אוסף אמין שנבנה מתוך ניסיון כיתתי עשיר על ידי שני מורים פעילים בהוראת אנגלית.

זה עובד. זה בדוק. פשוט, קל ובחינם.

Section 1
Teacher's Lesson Plan
Confidential 📄 Student Handouts →
Lesson Overview
Topic
Cyber War — Anna is a journalist investigating a major cyberattack on a nation's power grid. Three million people lost electricity. The attack is attributed to a foreign state actor — but attribution in cyberspace is never simple, and the geopolitical consequences are profound. The lesson explores the nature, ethics and future of digital warfare.
Level
B2–C2
Duration
90 minutes
Skills
Reading · Listening · Speaking (debate) · Writing (argumentative essay)
Grammar
Passive reporting verbs — It is alleged that / States are believed to have…
Modals + perfect — should have been protected / could have been prevented
Mixed conditionals — If the firewall had held, we wouldn't be at war now
Cleft sentences — It is civilian infrastructure that bears the greatest cost
Concession clauses — Despite all denials, the evidence points to state involvement
Subjunctive / hypothetical — It is essential that governments act / Were a cyberattack to…
Inversion — Not only did the attack disable… / Never before has a single operation…
Vocabulary
12 words (C1–C2): cyber warfare · infrastructure · espionage · attribution · deterrence · vulnerability · sovereignty · retaliation · malware · geopolitical · encryption · asymmetric
Materials
Student Handouts 1–6 (printed); whiteboard; this plan
Key Grammar — Teaching Notes
Passive Reporting Verbs

Essential for intelligence and journalism contexts — distances the speaker from unverified claims.
It is alleged that a state-sponsored group carried out the attack.
Russia is believed to have developed the malware over several years.
The operation is reported to have cost less than $50,000 — yet paralysed a nation.

Modals + Perfect Infinitive

For criticising past failures in cyber defence:
The grid should have been isolated from the public internet years ago.
The attack could have been detected earlier had the monitoring systems been updated.
Three million people needn't have lost power — the vulnerability was known.

Mixed Conditionals

If the government had invested in cyber defences, we wouldn't be facing this crisis now.
If states weren't so dependent on networked infrastructure, this attack would never have been possible.

Subjunctive / Hypothetical

Formal and diplomatic register — essential at C1–C2:
It is essential / imperative / vital that every government invest in cyber resilience. (no -s on verb!)
Were a cyberattack to knock out the financial system, the consequences would be catastrophic. (inverted conditional — very formal)
The UN demands that state actors be held accountable.

Inversion for Emphasis

Typical of formal journalism and political speech — high-impact at C1–C2:
Not only did the attack disable the power grid, but it also destroyed hospital equipment.
Never before has a single cyberattack caused such widespread civilian suffering.
Rarely has the line between war and peace been so blurred.
Only when the lights went out did the public understand the true vulnerability.
Structure: auxiliary + subject + verb (like a question form)

Lesson Procedure
Time
Stage
Skill
Teacher does
Students do
0–7 min
Lead-in
Speaking
"If all power, internet and phones went down right now — what would happen in 24 hours? In a week?" Introduce the term cyber warfare. "Is a cyberattack an act of war?"
Discuss. Speculate. Form initial positions.
7–17 min
Vocabulary
—
12 C1–C2 words. Concept-check attribution, deterrence, asymmetric. Part B gap-fill.
Part A: read + self-test. Part B: gap-fill.
17–46 min
Grammar
—
7 structure cards → inversion drill on board → exercises 1–5.
Study cards. Exercises 1–5. Pair-check.
46–59 min
Reading
Reading
Gist: "What happened? Who is responsible? What should have been done?" Find grammar. Tasks 1–2.
Read Anna's report. Questions. T/F/NG. Label grammar.
59–71 min
Listening
Listening
Context: "Anna interviews a cybersecurity expert." Read TWICE.
MCQ. Notes. Grammar hunt.
71–82 min
Speaking
Speaking
Debate: "A cyberattack on civilian infrastructure is an act of war." Monitor all 7 structures.
Prepare. Debate. Counter-argue.
82–90 min
Writing
Writing
120–150 words. Argumentative essay. All 7 structures.
Write essay. Self-check.
Listening Script — 'The Invisible Battlefield'
Read aloud twice at a clear B2–C2 pace. Do not show to students during the tasks.
Anna:
Three million people lost power for four days. Is this an act of war?
Dr Marsh:
It is alleged that a state-sponsored group carried out the attack — but attribution in cyberspace is never simple. Not only is the technical evidence ambiguous, but political incentives distort the analysis. Never before has the question of who started a war been so difficult to answer.
Anna:
Should the grid have been better protected?
Dr Marsh:
Absolutely. The vulnerability was known. The grid should have been isolated from the public internet years ago. The attack could have been detected and prevented — had there been adequate monitoring. It is essential that every government treat critical infrastructure as a sovereign asset. Were a single cyberattack to disable both the power and financial systems simultaneously, the result would be a collapse of civil order within days.
Anna:
Is deterrence possible in cyber warfare?
Dr Marsh:
Rarely has deterrence worked in an asymmetric conflict. It is not states alone that pose a threat — it is also criminal networks, ideological actors, and rogue individuals. Despite the appeals for an international cyber treaty, there is no enforcement mechanism. Only when we accept that cyber warfare operates outside all existing legal frameworks will we understand the true geopolitical danger.
Anna:
What is your most urgent message to governments?
Dr Marsh:
It is imperative that national cyber defences be rebuilt from the ground up. Not only must encryption standards be raised, but the legal definition of cyber warfare must be agreed internationally. If governments had acted on the warnings issued a decade ago, we would not be having this conversation today.
Grammar in the script:
· Passive reporting: It is alleged that / is never simple / are distorted
· Modals + perfect: should have been isolated / could have been detected and prevented / needn't have lost
· Mixed conditional: If governments had acted… we would not be having this conversation
· Cleft: It is not states alone that pose a threat
· Concession: Despite the appeals / although attribution is difficult
· Subjunctive: It is essential that every government treat / It is imperative that defences be rebuilt / Were a cyberattack to disable…
· Inversion: Not only is the evidence ambiguous / Never before has the question been so difficult / Rarely has deterrence worked / Only when we accept…
Answer Key
Handout 1 — Vocabulary
Part B: 1. cyber warfare   2. infrastructure   3. espionage   4. attribution   5. deterrence   6. vulnerability   7. sovereignty   8. retaliation   9. malware   10. geopolitical   11. encryption   12. asymmetric
Handout 2 — Grammar
Ex 1: 1-G1   2-G2   3-G3   4-G4   5-G5   6-G6   7-G7   8-G2   9-G7   10-G6

Ex 2: 1. is believed to have developed   2. should have been isolated   3. had invested / wouldn't be facing   4. It is civilian infrastructure that   5. Despite all denials   6. It is imperative that governments invest   7. Not only did the attack disable   8. could have been prevented   9. Were a cyberattack to   10. Never before has

Ex 3 (inversion rewrite): 1. Not only did the attack disable the power grid, but it also destroyed hospital equipment.   2. Never before has a single operation caused such widespread civilian suffering.   3. Rarely has the line between war and peace been so difficult to define.   4. Only when the lights went out did the public understand the scale of the threat.

Ex 4 (subjunctive): 1. act (NOT acts)   2. be prosecuted (passive subjunctive)   3. Were a cyberattack to disable   4. It is vital that all systems be audited

Ex 5 (errors): 1. is alleged to have (NOT to has)   2. should have been protected (NOT should been)   3. weren't / would never have been (mixed conditional — present + past result)   4. It is civilian infrastructure that (NOT which)   5. Never before has (inversion — auxiliary before subject)   6. that all states invest (NOT invests — subjunctive)
Handout 3 — Reading
Task 1: 1. A state-sponsored group is alleged to have deployed malware that disabled the national power grid for four days. 2. Attribution is difficult because the technical evidence is ambiguous and political incentives distort the analysis. 3. The vulnerability was known — the grid should have been isolated from the internet years earlier. 4. She calls for an international treaty and urgent rebuilding of national cyber defences. 5. Because it operates outside all existing legal frameworks, making deterrence and accountability extremely difficult.

Task 2 (T/F/NG): 1 T   2 F (the attack cost less than $50,000)   3 T   4 NG   5 T
Handout 4 — Listening
Task 1: 1-B   2-C   3-A

Task 2: (1) state-sponsored / attribution never simple   (2) should have been isolated / could have been detected   (3) essential / sovereign asset   (4) were a cyberattack to disable / collapse of civil order   (5) had acted on warnings / would not be having this conversation
Name:  
Date:  
Class:  

Handout 1

Vocabulary

Vocabulary
Part A — Key Words
Word
What it means
cyber warfare
the use of digital attacks to damage, disrupt or destroy an enemy's information systems or infrastructure
infrastructure
the essential systems that a society depends on — power grids, water supplies, financial networks
espionage
the practice of spying — obtaining secret information, increasingly conducted via digital means
attribution
the process of identifying who carried out a cyberattack — technically complex and politically contentious
deterrence
the strategy of preventing attack by threatening a damaging response — difficult to achieve in cyberspace
vulnerability
a weakness in a system that can be exploited by an attacker
sovereignty
the right of a state to govern itself and control its own territory, including digital territory
retaliation
action taken in response to an attack — a retaliatory cyberattack risks dangerous escalation
malware
malicious software designed to damage, disrupt or gain unauthorised access to systems
geopolitical
relating to the influence of geography and politics on international relations
encryption
the process of encoding data so that only authorised parties can read it
asymmetric
describing a conflict where the two sides have very different capabilities — a small actor can cause disproportionate damage
Part B — Fill in the Gaps
1.The line between __________________ and conventional armed conflict has never been more blurred.
2.The power grid, water supply and financial network — the nation's critical __________________ — were all at risk.
3.Digital __________________ has largely replaced the Cold War era of human spies — information is now stolen from servers, not filing cabinets.
4.__________________ is the most controversial challenge in cyber conflict — it is rarely possible to prove beyond doubt who launched an attack.
5.Traditional nuclear __________________ relies on the certainty of devastating retaliation — but in cyberspace, the attacker can remain invisible.
6.The __________________ had been flagged by security analysts two years before the attack — but the government failed to act.
7.Nations increasingly assert digital __________________ — the right to control their own data and protect their networks from foreign interference.
8.Any __________________ carries the risk of miscalculation and dangerous escalation — it is difficult to calibrate a proportionate cyber response.
9.The __________________ used in the attack was sophisticated — it had been embedded in the system for months before activation.
10.The __________________ implications of the attack extended far beyond the two states involved — regional alliances were immediately affected.
11.Stronger __________________ standards could have prevented the breach — the data was transmitted in plain text.
12.Cyber warfare is inherently __________________ — a small group of skilled hackers can cause damage equivalent to a conventional military strike.

Handout 2

Grammar

Grammar
Seven Advanced Structures
PASSIVE REPORTING VERBS
Distance claims from their source — essential in intelligence and journalism.
It is alleged that a state-sponsored group deployed the malware.
Russia is believed to have developed the attack over several years.
The operation is reported to have cost less than $50,000.
MODALS + PERFECT INFINITIVE
Criticise failures in cyber defence — what should or could have been done.
The grid should have been isolated from the public internet years ago.
The attack could have been detected had monitoring systems been updated.
Three million people needn't have lost power — the vulnerability was known.
MIXED CONDITIONALS
Past failure → present consequence, or present state → past result.
If the government had invested in cyber defences, we wouldn't be facing this crisis now.
If states weren't so dependent on networked systems, this attack would never have been possible.
CLEFT SENTENCES
Emphasise what or who bears the real cost of cyber warfare.
It is civilian infrastructure that bears the greatest cost — not military systems.
It was the hospital network that failed first — putting patients at risk.
What makes cyber warfare so dangerous is its invisibility.
CONCESSION CLAUSES
Acknowledge complexity before making a definitive argument.
Despite all official denials, the evidence points to state involvement.
Although attribution is technically difficult, political responsibility must be assigned.
Granted that cyber attacks are cheaper than conventional war, their human cost can be just as severe.
SUBJUNCTIVE / HYPOTHETICAL
Formal demands and extreme hypotheticals — essential at C1–C2.
It is essential / imperative / vital that every government invest in cyber resilience.
⚠️ Subjunctive: no -s on third person singular — "that every government invest" NOT "invests"

Were a cyberattack to disable the financial system, civil order would collapse within days.
Were + subject + to + infinitive = very formal hypothetical (if a cyberattack were to…)
INVERSION FOR EMPHASIS
Formal journalism and political register — inverted auxiliary before subject.
Not only did the attack disable the power grid, but it also destroyed hospital equipment.
Never before has a single operation caused such widespread civilian suffering.
Rarely has the line between war and peace been so difficult to define.
Only when the lights went out did the public understand the scale of the threat.
Structure: negative/limiting adverb + auxiliary + subject + main verb
Exercise 1 — Identify the Structure

Write G1–G7 for each sentence.

1.The attack is believed to have been planned over eighteen months.  [    ]
2.The vulnerability could have been patched before the attack occurred.  [    ]
3.If governments had cooperated earlier, we wouldn't be facing this threat now.  [    ]
4.It is ordinary citizens who bear the cost of state cyber conflict.  [    ]
5.Despite denying all involvement, the state refused to cooperate with the investigation.  [    ]
6.It is imperative that all critical systems be protected by international law.  [    ]
7.Not only did the malware destroy data — it also rendered the systems permanently unusable.  [    ]
8.The attack should have been anticipated — the warnings were clearly there.  [    ]
9.Never before has a non-military operation caused such geopolitical instability.  [    ]
10.Were a hostile state to attack the water supply, the humanitarian consequences would be catastrophic.  [    ]
Exercise 2 — Complete the Sentences

Use the structure indicated.

1.Russia __________________ (develop) the malware over several years. [G1 — believed]
2.The national grid __________________ (isolate) from the public internet long before the attack. [G2]
3.If governments __________________ (invest) in cyber defences, we __________________ (not / face) this crisis today. [G3]
4.__________________ civilian infrastructure __________________ bears the greatest cost of digital warfare. [G4]
5.__________________ all official denials, the malware was traced to a state-linked server. [G5]
6.It is imperative that every government __________________ (invest) in cyber resilience immediately. [G6]
7.__________________ did the attack disable communications — it also destroyed five years of medical records. [G7]
8.The hospital systems __________________ (protect) with stronger encryption — the breach was avoidable. [G2]
9.__________________ a hostile actor __________________ (gain) control of the nuclear safety systems, the consequences would be unthinkable. [G6 — were]
10.__________________ has a single piece of code carried such strategic weight. [G7 — Never before]
Exercise 3 — Rewrite Using Inversion

Rewrite each sentence with the adverb or phrase given. Keep the meaning.

1.  "The attack disabled the power grid and also destroyed hospital equipment." (Not only…)
___________________________________________________________________________
2.  "A single operation has never caused such widespread civilian suffering before." (Never before…)
___________________________________________________________________________
3.  "The line between war and peace has rarely been so difficult to define." (Rarely…)
___________________________________________________________________________
4.  "The public understood the scale of the threat only when the lights went out." (Only when…)
___________________________________________________________________________
Exercise 4 — Subjunctive Practice

Complete using the correct subjunctive or hypothetical form.

1.It is essential that every nation __________________ (invest) in cyber resilience — the subjunctive has no -s.
2.The international court demands that those responsible __________________ (prosecute) under international law.
3.__________________ a cyberattack __________________ (disable) the global banking system, financial markets would collapse within hours. (Were…)
4.It is vital that all government systems __________________ (audit) before next year's elections.
Exercise 5 — Find and Correct the Error

Each sentence has ONE mistake.

1.  "The attack is alleged to has been carried out by a state-sponsored group."
Corrected: ___________________________________________________________________
2.  "The power grid should been protected from the public internet years ago."
Corrected: ___________________________________________________________________
3.  "If states weren't so dependent on networked systems, this attack would never be possible."
Corrected: ___________________________________________________________________
4.  "It is civilian infrastructure which bears the greatest cost of cyber conflict."
Corrected: ___________________________________________________________________
5.  "Never before a single cyberattack has caused such geopolitical instability."
Corrected: ___________________________________________________________________
6.  "It is imperative that every government invests in cyber resilience."
Corrected: ___________________________________________________________________

Handout 3

Reading

Reading
The Invisible Battlefield — Anna Kovacs, Special Correspondent
The attack
At 03:17 on a Tuesday morning, the lights went out across the northern region. Three million people lost power. Hospitals switched to generators. Traffic systems failed. The stock exchange did not open. It is alleged that a state-sponsored group deployed sophisticated malware that had been embedded in the national grid for over six months before activation. The operation is reported to have cost less than $50,000 — yet it paralysed a nation. Never before had a single piece of code carried such strategic weight.
The failure
The vulnerability had been flagged by independent analysts two years before the attack. The grid should have been isolated from the public internet. The attack could have been detected and contained — had there been adequate monitoring systems in place. It is civilian infrastructure, not military hardware, that bears the true cost of state-sponsored cyber conflict. Granted that attribution is technically complex, the political responsibility cannot be indefinitely avoided. Despite all official denials, forensic evidence pointed consistently to a state-linked server.
The stakes
Were a coordinated cyberattack to disable both the power and financial systems simultaneously, civil order could not be maintained. It is imperative that governments treat critical infrastructure as sovereign territory. Not only must international cyber law be codified, but enforcement mechanisms must be established. If states had acted on the warnings issued a decade ago, we would not be standing at the edge of a new kind of warfare — one that is invisible, asymmetric, and entirely without rules.
After reading: Find one example of each of the seven grammar structures. Underline and label each one.
Task 1 — Answer the Questions

Write full sentences.

1.What happened and who is alleged to be responsible?
Answer: ___________________________________________________________________
2.Why is attribution so difficult in cyber warfare?
Answer: ___________________________________________________________________
3.What defensive failures does Anna identify?
Answer: ___________________________________________________________________
4.What does Anna call on governments to do?
Answer: ___________________________________________________________________
5.Why does Anna describe cyber warfare as "entirely without rules"?
Answer: ___________________________________________________________________
Task 2 — True / False / Not Given

Write T, F or NG.

1.The malware had been present in the system for over six months before it was activated.[ T / F / NG ]
2.The cyberattack cost the attacking state over one million dollars to execute.[ T / F / NG ]
3.The vulnerability in the grid had been identified before the attack took place.[ T / F / NG ]
4.Anna Kovacs had previously reported on a similar attack in another country.[ T / F / NG ]
5.Anna argues that cyber warfare currently operates without a legal framework.[ T / F / NG ]

Handout 4

Listening

Listening
Listen to Anna interviewing Dr Marsh, a cybersecurity expert. Your teacher will read the dialogue twice.
Task 1 — Choose the Correct Answer

Circle A, B or C.

1.   Why does Dr Marsh say attribution is so difficult?
A.   Because the technology to analyse cyberattacks does not yet exist
B.   Because technical evidence is ambiguous and political incentives distort the analysis
C.   Because the attacking state destroyed all evidence before it could be recovered
2.   What does Dr Marsh say about the specific risk of combined attacks?
A.   That the military would be unable to respond to simultaneous infrastructure failures
B.   That the internet and power grids should never be connected to each other
C.   Were a cyberattack to disable both power and financial systems simultaneously, civil order would collapse within days
3.   What is Dr Marsh's most urgent recommendation?
A.   That national cyber defences be rebuilt from the ground up, with international legal standards agreed
B.   That all internet connections to critical infrastructure be permanently severed
C.   That retaliatory cyberattacks be authorised as a form of self-defence under international law
Task 2 — Complete the Notes

Write ONE, TWO or THREE words for each gap.

Expert Interview Notes — Dr Marsh

1.
Attribution: __________________ group alleged / __________________ — evidence ambiguous + political distortion
2.
Defensive failures: grid __________________ years ago / attack __________________ with better monitoring
3.
Recommendation: it is __________________ that every government treat infrastructure as a __________________
4.
Hypothetical risk: __________________ to disable power + finance simultaneously → __________________
5.
If governments __________________ a decade ago → we __________________ this conversation today
Task 3 — Grammar Hunt

Find one example of each structure in the listening. Write the exact words.

1.Inversion: ___________________________________________
2.Subjunctive (Were…): ___________________________________________
3.Modal + perfect: ___________________________________________
4.Mixed conditional: ___________________________________________
5.Concession clause: ___________________________________________

Handout 5

Speaking

Speaking
Task A — Structured Debate

"A cyberattack on civilian infrastructure constitutes an act of war and should trigger a military response." Divide into two teams. Use all seven grammar structures.

Team A — YES — it is an act of war

  • It is civilian lives that are put at risk — not just data.
  • Never before has any weapon caused such disproportionate damage at such low cost.
  • It is imperative that states be held to the same standards as in conventional warfare.
  • If deterrence had existed in cyberspace, this attack would never have been launched.
  • Not only did the attack paralyse the economy — it endangered lives in hospitals.

Team B — NO — military response is dangerous

  • Although attribution is alleged to be clear, it rarely is — retaliation could hit the wrong target.
  • Granted that the attack caused suffering, a military response could cause far more.
  • It is not the state alone that carries out cyberattacks — criminal actors could have deployed this malware.
  • Were a military response to be launched, it could trigger a conventional war.
  • The infrastructure should have been protected — the failure was domestic, not foreign.
Countering arguments — use these phrases:
"While I concede that… / Never before has this argument been so…"
"It is not [X] that is the issue — it is [Y] / Were this logic to be accepted, then…"
Task B — Discussion

Talk in groups of three. Use all seven structures.

1.Were a cyberattack to disable your country's hospital system for 72 hours — what would happen? What should have been done to prevent it? What must governments do immediately?
2.It is alleged that several major democracies also conduct offensive cyber operations against rivals. Does this make state-sponsored attacks more or less acceptable? Use passive reporting verbs and concession clauses.
3.Never before has the world needed a global cyber treaty more urgently — or found it harder to achieve. Why is international cooperation in this area so difficult? Use inversion and subjunctive throughout.

Handout 6

Writing

Writing
Task — Argumentative Essay
The question: "Cyber warfare is the most dangerous form of modern conflict precisely because it has no rules. Discuss."

Word count: 120–150 words
Your essay must include all seven structures (underline each one):
Passive reporting   It is alleged / believed / reported that…
Modals + perfect   should have been / could have been…
Mixed conditional   If [past perf]… [would + inf now]
Cleft sentence   It is [X] that… / What makes… is…
Concession   Despite / Although / Granted that…
Subjunctive   It is essential that… [no -s] / Were… to…
Inversion   Not only… / Never before… / Rarely…

Plus at least FIVE vocabulary words from Handout 1
Essay structure:
1. Hook — use inversion: "Never before has…"
2. The threat — passive reporting + modal + perfect
3. The failure — mixed conditional + concession
4. The solution — subjunctive + cleft
5. Conclusion — inversion or subjunctive

Underline all seven grammar structures in your essay.

Self-check:  [ ] 120–150 words  [ ] passive reporting  [ ] modal+perfect  [ ] mixed conditional  [ ] cleft  [ ] concession  [ ] subjunctive  [ ] inversion  [ ] 5 vocab  [ ] all underlined