Base article title: Researching Graduated Cyber Security Students: Reflecting Employment and job Responsibilities Through NICE Framework
Keywords:
Cybersecurity education, NICE Framework, graduate employability, workforce alignmentAbstract
The increasing demand for cybersecurity professionals has intensified global attention on the alignment between academic preparation and workforce expectations. Despite the expansion of cybersecurity degree programs, concerns persist regarding whether graduates are adequately prepared for real-world job responsibilities defined by structured workforce frameworks such as the NICE Cybersecurity Workforce Framework. This study investigates the employment trajectories and role alignment of cybersecurity graduates through a survey-based analytical approach, focusing on the extent to which academic curricula correspond to professional cybersecurity job functions.
The research synthesizes higher education frameworks, including European and international cybersecurity curriculum standards, and evaluates graduate preparedness using workforce competency models and employer expectation structures. The study further integrates policy-level cybersecurity strategies and skills frameworks to contextualize employment outcomes within evolving cybersecurity ecosystems.
Findings indicate a partial but inconsistent alignment between academic training and NICE-defined job roles, particularly in operational and analytical cybersecurity functions. While foundational knowledge is generally well-developed, gaps remain in applied threat response, security operations center (SOC) tasks, and real-time incident handling competencies. The study highlights the need for stronger integration between academic curricula and structured workforce frameworks, along with improved experiential learning models aligned with European credit-based education systems (European Comission, 2015).
The research contributes to the discourse on cybersecurity education standardization and proposes improved alignment strategies between higher education institutions and industry job role frameworks.
Downloads
References
1. Associate for Computing Machinery. (2017) Cybersecurity Curricula 2017 - Curriculum Guidelines for Post-Secondary Degree Programs in Cybersecurity. New York: Associate for Computing Machinery.
2. Associate for Computing Machinery, n.d. Curricula Recommendations. [online] https://www.acm.org/education/curricula-recommendations
3. Carson, Z. (2014) Ten Strategies of a World-Class Cybersecurity Operations Center. s.l.:The MITRE Corporation.
4. CC2020 Task Force, 2020. Computing Curricula 2020: Paradigms for Global Computing Education. s.l.:Association for Computing Machinery.
5. Catota, F.E., Morgan, M.G. and Sicker, D.C. (2019) Cybersecurity education in a developing nation: the Ecuadorian environment, Journal of Cybersecurity, 5(1), p. tyz001. doi:10.1093/cybsec/tyz001.
6. ENISA (2021) CYBERHEAD - Cybersecurity Higher Education Database. [online] https://www.enisa.europa.eu/topics/cybersecurity-education/education-map
7. European Comission, 2015. ECTS Users' Guide. [online] https://ec.europa.eu/assets/eac/education/ects/users-guide/docs/ects-users-guide_en.pdf
8. European Comission, (2020) The EU's Cybersecurity Strategy for the Digital Decade. [online] Available at: https://digital-strategy.ec.europa.eu/en/library/eus-cybersecurity-strategy-digital-decade-0
9. JAMK University of Applied Sciences. (2013) Cyber Security, Master of Engineering. [online] https://www.jamk.fi/en/Education/Technology-and-Transport/Cyber-Security-Masters-Degree/
10. JAMK University of Applied Sciences. (2015) Bachelor of Engineering, Information and Communications Technology. [online] https://www.jamk.fi/en/Education/Technology-and-Transport/information-and-communication-technology-bachelor-of-engineering/
11. JAMK University of Applied Sciences. (2021) Bachelor's Degree Programme in Information and Communications Technology. [online] https://opetussuunnitelmat.peppi.jamk.fi/en/48/en/5290/TTV2021SS/year/2021
12. Jauhiainen, J. (2021) List of SOC service providers. [online] https://csoc.fi/
13. Jaurimaa, J., Saharinen, K. and Kotikoski, S. (2021) Critical Infrastructure Protection: Employer Expectations for Cyber Security Education in Finland, in Proceedings of the 2021 20th European Conference on Cyber Warfare and Security. European Conference on Cyber Warfare and Security, United Kingdoms: Academic Conferences International Limited. doi:10.34190/EWS.21.015.
14. Karo Saharinen, Jarmo Viinikanoja and Jouni HuotariEuropean Comission, (2020) The EU's Cybersecurity Strategy for the Digital Decade. [online] Available at: https://digital-strategy.ec.europa.eu/en/library/eus-cybersecurity-strategy-digital-decade-0
15. Karinsalo, A. et al. (2021) [online] Available at: https://cybersec4europe.eu/wp-content/uploads/2021/06/D6_3_Design-of-Education-and-Professional-Frame-work_Final.pdf
16. Limnéll, J. (2016) The cyber arms race is accelerating – what are the consequences?, Journal of Cyber Policy, 1(1), pp. 50–60. doi:10.1080/23738871.2016.1158304.
17. Metropolia University of Applied Sciences (2021) Cyber Security specialization studies. [online] https://www.metropolia.fi/fi/opiskelu-metropoliassa/osaamisen-taydentaminen/erikoistumiskoulutukset/kyberturvallisuus
18. Ministery of Education and Culture - Finland (2021) Finnish Education System. [online] https://okm.fi/en/education-system
19. Nai Fovino, I. et al. (2019) A Proposal for a European Cybersecurity Taxonomy. [online] https://publications.jrc.ec.europa.eu/repository/bitstream/JRC118089/taxonomy-v2.pdf
20. Newhouse et al. (2017) National Institute of Science and Technology. s.l.:National Institute of Science and Technology.
21. Nurse, J. R. et al. (2021) [online] https://www.enisa.europa.eu/publications/addressing-skills-shortage-and-gap-through-higher-education/@@download/fullReport
22. Piesarskas, E. et al. (2020) [online] https://sparta.eu/assets/deliverables/SPARTA-D9.1 -Cybersecurity-skills-framework-PU-M12.pdf
23. Rashid, A. et al. (2019) The Cyber Security Body of Knowledge. [online] https://www.cybok.org/media/downloads/CyBOK-version-1.0.pdf
24. Rashid, A. et al. (2021) The Cyber Security Body of Knowledge. [online] https://www.cybok.org/media/downloads/CyBOK_v1.1.0.pdf
25. Rectors’ Conference of Finnish Universities of Applied Science, 2021. University of Applied Sciences Graduand Feedback Questionnaire. [online] https://avop.fi/en
26. Saharinen, K., Backlund, J. & Nevala, J. (2020) Assessing Cyber Security Education through NICE Cybersecurity Workforce Framework. New York, NY, USA, Association for Computing Machinery, p. 172–176.
27. Saharinen, K., Karjalainen, M. & Kokkonen, T. (2019) A Design Model for a Degree Programme in Cyber Security. New York, NY, USA, Association for Computing Machinery, p. 3–7.
28. Sánchez-Gordón, M. & Colomo-Palacios, R. (2020) Security as Culture: A Systematic Literature Review of DevSecOps. New York, NY, USA, Association for Computing Machinery, p. 266–269.
29. Shackelford, R. et al. (2005) In: Computing Curricula 2015. s.l.:The Association for Computing Machinery (ACM); The Association for Information Systems (AIS); The Computer Society (IEEE-CS).
30. South-Eastern Finland University of Applied Sciences (2021) Bachelor of Engineering, cyber security. [online] https://www.xamk.fi/koulutukset/insinoori-amk-kyberturvallisuus/
31. The Security Committee of Finland (2013) Finland's Cyber security Strategy. [online] https://www.defmin.fi/files/2378/Finland_s_Cyber_Security_Strategy.pdf
32. The Security Committee of Finland, 2019. Finland's Cyber security Strategy 2019. [online] https://turvallisuuskomitea.fi/wp-content/uploads/2019/10/Kyberturvallisuusstrategia_A4_ENG_WEB_031019.pdf
33. United Kingdom (2016) National Cyber Security Strategy 2016-2021. [online] https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/567242/national_cyber_security_strategy_2016.pdf
34. University of Jyväskylä (2013) Cyber Security, Master of Philosophy. [online] https://www.jyu.fi/it/fi/opiskelu/maisteriohjelmat/kyberturvallisuus
35. Whyte, C. (2020) Cyber conflict or democracy “hacked”? How cyber operations enhance information warfare, Journal of Cybersecurity, 6(1), p. tyaa013. doi:10.1093/cybsec/tyaa013.
36. Willoughby, T. et al. (2021) A Long-Term Study of What Best Predicts Graduating From University Versus Leaving Prior to Graduation, Journal of College Student Retention: Research, Theory & Practice. doi: 10.1177/1521025120987993.
37. Zan De, T. & Di Franco, F. (2019) Cybersecurity Skills Development in the EU. [online] https://www.enisa.europa.eu/publications/the-status-of-cyber-security-education-in-the-european-union/@@download/fullReport
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Dr. Ahmad Rizky Pratama, Dr. Siti Nur Aisyah (Author)

This work is licensed under a Creative Commons Attribution 4.0 International License.
All articles published by The Parthenon Frontiers and its associated journals are distributed under the terms of the Creative Commons Attribution (CC BY 4.0) International License unless otherwise stated.
Authors retain full copyright of their published work. By submitting their manuscript, authors agree to grant The Parthenon Frontiers a non-exclusive license to publish, archive, and distribute the article worldwide. Authors are free to:
-
Share their article on personal websites, institutional repositories, or social media platforms.
-
Reuse their content in future works, presentations, or educational materials, provided proper citation of the original publication.