This study examines Experiential Learning (EL) as a pedagogical strategy for developing cybersecurity competencies in higher education. Drawing on Kolb’s Experiential Learning Cycle, we implemented EL principles within a “Cybersecurity & Resilience” (CS&R) course. The course was structured around iterative EL cycles, designed to foster connections between theoretical cybersecurity concepts and real-world challenges. A central element of this approach was the Cybersecurity Adventure Rally (CySAR) - a one-day interactive exercise attended by all enrolled students (N = 80). To assess the effectiveness of the EL approach, we collected quantitative data from intermediate quizzes throughout the semester, capturing student progress on CS&R learning outcomes presented in lectures. Complementary qualitative data were obtained from student self-reflection reports as well as post-CySAR survey responses from both students and industry experts. The combined findings suggest that students achieved a deeper understanding of CS&R topics, enhanced their awareness of cybersecurity threats, and developed practical strategies for mitigation. The study highlights the potential of EL to increase student engagement, improve knowledge retention, and strengthen readiness to address real-world cybersecurity challenges. Future research should incorporate more comprehensive quantitative measures of learning outcomes and investigate how experiential approaches can contribute to advancing organizational cybersecurity and resilience objectives.

Keywords: Experiential Learning, Cybersecurity and Resilience Competency, Business Education.