Management Information Systems Commons^™

People Orientation And Thing Orientation In Business Majors: Implications For Assessing The Impacts Of Cross-Functional Business Program Curricula, Todd J. Hostager, David A. Christopher, Kristy J. Lauver, Christopher Knowles

International Journal for Business Education

Background/Introduction/Purpose:  Prior research documented significant differences in people orientation and thing orientation (PTO) based on type of major and sex.  This study examines a set of measures for helping business programs to assess whether they are producing graduates equipped to consider both people and things when making decisions, regardless of their major or sex.

Methods/Design:  Students in a strategic management capstone course spent a single 75-minute session responding to a brief new venture pitch by identifying what types of additional information they would need to decide whether to invest in the business.  Three Likert-scaled options gauged the extent to participant …

Green Information Systems Adoption And Business Outcomes In Ugandan Smes: An Extended Theory Of Planned Behaviour Approach, Sonny Juma Nyeko, Samali Mlay, Cosmas Ogenmungu, Abdallah Ibrahim Nyero

Business Management Review

The study assesses the relationship between TPB antecedents and GIS business outcomes in SMEs, using an expanded TPB framework. Researchers gathered data from SMEs via a survey and analysed it using PLS-SEM. The framework used in the study explains 58.5% of the differences in GIS business outcomes. The results reveal that subjective norms, attitude, benefits, and obstacles are significant predictors of GIS business outcomes such as ecological IT practices, although perceived behavioural control displays an insignificant negative relationship. The study extended the TPB model by incorporating GIS benefits and GIS obstacles as additional factors influencing GIS adoption, business outcomes, …

Clinic-In-A-Box: A Portable, Software-Defined Cyber Range For Realistic, Scenario-Based Cybersecurity Training, Ethan Chumley, Aaron Nair, Royce Yaezenko, Joshua Payne, Veronika Kyles, Paul Wagner, Robert J. Honomichl, Ryan Straight, Shengjie Xu

Journal of Cybersecurity Education, Research and Practice

Realistic, hands-on cybersecurity training has traditionally depended on fixed infrastructure such as dedicated lab hardware, cloud subscriptions, or permanent network connectivity, limiting where and how often it can be delivered. This paper presents the design and implementation of a portable, scenario-based cybersecurity training platform housed in a single travel case and built from commodity hardware, type-1 hypervisor virtualization, containerized service orchestration, and software-defined networking. The platform clones, isolates, and resets complete lab environments on demand, allowing the same physical system to support repeated classroom, workshop, or field deployments with minimal manual reconfiguration. Training scenarios are grounded in generated organizational profiles …

Between Digital Transformation And Regulatory Vacuum: Cybersecurity Of Public Services In Mozambique, Faztudo Languisse Eng.

Journal of Cybersecurity Education, Research and Practice

The rapid expansion of digital public services in Mozambique—including e-government platforms, digital health systems, and electronic tax administration—has outpaced the development of a coherent legal framework for cybersecurity. While Law No. 3/2017 (Electronic Transactions Law) of 9 January 2017 introduced foundational data-protection principles, Mozambique long lacked a dedicated cybersecurity regulatory authority, mandatory security standards, and formal incident-notification mechanisms. This regulatory vacuum exposed critical public services to escalating cyber risks as digital transformation was actively promoted as a development priority. This article examines the legal and institutional gaps in Mozambique's cybersecurity governance framework prior to the 2026 Cybersecurity and Cybercrime Laws, …

Self Efficacy And Instructional Support Predict Cyber Deception Acceptance In Ics And Ot Cybersecurity, Daniel Ward

Journal of Cybersecurity Education, Research and Practice

Cyber deception can produce high-confidence evidence of unauthorized activity in industrial control systems (ICS) and operational technology (OT), but practitioners must consider the technology useful, safe, understandable, and supported before they will use it. This study reports a secondary quantitative analysis of a deidentified survey of United States-based ICS and OT professionals to determine whether psychological and instructional factors predict adoption readiness and effective utilization beyond education, experience, and sector. Hierarchical ordinary least squares regression with HC3 robust standard errors was conducted on 262 complete cases. The demographics-only model was not significant and explained 2.8 percent of outcome variance. Adding …

Opengrcrmf: A Vendor-Neutral Framework For Teaching And Modeling Rmf Automation, Continuous Authorization, And Zero Trust Governance, Anand Janjal

Journal of Cybersecurity Education, Research and Practice

Abstract—Federal and regulated organizations continue to rely on document-centric Authorization to Operate (ATO) processes even as the NIST Risk Management Framework (RMF), continuous monitoring guidance, Zero Trust Architecture (ZTA), and continuous authorization initiatives require more continuous, evidence-driven risk management [1]-[3], [13], [15]. Manual System Security Plan (SSP) updates, spreadsheet-based Plan of Action and Milestones (POA&M) tracking, and disconnected assessment evidence create governance latency: the delay between operational security events and authorization-ready governance response. This paper presents OpenGRCRMF, a proposed open, vendor-neutral reference framework that models RMF lifecycle activities as workflow states, treats authorization artifacts as structured governance objects, and …

A Return On Investment (Roi) Evaluation Tool For Quantifying The Value Of Cybersecurity Certifications, Nicolas Meysmans, Kelly Hughes

Journal of Cybersecurity Education, Research and Practice

The growing reliance on cybersecurity certifications has increased the financial and professional stakes associated with certification decision-making for cybersecurity professionals. Despite their widespread use in hiring and career advancement, there is limited objective guidance available to help individuals evaluate the return on investment (ROI) of specific certifications. This gap has created uncertainty regarding which credentials provide the greatest value relative to their cost and market impact. This study presents a data-driven, design science–based tool that supports cybersecurity professionals in evaluating certification ROI using practitioner survey data combined with certification cost and labor-market demand indicators. The paper also demonstrates how such …

From Disruption To Replacement: The 2026 Cae Cybersecurity Community Symposium And The Emerging Federal-Academic Compact For An Ai Workforce, Sunday Oludare Ogunlana

Journal of Cybersecurity Education, Research and Practice

The cybersecurity workforce gap in the United States is estimated at several hundred thousand unfilled positions, and the rapid integration of artificial intelligence into adversary tradecraft and federal cyber operations is widening that gap qualitatively as well as quantitatively, threatening national security and the operational readiness of graduates entering the field. This perspective article synthesizes the principal arguments advanced by five federal and academic speakers at the 2026 CAE Cybersecurity Community Symposium, using verbatim session transcripts, a structured thematic extraction process, and triangulation against published workforce policy and peer-reviewed literature. Findings document a unified speaker thesis that artificial intelligence now …

Strategic Information System Leadership And Information System Function Performance In Universities In Kenya: A Pls-Sem Analysis, Joseph K. Muchina, James M. Njihia Prof., Agnes N. Wausi Prof.

International Journal of Applied Management and Technology

Information systems as enablers have evolved from an efficiency and effectiveness focus to enterprise-wide performance, placing strong demands on information system leadership. Emerging leadership models call for collaborative practices. Information systems leadership in higher education is a challenging task. Universities' top management team members and their information system executive counterparts lack a common and shared vision and understanding of information systems capabilities and roles. As the highest-ranking officers in organizations, they make strategic IS decisions. Yet, noting that existing approaches are ineffective, there is a growing concern about the kind of leadership needed to guide the institutions. Four sets of …

Closing The Awareness–Behavior Gap: A Role-Based Phishing Training Framework For Higher Education, Ranylene O. Olaybal, Ryan A. Olaybal

Journal of Cybersecurity Education, Research and Practice

Phishing remains one of the most persistent cybersecurity threats facing higher education institutions, where diverse user populations and highly connected digital environments increase exposure to social engineering attacks. Although cybersecurity awareness initiatives are widely implemented, high awareness does not always translate into secure behavior. This study examined phishing awareness, phishing-related practices, phishing susceptibility, and phishing experiences among college students, teaching faculty, and administrative staff in a private higher education institution in the Philippines. Using a quantitative cross-sectional design, data were collected from 553 respondents through a validated survey instrument and analyzed using descriptive statistics, one-way analysis of variance, Tukey's honestly …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

How Does An Advanced Educator Utilize Digital Language Teaching And Learning By Integrating Linguistic, Cultural, And Business Life Perspectives?, Hely Westerholm, Pirjo Takanen-Körperich, Ph.D.

International Journal for Business Education

This paper explores advanced educators’ digital working capabilities in online language teaching, with a particular focus on sharing Finnish language and culture in a foreign context. Cultural and linguistic knowledge play a significant role in enhancing students’ motivation to study foreign languages. In today’s educational environment, digitalisation and globalisation exert an increasing influence on foreign language teaching and learning.

The digital learning environment has brought about a paradigm shift in foreign language didactics. Digital language learning is both challenging and holistic in nature. Continued foreign language learning is simultaneously an individual and a social process, as digital learning cultures impose …

How Grades Changed Before, During And After Covid-19 In A Business College, Douglas R. Moodie, Alison Keefe, Robin Cheramie

International Journal for Business Education

Purpose: This study examines how undergraduate business student grades changed before, during, and after the COVID-19 pandemic using a large institutional dataset from a business college in a US university between 2015 and 2024.

Method: The analysis includes over 390,000 student-course observations and incorporates instructional modality, student demographics, course characteristics, and prior academic performance.

Results: Results show a substantial increase in mean course grades during the COVID-19 period, followed by a partial reversion post-pandemic to levels that remain above pre-pandemic trends. These patterns are consistent across modalities, demographics, and departments.

Implications: The findings raise important questions regarding the interpretation of …

Building The Next Cybersecurity Workforce: A Grades 7–12 Curriculum To Close The Cyber Talent Gap, Mohammed A. Salam, Iqbal Shareef, Rich P. Manprisio

Journal of Cybersecurity Education, Research and Practice

In today’s rapidly evolving technological landscape, cyberattacks pose increasing threats, yet a global shortage of cybersecurity and digital forensics professionals leaves industries vulnerable, similar to having too few law enforcement officers in a densely populated city. The judicial system faces rising digital crimes and fraud cases, further strained by the lack of experts to analyze and extract digital evidence. Despite high demand, millions of positions remain unfilled. This paper identifies the root causes of the cybersecurity workforce shortage and proposes a targeted solution: a curriculum for Grades 7–12 designed to foster cybersecurity awareness and interest. The methodology included a comprehensive …

Cybersecurity Governance Of Industrial Iot In Sub-Saharan Africa: Policy Gaps, Threat Landscape, And Lessons From Comparative African Contexts, Faztudo Languisse Eng.

Journal of Cybersecurity Education, Research and Practice

The rapid deployment of Industrial Internet of Things (IIoT) systems across Sub-Saharan Africa's extractive, energy, logistics, and agro-industrial sectors has introduced a cybersecurity challenge of growing urgency: industrial networks that were designed for operational efficiency are increasingly exposed to cyber threats for which neither the organizations nor the regulatory frameworks are adequately prepared. This article examines the cybersecurity governance of IIoT systems in a developing African economy, using Mozambique as a primary case study and drawing comparative lessons from South Africa, Rwanda, and Kenya. Through an integrative literature review and documentary analysis of national digital, cybersecurity, and industrial policies, the …

Contemporary Cybersecurity Challenges In Emerging Technologies: A Systematic Literature Analysis, Faztudo Languisse Prof

Journal of Cybersecurity Education, Research and Practice

The accelerating convergence of artificial intelligence (AI), the Internet of Things (IoT), cloud computing, blockchain, and quantum computing has fundamentally transformed the global threat landscape, introducing cybersecurity challenges of unprecedented complexity and scale. This systematic literature review synthesizes findings from peer-reviewed publications, institutional reports, and regulatory documents published primarily between 2020 and 2025 to provide an integrated analysis of contemporary cybersecurity challenges across five key emerging technology domains. The review identifies critical vulnerabilities inherent to each domain, documents the evolution of threat actors and attack methodologies — including AI-powered ransomware, adversarial machine learning, and harvest-now-decrypt-later quantum attacks — and evaluates …

Security Architecture Decision Framework For Endpoint Protection In Resource-Constrained K-12 Environments, Jason Folker

Journal of Cybersecurity Education, Research and Practice

K-12 educational institutions face an ongoing challenge in protecting endpoints when budgets and staffing prevent the implementation of standard security best practices. Technology directors routinely make difficult decisions about administrative rights, software controls, and security tooling, but they lack frameworks designed for the constraints and priorities specific to educational environments. This paper develops a security architecture decision framework tailored for K-12 endpoint protection. The framework integrates five weighting dimensions to help technology directors evaluate competing architectural choices. These dimensions include educational impact, security risk reduction, resource requirements, compliance obligations, and operational feasibility. The framework creates structured documentation that helps decision-makers …

Cognitive Load In Law Enforcement Decision Support Systems: A Human-Centered Evaluation Of Traditional And Ai-Enhanced Mdts, Benjamin Burchfield

Dissertations

This dissertation investigates the cognitive and usability associations of mobile data terminal (MDT) systems used by law enforcement officers during routine operational tasks. Grounded in Cognitive Load Theory (CLT), Human-Computer Interaction (HCI), and the Technology Acceptance Model (TAM), the research examines how MDT interface design and interaction methods including AI-enhanced and speech-enabled interfaces are associated with perceived cognitive workload, technology acceptance, and operational performance during simulated traffic stop scenarios. Using a framed field experiment with active law enforcement officers, the study evaluates relationships among user experience, perceived cognitive load, task performance, and officers’ willingness to adopt MDT technologies.

Managerial Mindset And Ai Adoption In Smes. A Systematic Review Of Cognitive, Behavioural, And Institutional Foundations, Shabin Muzibbhai Shaikh, Shivkanya Birla

European Management Studies

Purpose: This study examines how managerial mindset shapes the adoption of artificial intelligence (AI) in small and medium‑sized enterprises (SMEs). While existing research often highlights resource or capability constraints, this review shows that deeper cognitive, behavioral, and institutional foundations strongly influence how managers interpret AI and decide whether to engage with it.

Design, Methodology, and Approach: A systematic literature review (SLR) was conducted using established protocols. Thirty influential studies across managerial cognition, behavioral strategy, institutional theory, and technology adoption were identified, screened, and synthesized. Their insights were integrated into a multilayered conceptual model explaining how mindset shapes AI adoption in …

Operationalizing Supply-Chain Hygiene In Graduate Is Education: A Hands-On Module For Secure Software And Ai/Ml Pipelines, Dominic A. Wilson

Journal of Cybersecurity Education, Research and Practice

Supply-chain attacks (including typosquatting, dependency confusion, compromised builds, dataset poisoning, and backdoored models) pose growing threats to analytics platforms central to Information Systems (IS). While frameworks like the Secure Software Development Framework (SSDF) and Supply-chain Levels for Software Artifacts (SLSA) offer guidance, IS curricula often lack accessible, infrastructure-light modules that build practical skills for mitigating these risks. This experience report presents a two-week module embedded in a graduate Secure Coding course required for a Master’s in Applied Security and Analytics degree. The module operationalizes secure development habits across both traditional software and machine learning (ML) pipelines. The module addresses a …

The Nist Artificial Intelligence Risk Management Framework: Adoption Challenges And Opportunities, Gillian Kennedy, Devin Patel, Humza Sheikh, Paul Wagner, Robert J. Honomichl

Journal of Cybersecurity Education, Research and Practice

Artificial intelligence (AI) is being adopted at an exponential rate to improve efficiency, decision-making, and cybersecurity, but its rapid integration introduces new and often poorly understood risks, including system errors, algorithmic bias, data privacy concerns, security vulnerabilities, and ethical dilemmas. This paper examines how organizations are implementing AI and evaluates the National Institute of Standards and Technology's AI Risk Management Framework (NIST AI RMF) as a tool for managing these risks. It reviews the benefits of AI adoption alongside the risks emerging from its use in business and broader society and examines the legal and ethical challenges organizations face when …

To What Extent Could Quantum Computing Pose A Threat To Global Modern Data Security?, Aniket Maheshwari

Journal of Cybersecurity Education, Research and Practice

Quantum computing has emerged as a transformative technology with the potential to fundamentally disrupt modern cryptographic systems that underpin global data security. This paper examines the extent to which quantum computing could pose a threat to modern global data security by synthesising existing technical, institutional, and policy-oriented literature. Drawing on a narrative review of scholarly research, industry reports, and government frameworks, the analysis focuses on the implications of quantum algorithms such as Shor’s and Grover’s, which challenge the mathematical foundations of widely used cryptographic schemes. The findings suggest that while quantum computing presents a credible long-term threat to asymmetric encryption …

Predicting Cybermindfulness With The Cyber-Health Belief Model, James Robinson, Yan Tian, Thomas Skill

Journal of Cybersecurity Education, Research and Practice

This study describes the development of a Cyber-Health Belief Model (CHBM). The health belief model (HBM) is a message strategy that is widely and successfully used in public health research [1] and has been extended into phish training. Most phish training programs assume  end users are victimized because they have insufficient information to defend themselves. While near-term training effectiveness has shown to be effective, evidence for sustained behavioral change is thin [4]-[7].  This problem indicates that the traditional approaches need to be reconsidered and that new models are needed.  Recent research suggests attentional deficits, cyber-fatigue and fatalism and a sense …

The Intersection Between Mindfulness And Cybersecurity: A Tool To Reduce Burnout And Improve Operational Effectiveness, Ivo Ricardo Dias Rosa

Journal of Cybersecurity Education, Research and Practice

Abstract: This paper offers a conceptual discussion of how mindfulness, understood as present moment awareness and deliberate attention regulation, can support cybersecurity professionals. Drawing on a narrative synthesis of workplace mindfulness, burnout, and high pressure decision making literature, we map plausible self regulation mechanisms to typical cyber defense tasks. Rather than presenting new empirical data, we develop an explanatory framework linking attention, reactivity, and recovery to decision quality, team communication, and adherence to incident playbooks. We focus on two connected outcomes: reducing burnout in roles with sustained cognitive and emotional demands, and improving operational effectiveness during critical situations such as …

Cyber-Ready Libraries, Building Digital Fortresses For Tomorrow, Adeyinka B. Tella, Oluchi Precious Ogbonna Dr, Adebola Aderemi Olatoye Mrs

Journal of Cybersecurity Education, Research and Practice

Background and Purpose: Libraries are evolving into highly networked information ecosystems in this age of fast digital transformation, which increases their susceptibility to cybersecurity risks. The study "Cyber-Ready Libraries: Building Digital Fortresses for Tomorrow" looks into how prepared libraries are to face cyber threats and considers methods for creating information systems that are safe, robust, and ready for the future. To safeguard digital assets and user data, the study aims to assess existing cybersecurity practices in library settings and offer a roadmap for combining technological, human, and governance solutions.

Design/Method: The existing literature, case studies, and policy frameworks pertaining …

Next-Generation Dns Rpz For Automated Threat Intelligence, Risk-Aware Filtering, And User-Centric Security, Jinu S, Kishore V. Krishnan, Rajarshi Middya, Annasamy Bagubali

Journal of Cybersecurity Education, Research and Practice

The Domain Name System (DNS) remains a critical attack vector exploited by adversaries for command-and-control (C2) communication, data exfiltration, and phishing campaigns. DNS Response Policy Zones (RPZ) have emerged as an effective defense mechanism by enabling the redirection or blocking of queries to malicious domains. However, current RPZ implementations encounter significant challenges related to scalability, adaptability, and user awareness, often resulting in static policies, delayed updates, and a high incidence of false positives. To address these limitations, this paper proposes an enhanced RPZ framework that integrates adaptive threat intelligence, machine learning-driven dynamic policy updates, and user-context-aware security controls. The proposed …

Determinants Of Public Trust In E-Government: A Comprehensive Review And Conceptual Framework Over The Past Decade, Andrean Nathaniel, Sumartono Sumartono, Abd. Qadir Muslim

BISNIS & BIROKRASI: Jurnal Ilmu Administrasi dan Organisasi

The evolution of digital governance has heightened the strategic significance of public trust in the implementation of e-government. Despite numerous empirical investigations, the results concerning the factors influencing trust remain fragmented and largely centered on technological aspects. This study seeks to systematically identify, categorize, and synthesize the determinants of trust in e-government through a structured literature review of 21 Scopus-indexed articles published between 2015 and 2025. Utilizing an evidence-based synthesis methodology, the study organizes determinants of trust into four main categories: citizen-related, technological, institutional, and risk-related factors. The findings indicate that technological and citizen-related factors are the most significant predictors …

Ai-Augmented Financial Advisors: Comparing Ai And Human Analyst Investment Recommendations In Agreement, Performance, And Firm Size Effects, Crystal Chen

Honors College Theses

This study examines the level of agreement and performance between artificial intelligence (AI) generated investment recommendations and human analyst recommendations across U.S. publicly traded firms. Using a sample of twelve companies categorized by firm size (large, mid, and small), the study collects buy, hold, or sell recommendations from generative AI systems and human analysts. Agreement between AI-to-AI and AI-to-human recommendations is measured using Cohen’s Kappa agreement. Portfolio performance is evaluated by constructing equal-weighted portfolios for each recommendation source and size category. Risk-adjusted returns are measured using the Sharpe ratio over 1-, 2-, and 3-month periods. Furthermore, the study tests whether …

A Govsecops-Oriented Governance, Risk, And Compliance Platform For Continuous Authorization In Dod Il4/Il5 Environments, Anand Janjal

Journal of Cybersecurity Education, Research and Practice

Department of Defense (DoD) Impact Level 4 and Impact Level 5 (IL4/IL5) systems require continuous assurance of cybersecurity posture under stringent operational and regulatory constraints. While the NIST Risk Management Framework (RMF) and DoD DevSecOps guidance emphasize continuous authorization supported by real-time evidence, many existing Governance, Risk, and Compliance (GRC) platforms remain documentation-centric and insufficiently integrated with operational telemetry. This paper presents a GovSecOps-oriented GRC architecture that integrates vulnerability ingestion, automated Plan of Action and Milestones (POA&M) lifecycle management, dynamic risk scoring, and continuous authorization dashboards within IL4/IL5 environments. Using a Design Science Research methodology, the study develops and evaluates …

The Influence Of Digital Audit Capability On Tax Compliance In Tanzania, Henry Zeno Chalu, Daudi Deokari Mtena

Business Management Review

The research evaluates the effects of digital audit capacity on tax compliance in Tanzania, focusing on challenges such as tax avoidance and administrative inefficiency. It applies the Task-Technology Fit Theory and Deterrence Theory in tax audit to examine the relationship between digital audit capability and tax compliance. The findings show that digital audit capability has significantly enhanced tax compliance through data integrity, security, and analytical capability. These features minimize misreporting, secure financial information, and build trust while uncovering predictive insights. The current study also has implications for tax policy by highlighting the promise of digital audit capability in enhancing both …