Information Security Education Journal Paula Crouse, Robert Farmer 3 1 2016 With the introduction of information security awareness curriculum or modules in existing university courses comes the question of how to plan course content that will enhance students’ learning. This paper outlines one active-learning approach—a simulated spear-phishing project that was utilized in information security awareness education at a post-secondary institution. The project framework is described, and insight is offered to assist information security educators to employ a similar project in their curriculum.