Cybersecurity Risk Management Scenarios for Teaching Information Security Management

Amidst security concerns, there has become an increased focus on ensuring cybersecurity becomes a mainstream part of higher education. Cybersecurity requires the development of technical and non-technical skills, with the latter often referred to as "soft skills." With calls for evidence of initiatives used within higher education to develop these skills, this paper presents an instructional design of how a scenario-based learning activity was utilized for a group of postgraduate students studying "information security management." This article presents the scenario, observations of teaching practice, and student feedback and provides recommendations for embedding scenario-based learning activities into the curriculum.