A UK Case Study on Cybersecurity Education and Accreditation

Abstract

This paper presents a national case study-based analysis of the numerous dimensions to cybersecurity education and how they are prioritised, implemented and accredited; from understanding the interaction of hardware and software, moving from theory to practice (and vice versa), to human factors, policy and politics (as well as various other important facets). A multitude of model curricula and recommendations have been presented and discussed in international fora in recent years, with varying levels of impact on education, policy and practice. This paper address three key questions: i) what is taught and what should be taught for cybersecurity to general computer science students; ii) should cybersecurity be taught stand-alone or in an integrated manner to general computer science students; and iii) can accreditation by national professional, statutory and regulatory bodies enhance the provision of cybersecurity within a body's jurisdiction?Evaluating how cybersecurity is taught in all aspects of computer science is clearly a task of considerable size, one that is beyond the scope of this paper. Instead a case study-based research approach -primarily focusing on the UK -has been adopted to evaluate the evidence of the teaching of cybersecurity within general computer science to university-level students. Thus, in the context of widespread international computer science/engineering curriculum reform, what does this need to embed cybersecurity knowledge and skills mean more generally for institutions and educators, and how can we teach this subject more effectively? Through this UK case study, and by contrasting with related initiatives in the US, we demonstrate the positive effect that national accreditation requirements can have, and offer some recommendations both for future research and curriculum developments.

Resilience and Effective Learning in First-Year Undergraduate Computer Science

“…Additionally, positive psychology measures (and more specifically NMRQ) are candidates for inclusion in learning analytic models related to student success. Finally, we recognise that there is a specific UK context to some of these computer science education challenges -both with substantial national (school-level) curriculum and qualifications reform [6], as well as a significant socio-economic push to produce more graduates with "high-value" digital, data and cyber skills [11,12,14,41]. However, aspects of these reforms (with similar policy drivers) are being replicated internationally e.g.…”

The Impact of COVID-19 and “Emergency Remote Teaching” on the UK Computer Science Education Community

“…This clearly resonates with recent curricula and qualifications reform across the four nations of the UK, especially as computer science is starting to become more established as a school-level subject [2,4,15,32]. There is also an increasing focus on identifying and refining effective pedagogic approaches for LT&A on key topics in computer science, such as mathematical foundations, programming and cybersecurity [13,14,16,18,34,37,42]. However, there are concerns of top-down, "one-size-fits-all" institutional or national approaches that do not recognise the unique characteristics of LT&A in computer science across the various settings and levels.…”

“…However, there has been little focus on what this means for computer science education and practitioners, especially thinking about the range of specific disciplinary challenges for LT&A, across all settings and levels. This directly links to recent significant changes to computer science curricula, qualifications and practice across the UK [4,11,18,34], as well as the emerging focus on the required digital skills and infrastructure to support the UK's post-COVID economic renewal [14,17,45].…”

“…to support the UK's post-COVID economic renewal [33]. We have also seen the announcement of a review of academic accreditation of computer science degrees [12,14] launched at the start of July, to "ensure that computing graduates have the skills needed to drive economic recovery as data science and AI change the industry post COVID-19" 3 .…”

The Institute of Coding: A University-Industry Collaboration to Address the UK’s Digital Skills Crisis

“…in programming and software engineering [36]), cybersecurity education (e.g. [60], [61]) and degree accreditation [51], [62]. When establishing a model for viewing computer science education initiatives, it is apparent that there is substantial diversity between education systems -from formal school curricula through to tertiary education, as well as wider education policy and funding -and this can create obstacles when trying to understand progress made in one country and potentially replicate it in another [63], [64].…”