⚠ Official Notice: www.ijisrt.com is the official website of the International Journal of Innovative Science and Research Technology (IJISRT) Journal for research paper submission and publication. Please beware of fake or duplicate websites using the IJISRT name.



Proposed Standards for Cybersecurity Curricula in Higher Education


Authors : Stavros E. Basta; Dr. Ihssan Alkadi; Rebecca M. Basta

Volume/Issue : Volume 11 - 2026, Issue 3 - March


Google Scholar : https://tinyurl.com/smvs9t7d

Scribd : https://tinyurl.com/ynztewhu

DOI : https://doi.org/10.38124/ijisrt/26mar896

Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.


Abstract : Background/Purpose: Cybersecurity has become a critical concern across national security, industry, and academia, yet higher education institutions lack a unified, standardized curriculum framework for training cybersecurity professionals. Unlike established disciplines such as medicine or accounting, cybersecurity programs vary widely in content, depth, and pedagogical approach, resulting in inconsistent graduate competencies, persistent workforce shortages, and a growing misalignment between academic preparation and industry demands. This paper addresses the urgent need for proposed standards that can guide the development of coherent and comprehensive cybersecurity curricula at both the undergraduate and graduate levels.  Methods: This study employs a comprehensive review and synthesis of major accreditation frameworks and curriculum guidelines, including ABET computing accreditation criteria, NSA/DHS Centers of Academic Excellence (CAE) designation requirements, the NIST/NICE Cybersecurity Workforce Framework, ACM/IEEE Cybersecurity Curricula Guidelines (CSEC2017), and industry certification pathways (e.g., CompTIA Security+, CISSP, CEH). By analyzing and crossreferencing these frameworks, the study proposes integrated year-by-year curriculum models for both undergraduate and graduate programs, mapping core knowledge areas, hands-on competencies, and professional development milestones.  Results/Findings: The analysis reveals significant gaps and inconsistencies across existing cybersecurity programs, including inadequate hands-on training, outdated course content, weak alignment between academic curricula and industry certifications, and disparities in institutional resources and faculty expertise. The paper presents structured four-year undergraduate and graduate curriculum standards encompassing foundational computing, core cybersecurity knowledge areas (network security, cryptography, secure software development), applied specializations (digital forensics, penetration testing, cloud security), and capstone experiences. It further identifies key barriers to standardization, such as balancing academic freedom with national standards and addressing resource inequities among institutions.  Conclusions: Establishing standardized, competency-based cybersecurity curricula aligned with recognized frameworks is essential to closing the cybersecurity skills gap and producing workforce-ready graduates. The paper recommends universal adoption of the NIST NICE framework, sustained collaboration among academia, industry, and government, dedicated investment in faculty development and laboratory infrastructure, and formalized processes for continuous curriculum review. These standards provide a scalable foundation for institutions to build rigorous, adaptive, and industry-relevant cybersecurity programs.

Keywords : ABET Accreditation, Centers of Academic Excellence (CAE), Curriculum Standardization, Cybersecurity Education, Cybersecurity Workforce, Higher Education, Industry Certifications, NIST NICE Framework, Undergraduate and Graduate Programs.

References :

  1. Ilkka Tikanmäki, J. Rajamäki (2025) Research in Education: Case Cybersecurity Project. European Conference on Research Methodology for Business and Management Studies. doi: https://www.semanticscholar.org/paper/be29d4f72bfc1647ee05fdcdaa63cbe831ba9e71
  2. Andrej Jerman-Blazic, B. Jerman-Blazic (2024) Teaching and learning cybersecurity for European youth by applying interactive technology and smart education. Volume (30), 9093-9120. Educ. Inf. Technol. doi: https://www.semanticscholar.org/paper/ebbce21ca33f4d809c4cc5f1766b566040802501
  3. Eliana Stavrou, Andriani Piki (2024) Cultivating self-efficacy to empower professionals' re-up skilling in cybersecurity. Volume(32), 523-541. Inf. Comput. Secur.. doi: https://www.semanticscholar.org/paper/93128656734aeed2ef920566992be7e43e188101
  4. Albert Tay, Sebastian M Hayes, Drew Wilson, Emmie Hall, Dallin Kaufman (2024) Gamified Cybersecurity Education Through the Lens of the Information Search Process: An Exploratory Study of Capture-the-Flag Competitions [Research-in-Progress]. Issues in Informing Science and Information Technology. doi: https://www.semanticscholar.org/paper/88e889d975b290bb9cc54512d32661d7069888cb
  5. Vitaliy Dubinsky (2024) TRAINING OF COMPUTER SCIENCE TEACHERS FOR THE FORMATION OF CYBERSECURITY SKILLS IN STUDENTS: ACTUALIZATION OF PROBLEMS AND THEIR POSSIBLE SOLUTIONS. Education. Innovation. Practice. doi: https://www.semanticscholar.org/paper/f406cc08db2b46d465aa7d1cb4e5adb34ffd0cc0
  6. Zafrir Avrahami, M. Zwilling, Chen Hajaj (2025) Leveraging OSINT for Advanced Proactive Cybersecurity: Strategies and Solutions. Volume(13), 154229-154250. IEEE Access. doi: https://www.semanticscholar.org/paper/fe8b3e9d578c6da327e9fca369cdc98f6e5b1d25
  7. Yimei Yang, Jinping Liu, Yujun Yang (2025) Research on China’s Innovative Cybersecurity Education System Oriented Toward Engineering Education Accreditation. Information. doi: https://www.semanticscholar.org/paper/543b8e7d53661255f3bdfcb7b405a59c147f1d47
  8. Sara Ramezanian, Valtteri Niemi (2024) Cybersecurity Education in Universities: A Comprehensive Guide to Curriculum Development. Volume(12), 61741-61766. IEEE Access. doi: https://www.semanticscholar.org/paper/7522ce908e33d64bcf48ccf519082ec7ff597c3f
  9. Riccardo Vecellio Segate (2024) Drafting a Cybersecurity Standard for Outer Space Missions: On Critical Infrastructure, China, and the Indispensability of a Global Inclusive Approach. Volume(11), 345 - 375. Journal of Asian Security and International Affairs. doi: https://www.semanticscholar.org/paper/468dffedea0514679d901afe55c31fca7d95ce11
  10. Yogesh K. Dwivedi, Nir Kshetri, Laurie Hughes, Emma Slade, Anand Jeyaraj, Arpan Kumar Kar, Abdullah M. Baabdullah, et al. (2023) Opinion Paper: “So what if ChatGPT wrote it?” Multidisciplinary perspectives on opportunities, challenges and implications of generative conversational AI for research, practice and policy. Volume(71), 102642-102642. International Journal of Information Management. doi: https://doi.org/10.1016/j.ijinfomgt.2023.102642
  11. Markus Bayer, Marc–André Kaufhold, Christian Reuter (2022) A Survey on Data Augmentation for Text Classification. Volume(55), 1-39. ACM Computing Surveys. doi: https://doi.org/10.1145/3544558
  12. Sithara H. P. W. Gamage, Jennifer R. Ayres, Monica Behrend (2022) A systematic review on trends in using Moodle for teaching and learning. Volume(9). International Journal of STEM Education. doi: https://doi.org/10.1186/s40594-021-00323-x
  13. Rajendra Raj, Mihaela Sabin, John Impagliazzo, David Bowers, Mats Daniels, Felienne Hermans, Natalie Kiesler, et al. (2021) Professional Competencies in Computing Education. doi: https://doi.org/10.1145/3502870.3506570
  14. Mamdouh Alenezi (2021) Deep Dive into Digital Transformation in Higher Education Institutions. Volume(11), 770-770. Education Sciences. doi: https://doi.org/10.3390/educsci11120770
  15. Madhav Mukherjee, Ngoc Thuy Le, Yang-Wai Chow, Willy Susilo (2024) Strategic Approaches to Cybersecurity Learning: A Study of Educational Models and Outcomes. Volume(15), 117-117. Information. doi: https://doi.org/10.3390/info15020117
  16. Eric Sutherland, Rishub Keelara, Samuel Eiszele, June Haugrud (2023) Fast-Track on digital security in health. OECD health working papers. doi: https://doi.org/10.1787/c3357f9f-en
  17. Shuroug A. Alowais, Sahar S. Alghamdi, Nada Alsuhebany, Tariq Alqahtani, Abdulrahman Alshaya, Sumaya N. Almohareb, Atheer Aldairem, et al. (2023) Revolutionizing healthcare: the role of artificial intelligence in clinical practice. Volume(23). BMC Medical Education. doi: https://doi.org/10.1186/s12909-023-04698-z

Background/Purpose: Cybersecurity has become a critical concern across national security, industry, and academia, yet higher education institutions lack a unified, standardized curriculum framework for training cybersecurity professionals. Unlike established disciplines such as medicine or accounting, cybersecurity programs vary widely in content, depth, and pedagogical approach, resulting in inconsistent graduate competencies, persistent workforce shortages, and a growing misalignment between academic preparation and industry demands. This paper addresses the urgent need for proposed standards that can guide the development of coherent and comprehensive cybersecurity curricula at both the undergraduate and graduate levels.  Methods: This study employs a comprehensive review and synthesis of major accreditation frameworks and curriculum guidelines, including ABET computing accreditation criteria, NSA/DHS Centers of Academic Excellence (CAE) designation requirements, the NIST/NICE Cybersecurity Workforce Framework, ACM/IEEE Cybersecurity Curricula Guidelines (CSEC2017), and industry certification pathways (e.g., CompTIA Security+, CISSP, CEH). By analyzing and crossreferencing these frameworks, the study proposes integrated year-by-year curriculum models for both undergraduate and graduate programs, mapping core knowledge areas, hands-on competencies, and professional development milestones.  Results/Findings: The analysis reveals significant gaps and inconsistencies across existing cybersecurity programs, including inadequate hands-on training, outdated course content, weak alignment between academic curricula and industry certifications, and disparities in institutional resources and faculty expertise. The paper presents structured four-year undergraduate and graduate curriculum standards encompassing foundational computing, core cybersecurity knowledge areas (network security, cryptography, secure software development), applied specializations (digital forensics, penetration testing, cloud security), and capstone experiences. It further identifies key barriers to standardization, such as balancing academic freedom with national standards and addressing resource inequities among institutions.  Conclusions: Establishing standardized, competency-based cybersecurity curricula aligned with recognized frameworks is essential to closing the cybersecurity skills gap and producing workforce-ready graduates. The paper recommends universal adoption of the NIST NICE framework, sustained collaboration among academia, industry, and government, dedicated investment in faculty development and laboratory infrastructure, and formalized processes for continuous curriculum review. These standards provide a scalable foundation for institutions to build rigorous, adaptive, and industry-relevant cybersecurity programs.

Keywords : ABET Accreditation, Centers of Academic Excellence (CAE), Curriculum Standardization, Cybersecurity Education, Cybersecurity Workforce, Higher Education, Industry Certifications, NIST NICE Framework, Undergraduate and Graduate Programs.

Paper Submission Last Date
31 - March - 2026

SUBMIT YOUR PAPER CALL FOR PAPERS
Video Explanation for Published paper

Never miss an update from Papermashup

Get notified about the latest tutorials and downloads.

Subscribe by Email

Get alerts directly into your inbox after each post and stay updated.
Subscribe
OR

Subscribe by RSS

Add our RSS to your feedreader to get regular updates from us.
Subscribe