Cybersecurity Risk Management Scenarios for Teaching Information Security Management

Abstract

Amidst security concerns, there has become an increased focus on ensuring cybersecurity becomes a mainstream part of higher education. Cybersecurity requires the development of technical and non-technical skills, with the latter often referred to as “soft skills.” With calls for evidence of initiatives used within higher education to develop these skills, this paper presents an instructional design of how a scenario-based learning activity was utilized for a group of postgraduate students studying “information security management.” This article presents the scenario, observations of teaching practice, and student feedback and provides recommendations for embedding scenario-based learning activities into the curriculum.

Keywords:

• Instructional design
• cybersecurity
• scenario-based learning
• soft skills

Disclosure statement

The authors report there are no competing interests to declare.

Ethical approval

This research did not require formal approval by the University’s Research Ethics Committee due to the research adhering to the ethical consequences of researching with human subjects, and by following the home institutions Research Ethics guidelines. Informed consent was obtained by completion of the module evaluation.

Notes

1 http://targetedattacks.trendmicro.com/cyoa/en/.