Business Commons^™

Software-Defined Networking Powered By Ai-Driven Anomaly Detection, Dina Moloja, Vusumuzi Malele Prof

Journal of Cybersecurity Education, Research and Practice

Software Defined Networking (SDN) revolutionizes network control by separating the control plane from the data plane. Although the latter improves SDN agility and scalability, it creates a security hole, particularly in a central control plane, leading to SDN environments becoming high-profile targets for advanced cybersecurity threats. Due to static and signature-based point-in-time behavior, traditional security methods are unable to keep up with modern attacks that are an anomaly to SDNs. Artificial Intelligence (AI) with its different applications and techniques, has the capability of detecting SDN cyber threats’ anomalies. This paper presents the results of a literature scoping exercise that used …

Experts’ Validation Of The Fundamental Cybersecurity Competency Index (Fcci) Using A Commercial Cyber Range Through Human-Generative Artificial Intelligence (Genai) Teaming, Dariusz Witko, Yair Levy, Catherine Neubauer, Greg Simco, Laurie P. Dringus, Melissa Carlton

Journal of Cybersecurity Education, Research and Practice

The increasing volume of cyber threats, combined with a critical shortage of skilled professionals and rising burnout among practitioners, highlights the urgent need for innovative solutions in cybersecurity operations. Generative Artificial Intelligence (GenAI) offers promising potential to augment human analysts in cybersecurity, but its integration requires rigorous validation of the fundamental competencies that enable effective collaboration of human-GenAI teams. This research study employed a mixed-methods research project designed to evaluate human-GenAI teams, emphasizing the role of expert consensus in shaping the experimental assessment of the Fundamental Cybersecurity Competency Index (FCCI) in a commercial cyber range. We engaged 20 Subject Matter …

Security And Privacy Of Wearable And Implantable Medical Devices: A Course-Based Approach To Medical Device Cybersecurity Education, Michelle M. Ramim

Journal of Cybersecurity Education, Research and Practice

As wearable and implantable medical devices become integral to remote patient monitoring and precision medicine, the associated cybersecurity and privacy risks demand urgent attention. These devices are increasingly targeted by cyberattacks, potentially endangering patient safety and data integrity. To address this, we developed an experiential learning course titled Security and Privacy of Wearable and Implantable Medical Devices, designed for advanced undergraduate and graduate students in health and medical fields. The course immerses students in real-world challenges through lectures, labs, and project-based learning, leveraging wearable devices such as FitBit^TM to analyze and interpret real-time personal health data. The curriculum …

Systematic Review Of Elementary Cybersecurity Education: Curriculum, Pedagogy, And Barriers, Na Liu, Siyu Long, Florence Martin

Journal of Cybersecurity Education, Research and Practice

Abstract -As children increasingly engage with digital platforms, the need for effective cybersecurity education has become urgent. This systematic review synthesizes 81 studies published between 2017 and 2024 to examine global curricula research focus and topics, pedagogical approaches and assessment methods, and key challenges in elementary cybersecurity education. The findings reveal six major thematic categories: student awareness, parental mediation, teacher engagement, curriculum design, community and policy support, and pedagogical innovation. Among instructional strategies, game-based learning and narrative storytelling emerge as the most frequently explored. Despite this growth, major gaps remain in curriculum consistency, teacher preparation, assessment rigor, and stakeholder coordination. …

Higher Education Cybersecurity: A Vulnerability Assessment Of The U.S. South’S Institutional Websites, Zachary W. Taylor, Vivi Vo

Journal of Cybersecurity Education, Research and Practice

As technology continues to advance, it is critical to understand how higher education institutions protect digital information of their stakeholders including students, faculty, and staff through cybersecurity measures. Although conceptual research has articulated various aspects of cybersecurity, no empirical research has explored the cybersecurity of higher education (.edu) websites through a vulnerability scan of these websites via an open PortScan and analysis. To fill a critical gap in the literature, this study conducted a vulnerability scan and open PortScan and analysis of all higher education websites in three of the lowest-income states in the United States: Louisiana (n=112), Mississippi (n=52), …

Impact Of Information Security Awareness Training On Knowledge, Attitude, And Behavior: A K-12 Case Study, Michael S. Robbins, Christopher Robbins

Journal of Cybersecurity Education, Research and Practice

Abstract— Information security breaches remain a serious threat across all sectors, often exploiting human factors rather than technical flaws. This study examines how a structured Information Security Awareness (ISA) training program influences employees’ knowledge of security policies, attitudes towards those policies, and self-reported security behaviors within a K-12 educational environment. A quantitative pre-test/post-test design was employed with 201 staff members (administrators, teachers, and support personnel) in a public school district. Participants completed the Human Aspects of Information Security Questionnaire (HAIS-Q) before and after undergoing an interactive cybersecurity training program. Statistical analysis revealed a significant improvement in information security knowledge, attitudes, …

Prompt Engineering For Genai In Cybersecurity Incident Response: A Multi-Platform Evaluation Based On Nice Pr-Ir-001, Yuanyuan Liu

Journal of Cybersecurity Education, Research and Practice

This study explores the application of prompt engineering in cybersecurity education, mainly by evaluating the performance of different generative artificial intelligence (GenAI) platforms when performing tasks consistent with the NICE framework role pr-ir-001 - Network Defense Incident Responder. The study employed structured prompts designed for a medical technology environment compliant with HIPAA and NIST SP 800-53, while the tasks of the three GenAI models (GPT-4, Gemini, and DeepSeek) were to generate event response scenarios. Their outputs will be evaluated from four aspects: accuracy, relevance, clarity and completeness.

The results show that the three models differ in depth and consistency, but …

Arizona’S Experiential Learning Opportunities: Regional Security Operations Centers And Cybersecurity Clinics, Joshua Kipers, Paul Wagner, Robert J. Honomichl

Journal of Cybersecurity Education, Research and Practice

The increasing frequency, sophistication, and economic impact of cybersecurity incidents have intensified the global demand for a skilled cybersecurity workforce. Traditional academic programs often fail to provide the applied experience necessary to prepare graduates for the rapidly evolving threat landscape. This paper examines Arizona’s innovative approaches to experiential cybersecurity education through the establishment of Regional Security Operations Centers (RSOCs) and the Arizona Cybersecurity Clinic. These initiatives integrate Kolb’s Experiential Learning Theory and the NICE Cybersecurity Workforce Framework to align academic preparation with real-world practice. The RSOCs, supported by the Arizona Department of Homeland Security, provide paid student internships focused on …

Static Malware Analysis For Incident Response: Developing A Tactical Aid With Ember, Joel Meoak, Shengjie Xu

Journal of Cybersecurity Education, Research and Practice

Incident responders face a variety of challenges when identifying malware using existing solutions, particularly when rapid tactical decisions are needed. Traditional malware detection methods are often signature-based, limiting their effectiveness to previously known threats detected by anti-virus (AV) engines. Online analysis tools introduce confidentiality risks, potentially alerting adversaries that their actions are under scrutiny. While free sandbox environments offer useful capabilities, they often require substantial setup time and hardware resources that may not be available in the field. This research leverages the Elastic Malware Benchmark for Empowering Researchers (EMBER) dataset to develop a lightweight, portable tactical decision aid that enables …

Payments Systems Portfolio: The Genius Act And Stablecoins As A Geoeconomic Tool, Ashu Ebot-Tabi

Graduate Scholarly Works

In-depth research paper discussing stablecoins: specifically how they work, their rise in popularity, and how recent legislation could be used to make them a tool to further America's global economic power.

Problematic Smartphone Use Experiences Of Students, Gbolahan Olasina

The African Journal of Information Systems

Smartphones extend people's opportunities by improving their daily living and well-being. Hence, given the tool’s features and affordances that promote human development, smartphones facilitate the achievement of the individual liberties and freedoms of ordinary people. However, there are serious concerns about the emotional, social and cultural factors underlying smartphone usage patterns and their association with problematic use and depressive behaviors. Therefore, the overriding goal of the research reported on in this paper was to investigate how smartphone use influences individuals’ emotional wellness, interpersonal relationships and sociocultural contexts. Existing academic literature indicated that there was a need to investigate the intricate …

Factors Influencing The Use Of Gis-Enabled Public E-Participation For Municipal Solid Waste Management, Irene Arinaitwe, Agnes Nakakawa, Gilbert Maiga

The African Journal of Information Systems

Due to rapid global population growth and urbanization, approximately two billion metric tons of waste are generated annually. Municipal solid waste management has become a critical function for urban authorities. However, many urban authorities in low- and middle-income economies cannot provide efficient municipal solid waste management services because of suboptimal stakeholder participation in governance processes and inadequate information exchange. Therefore, this study sought to determine factors that influence the implementation of GIS-enabled public e-participation using Enhanced Adaptive Structuration Theory. A descriptive field study was conducted among staff of municipal authorities and residents in Uganda’s Kampala Metropolitan Area. Data were analyzed …

Experiential Learning: Innovative Approaches To Post-Secondary Cybersecurity Education, Brendan Bertone, Paul Wagner, Joshua Pauli

Journal of Cybersecurity Education, Research and Practice

The cybersecurity profession continues to face a significant shortfall of qualified professionals despite steady growth in degree programs. Employers consistently cite experience as the main barrier for entry-level cybersecurity hires. This paper argues that clinic-based experiential learning offers a scalable solution to that preparation gap. A systematic literature review spanning academic and professional literature was conducted to examine: (1) barriers to entry for aspiring cybersecurity professionals; (2) the effectiveness of experiential learning compared to traditional instruction; and (3) the viability and scalability of cybersecurity clinics. Screening emphasized workforce development, experiential pedagogy, and alignment with the NICE Cybersecurity Workforce Framework. Findings …

Information Security Awareness And Behavior Of Smartphone Users In The Ibadan Metropolis, Nigeria, Funmilola Olubunmi Omotayo

Journal of Cybersecurity Education, Research and Practice

Today, there is a rapid increase in the number of people using the Internet via smartphones and relying on them for most of their daily activities. Consequently, smartphones are becoming the target of criminals for atrocious purposes. This study investigated the information security awareness and behavior of smartphone users in the Ibadan metropolis, Nigeria. The study adopted a descriptive survey design. Data was collected with a questionnaire from 400 respondents who were conveniently selected. Findings revealed that most smartphone users knew about the smartphone security features available on their phones. However, most also engaged in behaviors that threatened their information …

Assessing The Influence Of The Electronic Levy On Consumer Purchasing Behaviour In The Ghanaian E-Commerce Sector, Jefferson Sigfred Seyeram Bansa, David Asumadu - Boateng, Harry Adjetey Ashong, Rubby Aku Ameh

African Conference on Information Systems and Technology

This study examines the influence of Ghana’s Electronic Transfer Levy (E-Levy) on consumer purchasing behaviour within the country’s emerging e-commerce ecosystem. Using a qualitative phenomenological approach, data were collected through semi-structured interviews with 15 consumers in Accra and Kumasi to explore how the levy affected their trust in digital platforms, transaction patterns, and engagement with e-commerce. Thematic analysis revealed four major findings: reduced frequency of online purchases, strategic avoidance of mobile money and other taxed platforms, restructuring of transactions to minimize costs, and a growing mistrust of digital systems fueled by misinformation and lack of policy clarity. While some consumers …

The Effects Of Organisational Culture In Strengthening Resilience And Technological Innovation: A Case Of Smes In South Africa, Lunathi Gwayi, Ayanda Pekane, Luzuko Tekeni

African Conference on Information Systems and Technology

The COVID-19 pandemic changed how small and medium enterprises (SMEs) operated by forcing rapid digital transformation and remote work. This created an urgent need to understand how organisational culture can support resilience and encourage innovation. This study addressed the knowledge gap regarding how a strong organisational culture can help SMEs in South Africa navigate global crises, adapt to digital demands, and sustain long-term growth. The purpose of the study was explanatory, supported by an interpretive, inductive approach, and a qualitative strategy. Through semi-structured interviews with senior managers in the South African IT sector, the research identified Clan and Adhocracy cultures …

Indigenous Finance And Women Empowerment: The Digital Transformation Of Stokvel Systems In South Africa, Papama Mtambeka, Ulrike Rivett, Rebecca Njuguna

African Conference on Information Systems and Technology

This paper explores how the digital transformation of stokvels in South Africa is reshaping women’s empowerment. Stokvels, a form of indigenous savings or rotating savings clubs, have long served as a financial safety net for women, particularly for underserved rural and peri-urban communities. However, with the increasing integration of mobile technologies, fintech platforms, and digital communication tools, these systems are undergoing a significant shift. Drawing on qualitative data from South African women engaged in digitally transformed stokvels, the study examines how digital tools redefine women’s economic and social empowerment. Through the lens of Nego-feminism and Snail-sense feminism, the research highlights …

The Integration Of Agile Methodologies In Devops Practices Within The Information Technology Industry, Ashley Hourigan, Ridewaan Hanslo

African Conference on Information Systems and Technology

The demand for rapid software delivery in the Information Technology (IT) industry has significantly intensified, emphasising the need for faster software products and service releases with enhanced features to meet customer expectations. Agile methodologies are replacing traditional approaches such as Waterfall, where flexibility, iterative development and adaptation to change are favoured over rigid planning and execution. DevOps, a subsequent evolution from Agile, emphasises collaborative efforts in development and operations teams, focusing on continuous integration and deployment to deliver resilient and high-quality software products and services. This study aims to critically assess both Agile and DevOps practices in the IT industry …

Employee’S Willingness To Engage In Information Security Incident Reporting, Ryan Moodley, Salah Kabanda

African Conference on Information Systems and Technology

Organisations employ several strategies for mitigating insider threats, and yet recent studies have shown that insider threats continue to surge. Strategies are mostly reliant on technological solutions and more recently, a human centered approach where the focus is on psychological profile and behavioural habits of the individual posing the threat (the insider). The role of employees in reporting the insider or in the reporting of security incidents has received limited attention. This paper, through a literature review synthesis, identifies the factors influencing an employee’s willingness to report an insider and consequently reporting of security incidents. Through a thematic analysis of …

Efficacy Of Fintech Solutions In Advancing Financial Inclusion For The Underserved In South Africa: A Systematic Literature Review, Tebogo S. Legodi, Adheesh Budree

African Conference on Information Systems and Technology

Financial inclusion in South Africa is a critical mechanism for addressing systemic poverty, unemployment, and inequality. Fintech solutions have increasingly been positioned as key enablers of expanded access to financial services, particularly among underserved populations. However, there remains a lack of literature that evaluates the efficacy, rather than merely the impact, of these technologies. This study presents a systematic literature review (SLR) of 21 peer-reviewed articles, policy documents, and industry reports to examine how Fintech advances financial inclusion in South Africa. The literature is synthesised into four thematic categories: Financial Inclusion (Concepts and Metrics); Fintech in South Africa and Global …

Smart Mobility Technologies In Urban Areas Of Emerging Economies: A Bibliometric Analysis, Peter Mugisha, Rose Luke, Joash Mageto, Hossana Twinomurinzi

African Conference on Information Systems and Technology

Despite the adoption of smart mobility solutions in emerging economies, challenges such as traffic congestion, pollution and inadequate infrastructure still persist. This study analyses 540 scholarly articles published between 2003 and 2024 to evaluate how smart mobility technologies – such as Intelligent Transportation Systems (ITS), Internet of Things (IoT) and Artificial Intelligence (AI) – have been implemented in these regions. Data was retrieved from Scopus and Web of Science and analysed using Biblioshiny for bibliometric mapping and Atlas.ti for thematic analysis. The review identifies research trends and gaps, showing how ITS has improved transport management in cities like Nairobi, and …

Applying Detective Analytics For Mitigating Financial Crime In An Organisation, Nontobeko Mlambo, Tiko Iyamu

African Conference on Information Systems and Technology

Despite the growing popularity of detective analytics, it is consistently challenging to understand the factors that influence the adoption. This is increasingly discouraging organisations, even though the tool is important for tracing, tracking, and mitigating financial crime. This study applied concepts of ‘follow the actors’ and shifting negotiation of actor-network theory (ANT) to gain a better understanding of the factors that influence the adoption of detective analytics in a qualitative case study using a South African-based financial organisation. From the analysis, integration of analytics tools, integration of detective analytics with other systems and processes, development of a template for each …

Exploring The Role Of Affordances And Constraints In Shaping Trust Within The Mobile Money Ecosystem: A Case Of Rural Communities In Sub-Saharan Africa, Raphael Amponsah, Eric Afful-Dadzie, Richard Boateng, Emmanuel Awuni Kolog

African Conference on Information Systems and Technology

This study delves into the intricacies of mobile money technology (MMT) in rural areas of Low-Middle Income Countries (LMICs) and examines its ecosystem dynamics, affordances, constraints, and the role of trust in adoption and sustained usage. It aims to address the existing gaps in understanding the challenges and inconsistencies surrounding MMT interactions in rural communities. Emphasizing the importance of viewing MMT as an evolving ecosystem rather than just a platform, the study seeks to uncover new perspectives on the affordances and constraints shaping trust and adoption in rural communities. Primarily, the study seeks to contribute theoretically to the discourse on …

Exploring The Role Of Ict In Empowering Grassroots Innovation And Entrepreneurship: A Cross-Sectional Study Of Iringa Region In Tanzania, Emma Nkonoki, Ruthbetha Kateule, Ville Leppänen

The African Journal of Information Systems

ICT-enabled grassroots innovation has been extensively researched; however, there is a lack of empirical evidence as to its potential contribution to resource-scarce settings in Africa. This paper aims to explore the transformative role of ICT from idea generation to sustained entrepreneurship using the Iringa region in Tanzania as a case study. This qualitative study delves into the experiences of four grassroots entrepreneurs, revealing the interplay between technology, resource scarcity and the aspirations of those entrepreneurs. Data was collected through semi-structured interviews and was examined extensively using thematic analysis. This revealed how ICT assists innovative young entrepreneurs to identify and utilize …

A Comprehensive Review On Gamification In Neurocybersecurity, Ms. Kritika

Journal of Cybersecurity Education, Research and Practice

The research investigates gamification methods as it applies to the emerging interdisciplinary domain that brings together cybersecurity with neuroscience and psychology. Neurocybersecurity implements neural concepts to protect digital systems from security threats while targeting the human vulnerabilities that present as the strongest points of attack. Several researchers have examined gamification techniques which incorporate game design elements to enhance cybersecurity training outcomes by improving user participation and knowledge retention and user conduct compliance. The research incorporates Self-Determination Theory along with Cognitive Load Theory to explain the design principles for efficient gamified interventions. The implementation of both cognitive performance improvement and neuroplasticity …

Unpacking Digital Transformation – Constructing A Framework Based On Industry Use Cases, Khawaja Asjad Saeed, Andrew William Green, Alison Brooke Hedrick

Faculty Articles

Based on industry use cases, we identify six distinct types of digital transformation (DT), each grounded in a specific concept or enabling technology. These DT types can be implemented individually or combined to drive transformation initiatives. While deploying a single DT type often focuses on improving operational efficiency or streamlining existing workflows, initiatives that combine multiple DT types tend to pursue more ambitious goals, such as the creation of new products, services, or business models. However, the complexity increases significantly with the integration of multiple DT types, as organizations must not only address behavioral changes but also overcome technical challenges …

Optimizing Information Security In Cloud Environments: A Risk Management Approach And Guide For Enterprise Cloud Security, Joshua Olusegun Oyeniyi, Oluwashina Akinloye Oyeniran

Journal of Cybersecurity Education, Research and Practice

In recent years, cloud computing has become increasingly integral to organizational operations due to its scalability, accessibility and cost effectiveness in managing data and resources. However, the rise in security threats and attacks on cloud environments necessitates having robust measures in place to protect data confidentiality, integrity and availability. This paper presents an optimized approach to cloud information security management by reviewing the current threat landscape, evaluating key risk management frameworks, and provided practical solutions for enhancing enterprise cloud security. The study examined three leading cloud security frameworks: the Cloud Controls Matrix (CCM) known for its cloud-specific controls, the NIST …

Kennesaw State University Student Managed Investment Fund Sector Sensitivity Analysis, John Kiersznowski, Joe Johnson, Kyler Howell, Geranger Lewis

Senior Design Project For Engineers

The Kennesaw State University Student Managed Investment Fund (SMIF) Sector Sensitivity Analysis focuses on improving the fund’s decision-making and performance through data science. The SMIF is a diversified index fund designed to outperform indices like the S&P 500. This project investigates how macroeconomic variables—such as GDP growth, inflation, interest rates, and commodity prices—impact sector performance. By structuring data, developing a sustainable data pipeline, and leveraging advanced statistical techniques and predictive modeling, our team was able to provide the framework and proof of actionable insights that enhance the fund's ability to manage risks and optimize returns.

Corporate Governance And Environmental Citizenship In Global Hospitality: A Cross-National Empirical Study, Leonard A. Jackson

Faculty Articles

The hospitality industry’s global reach and resource-intensive operations have placed it under growing scrutiny for environmental impact. This empirical study examines how corporate governance influences corporate environmental citizenship (CEC) among eight major hotel companies across North America, Europe, and Asia from 2020 to 2023. Drawing on agency, stakeholder, institutional, and legitimacy theories, the study hypothesizes that stronger governance—measured by board independence, separation of CEO and Chair roles (non-duality), and ownership concentration—positively relates to environmental performance. A panel dataset of 32 firm-year observations is analyzed using regression models. The results show that higher board independence and greater ownership concentration are associated …

The National Cybersecurity Teaching Coalition: Expanding Cybersecurity Education Opportunities, Paul Wagner, Melissa Dark, Robert Honomichl, Filipo Sharevski, Sandra Leiterman

Journal of Cybersecurity Education, Research and Practice

The increasing prevalence of cybersecurity threats and the shortage of qualified professionals necessitate innovative solutions for cybersecurity education at all levels. Despite the expansion of post-secondary cybersecurity programs, employer dissatisfaction with graduates and a lack of standardized introductory curricula highlights the need for structured secondary education pathways. The National Cybersecurity Teaching Coalition (NCTC) and its National Cybersecurity Teaching Academy (NCTA) address this gap by equipping high school educators with the necessary knowledge and credentials to teach cybersecurity effectively. NCTA offers an 18-credit cybersecurity graduate certificate program to ensure teachers are competent and confident to develop and teach cybersecurity curriculum with …