Minimum Parameters for Design and Implementation of Adaptive Cybersecurity Courses

In the creation of new cybersecurity and information security courses, many initial design and implementation decisions remain static or unchanging over the years, which may result in the propagation of inefficient educational practices and the inclusion of obsolete topics within the specialty. This paper puts forth a set of minimum parameters that, when considered as modifiable by design, facilitate an adaptable and flexible implementation of courses in this discipline. These include the body of content, the evaluation methodology, the form of interaction and attendance, the feedback mechanism, the format and modality of delivery, the educational material, and the teaching staff. To illustrate this approach, we present a case study of a university diploma course in information security. Over a ten-year period, the course was reviewed and adjusted to respond to the evolving needs of the context and emerging trends. The results demonstrate the value of an adaptive approach in the design and implementation of courses in this discipline, indicating a positive impact on students when they encounter the challenges of the field.