Authors :
Stavros E. Basta; Dr. Ihssan Alkadi; Rebecca M. Basta
Volume/Issue :
Volume 11 - 2026, Issue 3 - March
Google Scholar :
https://tinyurl.com/smvs9t7d
Scribd :
https://tinyurl.com/ynztewhu
DOI :
https://doi.org/10.38124/ijisrt/26mar896
Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.
Abstract :
Background/Purpose:
Cybersecurity has become a critical concern across national security, industry, and academia, yet higher education
institutions lack a unified, standardized curriculum framework for training cybersecurity professionals. Unlike established
disciplines such as medicine or accounting, cybersecurity programs vary widely in content, depth, and pedagogical
approach, resulting in inconsistent graduate competencies, persistent workforce shortages, and a growing misalignment
between academic preparation and industry demands. This paper addresses the urgent need for proposed standards that
can guide the development of coherent and comprehensive cybersecurity curricula at both the undergraduate and graduate
levels.
Methods:
This study employs a comprehensive review and synthesis of major accreditation frameworks and curriculum guidelines,
including ABET computing accreditation criteria, NSA/DHS Centers of Academic Excellence (CAE) designation
requirements, the NIST/NICE Cybersecurity Workforce Framework, ACM/IEEE Cybersecurity Curricula Guidelines
(CSEC2017), and industry certification pathways (e.g., CompTIA Security+, CISSP, CEH). By analyzing and crossreferencing these frameworks, the study proposes integrated year-by-year curriculum models for both undergraduate and
graduate programs, mapping core knowledge areas, hands-on competencies, and professional development milestones.
Results/Findings:
The analysis reveals significant gaps and inconsistencies across existing cybersecurity programs, including inadequate
hands-on training, outdated course content, weak alignment between academic curricula and industry certifications, and
disparities in institutional resources and faculty expertise. The paper presents structured four-year undergraduate and
graduate curriculum standards encompassing foundational computing, core cybersecurity knowledge areas (network
security, cryptography, secure software development), applied specializations (digital forensics, penetration testing, cloud
security), and capstone experiences. It further identifies key barriers to standardization, such as balancing academic
freedom with national standards and addressing resource inequities among institutions.
Conclusions:
Establishing standardized, competency-based cybersecurity curricula aligned with recognized frameworks is essential to
closing the cybersecurity skills gap and producing workforce-ready graduates. The paper recommends universal adoption
of the NIST NICE framework, sustained collaboration among academia, industry, and government, dedicated investment
in faculty development and laboratory infrastructure, and formalized processes for continuous curriculum review. These
standards provide a scalable foundation for institutions to build rigorous, adaptive, and industry-relevant cybersecurity
programs.
Keywords :
ABET Accreditation, Centers of Academic Excellence (CAE), Curriculum Standardization, Cybersecurity Education, Cybersecurity Workforce, Higher Education, Industry Certifications, NIST NICE Framework, Undergraduate and Graduate Programs.
References :
- Ilkka Tikanmäki, J. Rajamäki (2025) Research in Education: Case Cybersecurity Project. European Conference on Research Methodology for Business and Management Studies. doi: https://www.semanticscholar.org/paper/be29d4f72bfc1647ee05fdcdaa63cbe831ba9e71
- Andrej Jerman-Blazic, B. Jerman-Blazic (2024) Teaching and learning cybersecurity for European youth by applying interactive technology and smart education. Volume (30), 9093-9120. Educ. Inf. Technol. doi: https://www.semanticscholar.org/paper/ebbce21ca33f4d809c4cc5f1766b566040802501
- Eliana Stavrou, Andriani Piki (2024) Cultivating self-efficacy to empower professionals' re-up skilling in cybersecurity. Volume(32), 523-541. Inf. Comput. Secur.. doi: https://www.semanticscholar.org/paper/93128656734aeed2ef920566992be7e43e188101
- Albert Tay, Sebastian M Hayes, Drew Wilson, Emmie Hall, Dallin Kaufman (2024) Gamified Cybersecurity Education Through the Lens of the Information Search Process: An Exploratory Study of Capture-the-Flag Competitions [Research-in-Progress]. Issues in Informing Science and Information Technology. doi: https://www.semanticscholar.org/paper/88e889d975b290bb9cc54512d32661d7069888cb
- Vitaliy Dubinsky (2024) TRAINING OF COMPUTER SCIENCE TEACHERS FOR THE FORMATION OF CYBERSECURITY SKILLS IN STUDENTS: ACTUALIZATION OF PROBLEMS AND THEIR POSSIBLE SOLUTIONS. Education. Innovation. Practice. doi: https://www.semanticscholar.org/paper/f406cc08db2b46d465aa7d1cb4e5adb34ffd0cc0
- Zafrir Avrahami, M. Zwilling, Chen Hajaj (2025) Leveraging OSINT for Advanced Proactive Cybersecurity: Strategies and Solutions. Volume(13), 154229-154250. IEEE Access. doi: https://www.semanticscholar.org/paper/fe8b3e9d578c6da327e9fca369cdc98f6e5b1d25
- Yimei Yang, Jinping Liu, Yujun Yang (2025) Research on China’s Innovative Cybersecurity Education System Oriented Toward Engineering Education Accreditation. Information. doi: https://www.semanticscholar.org/paper/543b8e7d53661255f3bdfcb7b405a59c147f1d47
- Sara Ramezanian, Valtteri Niemi (2024) Cybersecurity Education in Universities: A Comprehensive Guide to Curriculum Development. Volume(12), 61741-61766. IEEE Access. doi: https://www.semanticscholar.org/paper/7522ce908e33d64bcf48ccf519082ec7ff597c3f
- Riccardo Vecellio Segate (2024) Drafting a Cybersecurity Standard for Outer Space Missions: On Critical Infrastructure, China, and the Indispensability of a Global Inclusive Approach. Volume(11), 345 - 375. Journal of Asian Security and International Affairs. doi: https://www.semanticscholar.org/paper/468dffedea0514679d901afe55c31fca7d95ce11
- Yogesh K. Dwivedi, Nir Kshetri, Laurie Hughes, Emma Slade, Anand Jeyaraj, Arpan Kumar Kar, Abdullah M. Baabdullah, et al. (2023) Opinion Paper: “So what if ChatGPT wrote it?” Multidisciplinary perspectives on opportunities, challenges and implications of generative conversational AI for research, practice and policy. Volume(71), 102642-102642. International Journal of Information Management. doi: https://doi.org/10.1016/j.ijinfomgt.2023.102642
- Markus Bayer, Marc–André Kaufhold, Christian Reuter (2022) A Survey on Data Augmentation for Text Classification. Volume(55), 1-39. ACM Computing Surveys. doi: https://doi.org/10.1145/3544558
- Sithara H. P. W. Gamage, Jennifer R. Ayres, Monica Behrend (2022) A systematic review on trends in using Moodle for teaching and learning. Volume(9). International Journal of STEM Education. doi: https://doi.org/10.1186/s40594-021-00323-x
- Rajendra Raj, Mihaela Sabin, John Impagliazzo, David Bowers, Mats Daniels, Felienne Hermans, Natalie Kiesler, et al. (2021) Professional Competencies in Computing Education. doi: https://doi.org/10.1145/3502870.3506570
- Mamdouh Alenezi (2021) Deep Dive into Digital Transformation in Higher Education Institutions. Volume(11), 770-770. Education Sciences. doi: https://doi.org/10.3390/educsci11120770
- Madhav Mukherjee, Ngoc Thuy Le, Yang-Wai Chow, Willy Susilo (2024) Strategic Approaches to Cybersecurity Learning: A Study of Educational Models and Outcomes. Volume(15), 117-117. Information. doi: https://doi.org/10.3390/info15020117
- Eric Sutherland, Rishub Keelara, Samuel Eiszele, June Haugrud (2023) Fast-Track on digital security in health. OECD health working papers. doi: https://doi.org/10.1787/c3357f9f-en
- Shuroug A. Alowais, Sahar S. Alghamdi, Nada Alsuhebany, Tariq Alqahtani, Abdulrahman Alshaya, Sumaya N. Almohareb, Atheer Aldairem, et al. (2023) Revolutionizing healthcare: the role of artificial intelligence in clinical practice. Volume(23). BMC Medical Education. doi: https://doi.org/10.1186/s12909-023-04698-z
Background/Purpose:
Cybersecurity has become a critical concern across national security, industry, and academia, yet higher education
institutions lack a unified, standardized curriculum framework for training cybersecurity professionals. Unlike established
disciplines such as medicine or accounting, cybersecurity programs vary widely in content, depth, and pedagogical
approach, resulting in inconsistent graduate competencies, persistent workforce shortages, and a growing misalignment
between academic preparation and industry demands. This paper addresses the urgent need for proposed standards that
can guide the development of coherent and comprehensive cybersecurity curricula at both the undergraduate and graduate
levels.
Methods:
This study employs a comprehensive review and synthesis of major accreditation frameworks and curriculum guidelines,
including ABET computing accreditation criteria, NSA/DHS Centers of Academic Excellence (CAE) designation
requirements, the NIST/NICE Cybersecurity Workforce Framework, ACM/IEEE Cybersecurity Curricula Guidelines
(CSEC2017), and industry certification pathways (e.g., CompTIA Security+, CISSP, CEH). By analyzing and crossreferencing these frameworks, the study proposes integrated year-by-year curriculum models for both undergraduate and
graduate programs, mapping core knowledge areas, hands-on competencies, and professional development milestones.
Results/Findings:
The analysis reveals significant gaps and inconsistencies across existing cybersecurity programs, including inadequate
hands-on training, outdated course content, weak alignment between academic curricula and industry certifications, and
disparities in institutional resources and faculty expertise. The paper presents structured four-year undergraduate and
graduate curriculum standards encompassing foundational computing, core cybersecurity knowledge areas (network
security, cryptography, secure software development), applied specializations (digital forensics, penetration testing, cloud
security), and capstone experiences. It further identifies key barriers to standardization, such as balancing academic
freedom with national standards and addressing resource inequities among institutions.
Conclusions:
Establishing standardized, competency-based cybersecurity curricula aligned with recognized frameworks is essential to
closing the cybersecurity skills gap and producing workforce-ready graduates. The paper recommends universal adoption
of the NIST NICE framework, sustained collaboration among academia, industry, and government, dedicated investment
in faculty development and laboratory infrastructure, and formalized processes for continuous curriculum review. These
standards provide a scalable foundation for institutions to build rigorous, adaptive, and industry-relevant cybersecurity
programs.
Keywords :
ABET Accreditation, Centers of Academic Excellence (CAE), Curriculum Standardization, Cybersecurity Education, Cybersecurity Workforce, Higher Education, Industry Certifications, NIST NICE Framework, Undergraduate and Graduate Programs.