryHackMe is an interactive, browser-based platform that offers virtual cybersecurity labs using gamified, scenario-based challenges. In an undergraduate cybersecurity course at a U.S. university, instructors adopted TryHackMe to replace textbook-based learning for topics like network enumeration, privilege escalation, and basic web application security.
It also supports 2.5 (Designer) by offering scaffolded, tiered challenges that instructors can align with specific course outcomes. Students can progress from beginner to advanced content in a controlled, gamified format that builds technical confidence.
Using the UDL Guidelines, the course offered multiple means of engagement (gamification, visual progress tracking), representation (interactive diagrams, terminal-based instructions), and action/expression (students submitted annotated screenshots and reflection logs).
However, the platform's reliance on dense technical text and command-line interfaces can present barriers for students with visual impairments, dyslexia, or limited prior experience in CLI environments. No keyboard navigation or screen reader optimization was reported. Additionally, students with low bandwidth or limited device capability struggled with consistent access.
The implementation met several QM Standards:
Course Technology (6.1 & 6.2): TryHackMe integrates easily through links and student accounts.
Learner Support (7.1): Tutorials were provided at the start of the course to orient students to the platform.
Accessibility (8.1): Some efforts were made to ensure captions and transcripts in pre-lab videos, but the labs themselves lacked full WCAG compliance.
While the experience was active and aligned to learning objectives, there was limited adaptation for learners with accessibility needs, which impacted equity.
1. Add Assistive Interface Options & WCAG Compliance
TryHackMe could improve accessibility by offering a simplified UI mode with high-contrast color schemes, keyboard navigation, and alt-text for diagrams. Instructor-provided captions, screen-reader-friendly walkthroughs, and optional audio instructions would support compliance with QM 8.1 and UDL checkpoints related to perception and comprehension
2. Include a Built-in Reflection Tool for Metacognition
Instructors could embed a reflection journal or chatbot assistant within the course site to encourage metacognitive reflection after each lab. Students would briefly describe what they learned, what was challenging, and how they approached problem-solving. This aligns with ISTE 2.7 (Analyst) and UDL's multiple means of expression, while strengthening transfer of learning and ethical decision-making in cyber practice.
Conclusion
TryHackMe’s adoption in cybersecurity instruction shows strong pedagogical promise, aligning with ISTE, UDL, and QM frameworks. However, addressing accessibility and reflective learning would enhance the platform's impact for diverse learners. These targeted improvements could ensure that immersive cybersecurity education is also inclusive, ethical, and effective.
References:
Oyarzun, B., Bottoms, B., & Westine, Adopting and Applying the Universal Design for Learning Principles in Online Courses. Edtechbooks.org.
Spring, Ben (2025). Cybersecurity in January 2025. Tryhackme