Management Information Systems Commons^™

Data Without Borders, Sovereignty Without Guarantees: Cybersecurity Risks Of Cross-Border Data Hosting In The Global South, Evidence And Policy Lessons From Mozambique, Faztudo Languisse Eng.

Journal of Cybersecurity Education, Research and Practice

The digital transformation of public and private institutions across the Global South has produced a paradox: as states digitize government services, financial systems, and citizen records, an increasing share of this data is hosted on servers physically located in the United States, the European Union, and other developed economies. This article develops a taxonomy of the cybersecurity and sovereignty risks generated by this dependency, distinguishing deliberate risks, arising from extraterritorial legal instruments such as the United States CLOUD Act, foreign surveillance regimes, and a concentrated hyperscale cloud market, from non-deliberate risks, arising from undersea cable failures, hyperscaler outages, misconfiguration, and …

Specification And Internal Assessment Of A Self Reported Protective Application Use Composite Among Computer Science Undergraduates In Enugu State Nigeria, Adesegun Nurudeen Osijirin, Leonard C. Anigbo, Oliver Okechukwu

Journal of Cybersecurity Education, Research and Practice

This study specifies a Protective Application Use Composite restricted to self-reported protective application use. A cross-sectional survey provided 364 complete records from Computer Science undergraduates at four universities in Enugu State, Nigeria, from 393 distributed questionnaires. The score is the equal-weight average of five questionnaire categories: antivirus, firewall, encryption, multi-factor authentication, and virtual private network use. Reanalysis of the author-supplied item records yielded category means from 2.097 to 2.376 and internal-consistency coefficients from 0.958 to 0.971. The composite mean was 2.170, with a standard deviation of 0.469. The first component of the category-score correlation matrix explained 50.98 percent of variance. …

Markets For Unverified Capability: Why Organizations Facing Real Adversarial Scrutiny Reject The Metrics Academic Ai-Security Research Relies On, Babar Khan Akhunzada

Journal of Cybersecurity Education, Research and Practice

Governments, insurers, and defenders increasingly rely on published capability claims about AI cybersecurity agents to inform procurement, regulation, and risk assessment. Yet a striking pattern runs through the organizations with the most at stake: enterprises and technology companies deploying frontier AI agents against real production infrastructure consistently decline to publish the accuracy metrics that academic and vendor benchmarks compete to report. This paper investigates that pattern as an economic, organizational, and policy problem rather than a purely technical one. We audit eleven independently published AI cybersecurity benchmarks and deployments using a five-dimension integrity rubric and find that benchmarks relying on …

Operating Costs, Liquidity, And Demographic Pressures In Tanzania's Reformed Public Pension System (2004–2024), Athumani S. Mbuttuka, Ellinami J. Minja, Siasa I. Mzenzi

Business Management Review

The efficiency of public pension systems is critical for accumulating old-age savings and reducing fiscal pressures. This study evaluated Tanzania’s reformed public pension system from 2004 to 2024, covering pre- and post-merger periods, using longitudinal financial data and benchmarking indicators, including cost-to-contribution, cost-to-asset, payout, and dependency ratios, against regulatory and OECD levels. One-tailed sample t-tests compared efficiency and sustainability metrics against benchmarks. Findings show that operating costs averaged 2.8% of assets and administrative cost-to-contribution averaged 11.8%, exceeding the OECD average of 1.6% and the regulatory ceiling of 10%, respectively. Although operating-cost ratios declined after the 2018 restructuring, costs generally remained …

The Digital Responsibility Index: Quantifying Perceived Multi-Layered Responsibility In Cybersecurity, Mircea Ţălu

Journal of Cybersecurity Education, Research and Practice

In the evolving digital landscape, cybersecurity responsibility extends beyond technical safeguards to include individual behavior, organizational governance, and societal impact. This study introduces the Digital Responsibility Index (DRI), a novel metric that quantifies multi-layered accountability across four domains: technical, individual, organizational, and societal. Data were collected through scenario-based Likert-scale surveys with 120 cybersecurity professionals, supplemented by semi-structured interviews with senior leaders. Results reveal that while technical and organizational responsibilities are consistently prioritized, individual and societal accountability remain under-recognized. Leadership engagement significantly enhances responsibility scores across all layers. The proposed DRI framework provides a measurable and potentially actionable basis for assessing …

Ai-Generated Phishing Attacks: Emerging Threats And Detection Strategies For Security Operations Centers, Bahzad Khalid

Journal of Cybersecurity Education, Research and Practice

Artificial intelligence (AI) is transforming cybersecurity by strengthening defensive capabilities while simultaneously enabling more sophisticated phishing attacks. AI generated phishing emails increasingly evade traditional detection methods through improved grammar, contextual relevance and realistic communication styles creating significant challenges for Security Operations Centers (SOCs). This study investigates the effectiveness of current email security systems in detecting AI generated phishing emails compared with traditional phishing emails. A mixed method experimental approach was employed using controlled Gmail and Outlook environments to evaluate the detection and classification of multiple phishing scenarios. The results demonstrate that several AI generated phishing emails successfully bypassed initial security …

A Narrative-Driven, Socratic Instructional Framework For Teaching Adversarial Cognition In Cybersecurity, Joshua K. Goossen

Journal of Cybersecurity Education, Research and Practice

The Socratic method has demonstrated, in studies across law, medicine, and nursing, that dialectic structured questioning improves expert reasoning. Cybersecurity currently teaches tools and techniques but lacks Socratic dialogic leaving graduates underprepared for novel scenarios requiring cross-domain reasoning. Because law, medicine and nursing cultivate similar reasoning as security there is principled reason to expect reasoning benefits could transfer to security students. This paper argues that the correspondence warrants investigation. Investigation requires a named, teachable reasoning target analogous to clinical reasoning and we specify that target as adversarial cognition, a framework integrating adversary features, system architecture, implementation logic, governance structure, human …

Designing For Who Actually Shows Up: A Signal Framework For Online Adult Learners In Cybersecurity And Information Technology, Chad Whistle, Mayyada Al-Hammoshi

Journal of Cybersecurity Education, Research and Practice

Online adult learners pursuing cybersecurity and information technology credentials represent one of the fastest-growing student populations in American higher education, yet the frameworks institutions use to support their success were not designed for them. This population, disproportionately drawn from the 41.9 million Americans who hold some college credit but no credential, arrives workforce-embedded, time-constrained, and skeptical of institutional systems that previously failed to serve them. Existing persistence models grounded in traditional student integration theory inadequately account for the behavioral patterns, motivational structures, and credential expectations that define this learner. This paper proposes the SIGNAL Framework (Skills-based credential architecture, Integrated AI-informed …

The Efficient Market Hypothesis In Youth Entrepreneurship: Understanding, Application, And Contextual Factors — A Systematic Literature Review, Omari Khalifa Mbura Prof,, Binto M. Binto

Business Management Review

This systematic literature review explores how youth entrepreneurs understand and apply the Efficient Market Hypothesis (EMH) in their decision-making, and examines the contextual factors influencing the decision-making nexus. Guided by a post-positivist framework, the review synthesises extant literature across youth entrepreneurship, finance, and digital strategy to map emerging themes and identify knowledge gaps. It covered a sample of 38 peer-reviewed articles, selected in accordance with the PRISMA guidelines. Findings of the systematic literature review show that youth entrepreneurs' engagement with EMH is largely experiential and indirect, influenced by digital literacy, social learning, and the realities of rapidly changing market environments. …

Interpretive Flexibility And The Social Construction Of Generative Ai In Education: A Scot Analysis, Elham Mousavidin, Sujin K. Horwitz

Southwestern Business Administration Journal

The rapid rise of generative artificial intelligence (GenAI) tools has intensified discussions about their role in education. This study uses the Social Construction of Technology (SCOT) framework to explore how educational stakeholders interpret GenAI and how these interpretations influence its development and adoption. Through an interpretive literature review of research published between 2021 and 2025, we examine stakeholder perspectives using SCOT constructs, including relevant social groups, interpretive flexibility, technological frames, and controversies. Results identify three main interpretive tensions shaping current debates: transformational force versus transactional tool, cognitive augmentation versus cognitive atrophy, and digital empowerment versus digital enslavement. These tensions show …

Strategic Judgment In Leadership Decision-Making: Evaluating Ai In Organizational Contexts, Cate Wengelnik

Southwestern Business Administration Journal

This paper presents a classroom-based approach for teaching strategic judgment in leadership decision-making through the evaluation workplace communication and incorporates the use of artificial intelligence (AI). As AI tools become more common in organizational settings, leaders and employees must be prepared to assess outputs that may appear professional while containing inaccurate, unsupported or potentially risky information. This paper describes an instructional case in which students examine an AI-generated response to an employee inquiry about workplace accommodations and Human Resources related matters. Students (1) evaluate the message for clarity, tone and apparent usefulness, then (2) analyze the organizational risks created when …

People Orientation And Thing Orientation In Business Majors: Implications For Assessing The Impacts Of Cross-Functional Business Program Curricula, Todd J. Hostager, David A. Christopher, Kristy J. Lauver, Christopher Knowles

International Journal for Business Education

Background/Introduction/Purpose:  Prior research documented significant differences in people orientation and thing orientation (PTO) based on type of major and sex.  This study examines a set of measures for helping business programs to assess whether they are producing graduates equipped to consider both people and things when making decisions, regardless of their major or sex.

Methods/Design:  Students in a strategic management capstone course spent a single 75-minute session responding to a brief new venture pitch by identifying what types of additional information they would need to decide whether to invest in the business.  Three Likert-scaled options gauged the extent to participant …

Green Information Systems Adoption And Business Outcomes In Ugandan Smes: An Extended Theory Of Planned Behaviour Approach, Sonny Juma Nyeko, Samali Mlay, Cosmas Ogenmungu, Abdallah Ibrahim Nyero

Business Management Review

The study assesses the relationship between TPB antecedents and GIS business outcomes in SMEs, using an expanded TPB framework. Researchers gathered data from SMEs via a survey and analysed it using PLS-SEM. The framework used in the study explains 58.5% of the differences in GIS business outcomes. The results reveal that subjective norms, attitude, benefits, and obstacles are significant predictors of GIS business outcomes such as ecological IT practices, although perceived behavioural control displays an insignificant negative relationship. The study extended the TPB model by incorporating GIS benefits and GIS obstacles as additional factors influencing GIS adoption, business outcomes, …

Between Digital Transformation And Regulatory Vacuum: Cybersecurity Of Public Services In Mozambique, Faztudo Languisse Eng.

Journal of Cybersecurity Education, Research and Practice

The rapid expansion of digital public services in Mozambique—including e-government platforms, digital health systems, and electronic tax administration—has outpaced the development of a coherent legal framework for cybersecurity. While Law No. 3/2017 (Electronic Transactions Law) of 9 January 2017 introduced foundational data-protection principles, Mozambique long lacked a dedicated cybersecurity regulatory authority, mandatory security standards, and formal incident-notification mechanisms. This regulatory vacuum exposed critical public services to escalating cyber risks as digital transformation was actively promoted as a development priority. This article examines the legal and institutional gaps in Mozambique's cybersecurity governance framework prior to the 2026 Cybersecurity and Cybercrime Laws, …

Clinic-In-A-Box: A Portable, Software-Defined Cyber Range For Realistic, Scenario-Based Cybersecurity Training, Ethan Chumley, Aaron Nair, Royce Yaezenko, Joshua Payne, Veronika Kyles, Paul Wagner, Robert J. Honomichl, Ryan Straight, Shengjie Xu

Journal of Cybersecurity Education, Research and Practice

Realistic, hands-on cybersecurity training has traditionally depended on fixed infrastructure such as dedicated lab hardware, cloud subscriptions, or permanent network connectivity, limiting where and how often it can be delivered. This paper presents the design and implementation of a portable, scenario-based cybersecurity training platform housed in a single travel case and built from commodity hardware, type-1 hypervisor virtualization, containerized service orchestration, and software-defined networking. The platform clones, isolates, and resets complete lab environments on demand, allowing the same physical system to support repeated classroom, workshop, or field deployments with minimal manual reconfiguration. Training scenarios are grounded in generated organizational profiles …

Self Efficacy And Instructional Support Predict Cyber Deception Acceptance In Ics And Ot Cybersecurity, Daniel Ward

Journal of Cybersecurity Education, Research and Practice

Cyber deception can produce high-confidence evidence of unauthorized activity in industrial control systems (ICS) and operational technology (OT), but practitioners must consider the technology useful, safe, understandable, and supported before they will use it. This study reports a secondary quantitative analysis of a deidentified survey of United States-based ICS and OT professionals to determine whether psychological and instructional factors predict adoption readiness and effective utilization beyond education, experience, and sector. Hierarchical ordinary least squares regression with HC3 robust standard errors was conducted on 262 complete cases. The demographics-only model was not significant and explained 2.8 percent of outcome variance. Adding …

Opengrcrmf: A Vendor-Neutral Framework For Teaching And Modeling Rmf Automation, Continuous Authorization, And Zero Trust Governance, Anand Janjal

Journal of Cybersecurity Education, Research and Practice

Abstract—Federal and regulated organizations continue to rely on document-centric Authorization to Operate (ATO) processes even as the NIST Risk Management Framework (RMF), continuous monitoring guidance, Zero Trust Architecture (ZTA), and continuous authorization initiatives require more continuous, evidence-driven risk management [1]-[3], [13], [15]. Manual System Security Plan (SSP) updates, spreadsheet-based Plan of Action and Milestones (POA&M) tracking, and disconnected assessment evidence create governance latency: the delay between operational security events and authorization-ready governance response. This paper presents OpenGRCRMF, a proposed open, vendor-neutral reference framework that models RMF lifecycle activities as workflow states, treats authorization artifacts as structured governance objects, and …

A Return On Investment (Roi) Evaluation Tool For Quantifying The Value Of Cybersecurity Certifications, Nicolas Meysmans, Kelly Hughes

Journal of Cybersecurity Education, Research and Practice

The growing reliance on cybersecurity certifications has increased the financial and professional stakes associated with certification decision-making for cybersecurity professionals. Despite their widespread use in hiring and career advancement, there is limited objective guidance available to help individuals evaluate the return on investment (ROI) of specific certifications. This gap has created uncertainty regarding which credentials provide the greatest value relative to their cost and market impact. This study presents a data-driven, design science–based tool that supports cybersecurity professionals in evaluating certification ROI using practitioner survey data combined with certification cost and labor-market demand indicators. The paper also demonstrates how such …

From Disruption To Replacement: The 2026 Cae Cybersecurity Community Symposium And The Emerging Federal-Academic Compact For An Ai Workforce, Sunday Oludare Ogunlana

Journal of Cybersecurity Education, Research and Practice

The cybersecurity workforce gap in the United States is estimated at several hundred thousand unfilled positions, and the rapid integration of artificial intelligence into adversary tradecraft and federal cyber operations is widening that gap qualitatively as well as quantitatively, threatening national security and the operational readiness of graduates entering the field. This perspective article synthesizes the principal arguments advanced by five federal and academic speakers at the 2026 CAE Cybersecurity Community Symposium, using verbatim session transcripts, a structured thematic extraction process, and triangulation against published workforce policy and peer-reviewed literature. Findings document a unified speaker thesis that artificial intelligence now …

Strategic Information System Leadership And Information System Function Performance In Universities In Kenya: A Pls-Sem Analysis, Joseph K. Muchina, James M. Njihia Prof., Agnes N. Wausi Prof.

International Journal of Applied Management and Technology

Information systems as enablers have evolved from an efficiency and effectiveness focus to enterprise-wide performance, placing strong demands on information system leadership. Emerging leadership models call for collaborative practices. Information systems leadership in higher education is a challenging task. Universities' top management team members and their information system executive counterparts lack a common and shared vision and understanding of information systems capabilities and roles. As the highest-ranking officers in organizations, they make strategic IS decisions. Yet, noting that existing approaches are ineffective, there is a growing concern about the kind of leadership needed to guide the institutions. Four sets of …

Beyond Procedural Participation: A Process Perspective Of Disability-Inclusive Digital Innovation, Millicent Agangiba, David Aboagye-Darko, Salah Kabanda, William Agangiba, Ralitsa Diana Debrah

African Conference on Information Systems and Technology

While previous research has recognized the importance of participation, how the structurally embedded inclusion of PWDs reshapes digital innovation processes and their outcomes in resource-constrained contexts remains underexplored. The study addresses this gap through a longitudinal qualitative case study of a five-year recurring hackathon organized in Ghana from 2021 to 2025, with a focus on disability inclusion. Drawing on Adaptive Structuration Theory as an analytical lens, normatively supported by critical disability studies, this study analyzes the qualitative interview and observation data from 20 participants. The results reveal that inclusion is a structuring force through four interrelated mechanisms: (1) lived experience …

Ai-Driven Financial Forecasting, Risk Assessment And Decision Making In Start Up Enterprises, Ntando S. Sibanda, Petronella Muziti

African Conference on Information Systems and Technology

Start-up enterprises operate in uncertain and rapidly changing financial environments characterized by volatile cash flows, limited historical data, and high exposure to financial risk. Conventional financial forecasting and risk assessment methods are often static and assumption-driven, limiting their effectiveness in supporting managerial decision making. Within the Decision Support Systems (DSS) domain, this study analyses the effect of AI-driven DSS on financial forecasting, risk assessment and managerial decision making among start-up enterprises in the Harare Central Business District, Zimbabwe. The study adopts a quantitative approach using structured questionnaires administered to founders, financial managers, and senior decision makers. Data were analysed using …

Closing The Awareness–Behavior Gap: A Role-Based Phishing Training Framework For Higher Education, Ranylene O. Olaybal, Ryan A. Olaybal

Journal of Cybersecurity Education, Research and Practice

Phishing remains one of the most persistent cybersecurity threats facing higher education institutions, where diverse user populations and highly connected digital environments increase exposure to social engineering attacks. Although cybersecurity awareness initiatives are widely implemented, high awareness does not always translate into secure behavior. This study examined phishing awareness, phishing-related practices, phishing susceptibility, and phishing experiences among college students, teaching faculty, and administrative staff in a private higher education institution in the Philippines. Using a quantitative cross-sectional design, data were collected from 553 respondents through a validated survey instrument and analyzed using descriptive statistics, one-way analysis of variance, Tukey's honestly …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

How Grades Changed Before, During And After Covid-19 In A Business College, Douglas R. Moodie, Alison Keefe, Robin Cheramie

International Journal for Business Education

Purpose: This study examines how undergraduate business student grades changed before, during, and after the COVID-19 pandemic using a large institutional dataset from a business college in a US university between 2015 and 2024.

Method: The analysis includes over 390,000 student-course observations and incorporates instructional modality, student demographics, course characteristics, and prior academic performance.

Results: Results show a substantial increase in mean course grades during the COVID-19 period, followed by a partial reversion post-pandemic to levels that remain above pre-pandemic trends. These patterns are consistent across modalities, demographics, and departments.

Implications: The findings raise important questions regarding the interpretation of …

How Does An Advanced Educator Utilize Digital Language Teaching And Learning By Integrating Linguistic, Cultural, And Business Life Perspectives?, Hely Westerholm, Pirjo Takanen-Körperich, Ph.D.

International Journal for Business Education

This paper explores advanced educators’ digital working capabilities in online language teaching, with a particular focus on sharing Finnish language and culture in a foreign context. Cultural and linguistic knowledge play a significant role in enhancing students’ motivation to study foreign languages. In today’s educational environment, digitalisation and globalisation exert an increasing influence on foreign language teaching and learning.

The digital learning environment has brought about a paradigm shift in foreign language didactics. Digital language learning is both challenging and holistic in nature. Continued foreign language learning is simultaneously an individual and a social process, as digital learning cultures impose …

Contemporary Cybersecurity Challenges In Emerging Technologies: A Systematic Literature Analysis, Faztudo Languisse Prof

Journal of Cybersecurity Education, Research and Practice

The accelerating convergence of artificial intelligence (AI), the Internet of Things (IoT), cloud computing, blockchain, and quantum computing has fundamentally transformed the global threat landscape, introducing cybersecurity challenges of unprecedented complexity and scale. This systematic literature review synthesizes findings from peer-reviewed publications, institutional reports, and regulatory documents published primarily between 2020 and 2025 to provide an integrated analysis of contemporary cybersecurity challenges across five key emerging technology domains. The review identifies critical vulnerabilities inherent to each domain, documents the evolution of threat actors and attack methodologies — including AI-powered ransomware, adversarial machine learning, and harvest-now-decrypt-later quantum attacks — and evaluates …

Cybersecurity Governance Of Industrial Iot In Sub-Saharan Africa: Policy Gaps, Threat Landscape, And Lessons From Comparative African Contexts, Faztudo Languisse Eng.

Journal of Cybersecurity Education, Research and Practice

The rapid deployment of Industrial Internet of Things (IIoT) systems across Sub-Saharan Africa's extractive, energy, logistics, and agro-industrial sectors has introduced a cybersecurity challenge of growing urgency: industrial networks that were designed for operational efficiency are increasingly exposed to cyber threats for which neither the organizations nor the regulatory frameworks are adequately prepared. This article examines the cybersecurity governance of IIoT systems in a developing African economy, using Mozambique as a primary case study and drawing comparative lessons from South Africa, Rwanda, and Kenya. Through an integrative literature review and documentary analysis of national digital, cybersecurity, and industrial policies, the …

Building The Next Cybersecurity Workforce: A Grades 7–12 Curriculum To Close The Cyber Talent Gap, Mohammed A. Salam, Iqbal Shareef, Rich P. Manprisio

Journal of Cybersecurity Education, Research and Practice

In today’s rapidly evolving technological landscape, cyberattacks pose increasing threats, yet a global shortage of cybersecurity and digital forensics professionals leaves industries vulnerable, similar to having too few law enforcement officers in a densely populated city. The judicial system faces rising digital crimes and fraud cases, further strained by the lack of experts to analyze and extract digital evidence. Despite high demand, millions of positions remain unfilled. This paper identifies the root causes of the cybersecurity workforce shortage and proposes a targeted solution: a curriculum for Grades 7–12 designed to foster cybersecurity awareness and interest. The methodology included a comprehensive …

Security Architecture Decision Framework For Endpoint Protection In Resource-Constrained K-12 Environments, Jason Folker

Journal of Cybersecurity Education, Research and Practice

K-12 educational institutions face an ongoing challenge in protecting endpoints when budgets and staffing prevent the implementation of standard security best practices. Technology directors routinely make difficult decisions about administrative rights, software controls, and security tooling, but they lack frameworks designed for the constraints and priorities specific to educational environments. This paper develops a security architecture decision framework tailored for K-12 endpoint protection. The framework integrates five weighting dimensions to help technology directors evaluate competing architectural choices. These dimensions include educational impact, security risk reduction, resource requirements, compliance obligations, and operational feasibility. The framework creates structured documentation that helps decision-makers …