Rule of law education for cybersecurity governance in higher education institutions: a framework for policy and practice

This study proposes a governance framework that integrates rule of law education into cybersecurity management within higher education institutions (HEIs).By emphasising legal compliance, risk management, and awareness, the framework addresses human and organisational vulnerabilities, thereby enhancing institutional resilience against evolving cyber threats.The growing prevalence of data breaches, ransomware, and human-related risks underscores the critical importance of cybersecurity in HEIs.While prior research has largely concentrated on technical safeguards, limited attention has been given to integrating legal, organisational, and governance dimensions.Adopting a qualitative design, this study employed semi-structured interviews with IT managers, security officers, and policymakers across multiple institutions.Data triangulation and iterative validation informed the framework's development.Findings showed high adoption in quality standards (85%), data privacy (80%), and reporting (75%), with lower levels in risk management (60%) and compliance monitoring (65%).Expert consensus, confirmed through Delphi sessions, yielded Kendall's W scores above 0.78.