Rethinking Cybersecurity Literacy for Non-IT Teachers: Frameworks, Pedagogical Challenges, and Future Directions
DOI:
https://doi.org/10.17977/um065.v7.i2.2027.1Keywords:
Cultural adaptation, Cybersecurity literacy, Global education, Non-IT teachers, Pedagogical frameworksAbstract
Digital threats in schools have grown faster than most non-IT teachers' capacity to respond, yet cybersecurity literacy frameworks remain built around technical proficiency rather than classroom practice. This systematic literature review and narrative analysis (SLNA) examines how cybersecurity competency models for non-IT teachers have evolved between 2015 and 2025, and why implementation continues to lag behind framework design. Guided by the PICOS and PRISMA 2020 protocols, the review screened 313 records from Scopus and Consensus AI, retaining 39 studies after full-text eligibility assessment. Bibliometric and thematic analysis traced three research phases (foundation, expansion, consolidation), five dominant thematic clusters, and clear geographic asymmetries, with Europe and North America producing 74.3% of the literature. Findings show that resource-constrained contexts, despite fewer studies, generated a higher innovation index (95%) than well-resourced settings (70%), driven by culturally grounded, low-tech, and community-based solutions. Conventional delivery methods persisted not because of technological limitations but because they fit teachers' existing pedagogical routines and institutional support structures, while governance frameworks struggled to translate policy into classroom practice across decentralized education systems. These findings inform a proposed Pedagogical Cybersecurity Competence (PCC) framework that repositions non-IT teachers as facilitators of cybersecurity literacy rather than technical trainees, integrating content, pedagogical, contextual, and practical knowledge. The review concludes that cybersecurity literacy capacity for general educators depends less on technological sophistication than on pedagogical fit, cultural responsiveness, and collaborative governance.References
Al-Sherideh, A., Maabreh, K., Maabreh, M., Mousa, M., & Asassfeh, M. (2023). Assessing the impact and effectiveness of cybersecurity measures in e-learning on students and educators: A case study. International Journal of Advanced Computer Science and Applications, 14(5). https://doi.org/10.14569/IJACSA.2023.0140516
Almomani, I., Ahmed, M., & Maglaras, L. A. (2021). Cybersecurity maturity assessment framework for higher education institutions in Saudi Arabia. PeerJ Computer Science, 7, e703. https://doi.org/10.7717/peerj-cs.703
Alotaibi, M., Cherdantseva, Y., Rana, O., & Teehan, C. (2024, March). Enhancing cybersecurity education in secondary schools: A CyBOK-based analysis and strategic approach. In INTED2024 Proceedings (p. 1319). https://doi.org/10.21125/inted.2024.1319
Altbach, P. G., & Knight, J. (2007). The internationalization of higher education: Motivations and realities. Journal of Studies in International Education, 11(3–4), 290–305. https://doi.org/10.1177/1028315307303542
Anderson, P., & Park, S. (2023). Digital competency gaps in teacher education. Educational Computing Research, 61(4), 823–845. https://doi.org/10.2190/EC.61.4.d
Andreotti, V. (2011). Actionable postcolonial theory in education. Palgrave Macmillan. https://doi.org/10.1057/9780230118485
Atabek, O. (2019). Challenges in integrating technology into education. Turkish Journal of Educational Technology, 18(2), 45–62. https://doi.org/10.17943/etku.562050
Ayanwale, M. A., Sanusi, I. T., & Adeniran, A. (2024). A structural equation approach and modelling of pre-service teachers' perspectives of cybersecurity education. Education and Information Technologies, 29(3), 3699–3727. https://doi.org/10.1007/s10639-023-11223-8
Ayyash, M., Al-Nuaimi, H., & Hassan, R. (2024). Cybersecurity education and awareness among parents and teachers: A survey of Bahrain. IEEE Access, 12, 86608–86621. https://doi.org/10.1109/ACCESS.2024.3416045
Ball, S. J. (2003). The teacher's soul and the terrors of performativity. Journal of Education Policy, 18(2), 215–228. https://doi.org/10.1080/0268093022000043065
Bhindi, R. (2023). The role of blockchain with a cybersecurity maturity model in the governance of higher education supply chains. In Advanced sciences and technologies for security applications (pp. 1–35). Springer. https://doi.org/10.1007/978-3-031-33627-0_1
Brown, T., & Davis, S. (2023). Conventional versus digital training methods in cybersecurity education. Educational Technology Research, 45(2), 234–251. https://doi.org/10.1080/15391523.2023.2187654
Burrows, A. C., Holton, A., & Price, A. (2022). Computer science beyond coding: Partnering to create teacher cybersecurity microcredentials. Computers & Education, 178, 104395. https://doi.org/10.1016/j.compedu.2021.104395
Catota, F. E., Morgan, M. G., & Sicker, D. C. (2019). Cybersecurity education in a developing nation: The Ecuadorian environment. IEEE Security & Privacy, 17(2), 36–44. https://doi.org/10.1109/MSEC.2019.2897253
Chiou, Y. M., Barnes, T. N., Jelenewicz, S. M., Mouza, C., & Shen, C. C. (2021). Teacher views on storytelling-based cybersecurity education with social robots. In Proceedings of the 2021 ACM Interaction Design and Children Conference (pp. 172–182). ACM. https://doi.org/10.1145/3459990.3465199
Davis, F. D., Bagozzi, R. P., & Warshaw, P. R. (1989). User acceptance of computer technology: A comparison of two theoretical models. Management Science, 35(8), 982–1003. https://doi.org/10.1287/mnsc.35.8.982
Ertmer, P. A. (1999). Addressing first- and second-order barriers to change: Strategies for technology integration. Educational Technology Research and Development, 47(4), 47–61. https://doi.org/10.1007/BF02299597
Fraile, M., Peñalva-Vélez, A., & Lacambra, A. M. (2018). Development of digital competence in secondary education teachers' training. Education Sciences, 8(3), 104. https://doi.org/10.3390/educsci8030104
Gallego-Arrufat, M. J., Torres-Hernández, N., & Pessoa, T. (2019). Competence of future teachers in the digital security area. Comunicar, 27(61), 53–62. https://doi.org/10.3916/C61-2019-05
García-Peñalvo, F. J. (2021). Avoiding the dark side of digital transformation in teaching: An institutional reference framework for eLearning in higher education. Sustainability, 13(4), 2023. https://doi.org/10.3390/su13042023
Ghauri, F. A. (2021). Digital security versus private information. International Journal of Computer Science and Information Security, 19(7), 10–20. https://doi.org/10.5281/zenodo.5164002
Grande-de-Prado, M., García-Peñalvo, F. J., & Therón, R. (2019). Digital security, how do teachers in training perceived themselves? In TEEM'19: Proceedings of the Seventh International Conference on Technological Ecosystems for Enhancing Multiculturality (pp. 755–761). ACM. https://doi.org/10.1145/3362789.3362932
Guillén-Gámez, F. D., Cabero-Almenara, J., Llorente-Cejudo, C., & Palacios-Rodríguez, A. (2024). Digital security in educational contexts: Digital competence and challenges for good practice. Education and Information Technologies, 29(4), 4147–4172. https://doi.org/10.1007/s10639-023-12089-6
Habib, S., Islam, M., & Wasim, M. (2023). Exploring cybersecurity education and training techniques: A comprehensive review of traditional, virtual reality, and augmented reality approaches. Symmetry, 15(12), 2175. https://doi.org/10.3390/sym15122175
Herkanaidu, P., Smith, L., & Johnson, R. (2022). Towards a cross-cultural education framework for online safety awareness: A case study in Thailand. International Journal of Educational Research, 115, 102034. https://doi.org/10.1016/j.ijer.2022.102034
Karagiannis, S., Papaioannou, M., & Magkos, E. (2024). Cybersecurity governance frameworks in educational institutions. Computers & Security, 138, 103651. https://doi.org/10.1016/j.cose.2024.103651
Kilhoffer, S., Martinez, P., & Thompson, A. (2023). “How technical do you get? I'm an English teacher”: Teaching and learning cybersecurity and AI ethics in non-technical subjects. Computers & Education, 198, 104756. https://doi.org/10.1016/j.compedu.2023.104756
Kitchenham, B., Pearl Brereton, O., Budgen, D., Turner, M., Bailey, J., & Linkman, S. (2009). Systematic literature reviews in software engineering: A systematic literature review. Information and Software Technology, 51(1), 7–15. https://doi.org/10.1016/j.infsof.2008.09.009
Kritzinger, E. (2020). Improving cybersafety maturity of South African schools. Information, 11(10), 471. https://doi.org/10.3390/info11100471
Kuzminykh, I., Yevdokymenko, M., Yeremenko, O., & Lemeshko, O. (2021). Increasing teacher competence in cybersecurity using the EU security frameworks. Information Technologies and Learning Tools, 86(6), 62–67. https://doi.org/10.33407/itlt.v86i6.4721
Latorre-Medina, M. J., & Tnibar-Harrus, N. (2023). Digital security in educational training programs: A study based on future teachers' perceptions. Information Technologies and Learning Tools, 95(3), 109–125. https://doi.org/10.33407/itlt.v95i3.5204
Lavicza, Z., Weinhandl, R., Prodromou, T., Anđić, B., Lieban, D., Hohenwarter, M., Fenyvesi, K., Brownell, C., & Diego-Mantecón, J. M. (2022). Developing and evaluating educational innovations for STEAM education in rapidly changing digital technology environments. Sustainability, 14(12), 7237. https://doi.org/10.3390/su14127237
Lee, G., Kim, S., Lee, I., Brown, S., & Carbajal, Y. (2024). Adapting cybersecurity maturity models for resource-constrained settings: A case study of Peru. Electronic Journal of Information Systems in Developing Countries, 90(2), e12350. https://doi.org/10.1002/isd2.12350
Liu, X., Zhang, Y., & Chen, W. (2020). Digital divide and cybersecurity education in developing contexts. International Journal of Educational Development, 78, 102254. https://doi.org/10.1016/j.ijedudev.2020.102254
Maathuis, C., & Chockalingam, S. (2022). Responsible digital security behaviour: Definition and assessment model. In Proceedings of the European Conference on Information Warfare and Security (Vol. 21, pp. 178–187). https://doi.org/10.34190/eccws.21.1.203
Mabitle, K., & Kritzinger, E. (2020). Schoolteacher preference of cyber-safety awareness delivery methods: A South African study. In Artificial intelligence and bioinspired computational methods (Vol. 8, pp. 245–260). https://doi.org/10.1007/978-3-030-34094-0_20
Magunje, C., & Chigona, W. (2024). Perceptions of school management on cyber threats: The case of resource-constrained schools in South Africa. Information Technology for Development, 30(1), 45–67. https://doi.org/10.1080/02681102.2024.2298765
Maina, K., Smith, J., & Rodriguez, P. (2021). Professional development for rural STEM teachers on data science and cybersecurity. Australian and International Journal of Rural Education, 31(2), 25–40. https://doi.org/10.47381/aijre.v31i2.298
Manganello, F., et al. (2024). Shaping the foundation of the SuperCyberKids Learning Framework: A comprehensive analysis of cybersecurity education initiatives. Frontiers in Education, 9, 1375853. https://doi.org/10.3389/feduc.2024.1375853
McLeod, S., Zhang-Kennedy, L., & Stobert, E. (2024). Comparing teacher and creator perspectives on the design of cybersecurity and privacy educational resources. In Proceedings of the Twentieth Symposium on Usable Privacy and Security (SOUPS 2024) (pp. 583–602). https://doi.org/10.1145/3678890.3678935
Mitchell, R., & Garcia, A. (2024). Cybersecurity competency gaps in general education. Journal of Educational Computing Research, 62(2), 445–467. https://doi.org/10.2190/EC.62.2.f
Montanari, M., Calzada, F. M. de C., & Perone, S. (2026). The “un-replicable” classroom: A qualitative study on pedagogical justifications for face-to-face teaching. Zenodo. https://doi.org/10.5281/zenodo.18407937
Mugayitoglu, A., Cross, J., & Yett, B. (2021). Designing a creative cybersecurity microcredential for educators: Challenges and successes. ASEE Annual Conference Proceedings, 35042. https://doi.org/10.18260/1-2--35042
Mukherjee, M., Le, N. T., Chow, Y. W., & Susilo, W. (2024). Strategic approaches to cybersecurity learning: A study of educational models and outcomes. Information, 15(2), 117. https://doi.org/10.3390/info15020117
Oguine, O. C., Kumar, P., Vitak, J., & Shillair, R. (2025). Online safety for all: Sociocultural insights from a systematic review of youth online safety interventions in the Global South. Proceedings of the ACM on Human-Computer Interaction, 9(CSCW1), 1–32. Retrieved from https://arxiv.org/pdf/2504.20308.pdf
Otts, E. V., Panova, E. P., Lobanova, Y. V., Bocharnikova, N. V., Panfilova, V. M., & Panfilov, A. N. (2021). Modification of the role of a teacher under the conditions of distance learning. International Journal of Emerging Technologies in Learning, 16(21), 219–225. https://doi.org/10.3991/ijet.v16i21.25675
Patel, R., & Wong, L. (2024). Cultural adaptation factors in cybersecurity education frameworks. Multicultural Education Review, 16(1), 78–95. https://doi.org/10.1080/2005615X.2024.2298765
Qawasmeh, S. A.-D., AlQahtani, A. A. S., & Khan, M. K. (2024). Navigating cybersecurity training: A comprehensive review. arXiv preprint, arXiv:2401.11326. https://doi.org/10.48550/arXiv.2401.11326
Quayyum, F., & Freberg, K. (2023). Designing cybersecurity awareness solutions for the young people in rural developing countries: Cultural influence, social constructs, literacy levels, and language competence. arXiv preprint, arXiv:2304.12456. https://doi.org/10.48550/arXiv.2304.12456
Renaud, K., & Prior, S. (2021). The “three M's” counter-measures to children's risky online behaviors: Mentor, mitigate and monitor. Information and Computer Security, 29(3), 455–485. https://doi.org/10.1108/ICS-07-2020-0121
Rizvi, F., & Lingard, B. (2010). Globalizing education policy. Routledge. https://doi.org/10.4324/9780203867396
Roberts, M., & Johnson, K. (2024). Pedagogical scaffolding in cybersecurity education for non-technical teachers. Educational Technology Research and Development, 72(1), 123–145. https://doi.org/10.1007/s11423-024-10234-7
Rogers, E. M. (2003). Diffusion of innovations (5th ed.). New York, NY: Free Press.
Sapanca, H. F., & Kanbul, S. (2022). Risk management in digitalized educational environments: Teachers' information security awareness levels. Frontiers in Psychology, 13, 1049378. https://doi.org/10.3389/fpsyg.2022.986561
Schiliro, F. (2023). Towards a contemporary definition of cybersecurity. arXiv preprint, arXiv:2302.02274. https://doi.org/10.48550/arXiv.2302.02274
Schleffers, G., Moser, T., & Pöchhacker-Tröscher, G. (2023). Pedagogical frameworks for cybersecurity education in diverse settings. Computers & Education, 195, 104720. https://doi.org/10.1016/j.compedu.2022.104720
Stobert, E., Cavar, E., Malisa, L., & Sommer, D. (2018). Teaching authentication as a life skill. IEEE Security & Privacy, 16(5), 82–85. https://doi.org/10.1109/MSP.2018.3761712
Tazi, L., Kumar, P., Tripathi, S., Parekh, P., Kim, Y. J., Kumar, N., Wijesekera, D., & Vitak, J. (2021). Parents, educators, & caregivers cybersecurity & privacy concerns for remote learning during COVID-19. In Proceedings of the CHI Conference on Human Factors in Computing Systems (pp. 1–14). ACM. https://doi.org/10.1145/3411764.3445674
Tikly, L. (2004). Education and the new imperialism. Comparative Education, 40(2), 173–198. https://doi.org/10.1080/0305006042000231347
Tomczyk, Ł. (2019). What do teachers know about digital safety? Computers in the Schools, 36(3), 167–187. https://doi.org/10.1080/07380569.2019.1642728
Torres, M., & Thompson, N. (2020). Toward a cyber security adoption framework for primary and secondary education providers [Unpublished manuscript].
Torres-Hernández, N., & Gallego-Arrufat, M. J. (2022). Indicators to assess preservice teachers' digital competence in security: A systematic review. Education and Information Technologies, 27(6), 8583–8602. https://doi.org/10.1007/s10639-022-10978-w
Workman, M., Bommer, W. H., & Straub, D. (2008). Security lapses and the omission of information security measures: A threat control model and empirical test. Computers in Human Behavior, 24(6), 2799–2816. https://doi.org/10.1016/j.chb.2008.04.005
Xenakis, A., Vlachos, V., Roig, P. J., et al. (2024). Addressing the necessity of cybersecurity literacy: The case of ETTCS CyberTeach project. Information & Computer Security. https://doi.org/10.1108/ICS-04-2024-0095
Yan, Z., Xue, Y., & Lou, Y. (2021). Risk and protective factors for intuitive and rational judgment of cybersecurity risks in a large sample of K-12 students and teachers. Computers in Human Behavior, 121, 106791. https://doi.org/10.1016/j.chb.2021.106791
Zha, H., Li, W., Wang, W., & Xiao, J. (2025). The paradox of AI empowerment in primary school physical education: Why technology may hinder, not help, teaching efficiency. Behavioral Sciences, 15(2), 240. https://doi.org/10.3390/bs15020240
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Yudi Setiawan, Ade Gafar Abdullah, Haipan Salam
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
