ABSTRACT VIEW
BALANCING CYBERSECURITY SKILLS AND MANAGEMENT SKILLS IN AN M.SC. CURRICULUM
R. Creutzburg1, A. Minchev2
1 SRH Berlin University of Applied Sciences (GERMANY)
2 Trakia University (BULGARIA)
Balancing technical cybersecurity skills with management competencies is crucial for preparing graduates to navigate complex cybersecurity challenges in organizational contexts. This paper addresses the pedagogical and structural considerations in designing a Master of Science (M.Sc.) cybersecurity curriculum that effectively merges both skill sets. The analysis is grounded in an extensive review of recent empirical literature addressing graduate-level cybersecurity curricula, explicitly evaluating educational approaches that integrate technical and managerial skillsets.

The study identifies a competency-based framework as foundational, supporting curricula that systematically integrate technical and critical managerial skills. The reviewed literature demonstrates that successful curricula adopt iterative and flexible designs, enabling continuous adjustments in response to the rapidly evolving cybersecurity landscape.

Scenario-based and challenge-based learning methodologies emerge as pivotal pedagogical strategies, providing students with authentic, applied learning experiences. These scenarios simulate realistic cybersecurity incidents, enabling students to engage in practical, problem-solving exercises that closely mirror real-world challenges.

Multidisciplinary integration further enhances curriculum effectiveness by drawing knowledge from computer science, information systems, and business administration. This holistic approach allows students to understand cybersecurity issues from various perspectives, promoting comprehensive problem-solving capabilities. Programs that utilize connected curricula and intervention mapping show significant promise, integrating scenario-based learning with case studies, group projects, and challenge-based exercises. Such strategies also foster cross-domain connectivity, ensuring students have well-rounded competencies suitable for professional practice.

Active industry engagement is a key driver of curriculum relevance and practical applicability. Mechanisms such as industry expert guest lectures, professional surveys, apprenticeship opportunities, and real-world case studies are employed to align academic learning with evolving industry requirements. Industry-informed curriculum design helps keep the curriculum relevant and provides students with valuable insights into professional expectations and emerging cybersecurity threats and solutions.

The effectiveness of curricular strategies is evaluated through diverse assessment methods, including practical task execution, scenario-based evaluations, team projects, and competency-based assessments aligned with recognized frameworks like the NICE Cybersecurity Workforce Framework. These varied assessment methodologies ensure comprehensive evaluation, reflecting real-world performance expectations and preparing students for professional practice.

In conclusion, integrating technical cybersecurity skills and management competencies requires an adaptive, iterative curriculum design continuously aligned with industry demands and best practices. Future cybersecurity curricula should prioritize competency-based frameworks, multidisciplinary integration, and scenario-based learning methodologies to effectively balance technical proficiency and managerial acumen, thus producing graduates capable of addressing complex cybersecurity challenges strategically and operationally in contemporary organizational environments.

Keywords: Cybersecurity Education, Competency-based Curriculum, Scenario-based Learning, Multidisciplinary Integration, Industry Alignment.

Event: EDULEARN25
Session: Cybersecurity Education
Session time: Monday, 30th of June from 12:30 to 13:45
Session type: ORAL