Towards Building Cybersecurity Culture in TVET Colleges in South Africa

With the adoption of digital technologies, cyber-attacks are on the increase, and it is likely to grow in coming years. In other words, with the increased use of new technologies and systems with more connectivity and less isolation from the outside world, the risk of cyber-attacks is high. This pioneering study addresses the cybersecurity protection of TVET colleges through the development of a cybersecurity culture in the two participating institutions. In that regard, this paper presents the first of the four phases of this study, i.e. the development of the cybersecurity culture conceptual framework, which was one of the objectives of this study. The study found that the main elements of cybersecurity culture include cybersecurity culture dimensions, layers, factors, practices, strategy guidelines, education and training curriculum, forms of delivery, and measuring cybersecurity culture. The implementation phase of this study is planned to be executed in the near future in the two already selected TVET colleges in the KwaZulu Natal province of South Africa. It is perceived that this study will benefit the participating and similar higher learning institutions in the country.