Strengthening Cybersecurity Awareness Through Education: The Expanding Role of Cyber Law in Academic Institutions

Zabihullah  Nadry; Musawer Hakimi; Abdul Wali Sirat; Zekrullah Popal

doi:10.38043/jah.v8i2.7086

Authors

Zabihullah Nadry Samangan University, Aibak, Afghanistan
Musawer Hakimi Samangan, Afghanistan
Abdul Wali Sirat Samangan University, Samangan, Afghanistan
Zekrullah Popal Avicenna University, Afghanistan

DOI:

https://doi.org/10.38043/jah.v8i2.7086

Keywords:

Cybersecurity Awareness, Cyber Law, Student Behavior, Higher Education, Knowledge-Practice Gap

Abstract

As digital technologies continue to proliferate, university students are especially vulnerable to the risks associated with cyber threats, and there is a dearth of research related to the cybersecurity awareness of university students in a developing country context. The purpose of this study is to examine the cybersecurity knowledge, attitudes, and practices of first-year students at Kabul University in Afghanistan to determine the influence of gender, faculty, and awareness of cyber law on intentions to engage in secure online behavior. To collect data, we conducted a cross-sectional survey of 371 students who were recruited using stratified random sampling. Participants were introduced to and administered a survey using the Contextualized Cybersecurity Educational Research Instrument (CCERI), and data was analyzed on SPSS using descriptive statistics, independent samples t-tests, ANOVA, Chi-square tests, and multiple regression models. The results indicated that students had moderate to high levels of cybersecurity knowledge and generally positive attitudes, but that they demonstrated fewer secure practices and a knowledge-practice gap emerged. Male students and students from the Computer Science faculty had greater awareness of cybersecurity and higher recognition of phishing attempts than female students and students from the other faculties. Multiple regression models indicated that cybersecurity knowledge, attitudes, and awareness of the cyber law were significant predictors of secure behavior; this suggests that we need to develop and integrate educational interventions to support positive behaviors in terms of secure cyber practices. Our research adds new knowledge by integrating awareness of cyber law with cybersecurity behavior in Afghanistan as its own unique context. We conclude with recommendations for evidence-informed decisions to implement and develop institutionalized programs to address capacities in cybersecurity education for students in Afghanistan.

Downloads

Download data is not yet available.

References

Ahmad, N., Laplante, P. A., DeFranco, J. F., & Kassab, M. (2021). A cybersecurity educated community. IEEE Transactions on Emerging Topics in Computing, 10(3), 1456-1463. https://doi.org/10.1109/TETC.2021.3093444

Al-Fatlawi, H. H. M. (2024). Awareness of cyber security aspects in distance education. Journal of Pedagogical Sociology and Psychology, 6(1), 77-88. https://doi.org/10.33902/jpsp.202424403

Ali, G., Samuel, A., Mijwil, M. M., Al-Mahzoum, K., Sallam, M., Salau, A. O., ... & Melekoglu, E. (2025). Enhancing Cybersecurity in Smart Education with Deep Learning and Computer Vision: A Survey. Mesopotamian Journal of Computer Science, 2025, 115-158. https://doi.org/10.58496/MJCSC/2025/008

Al-Janabi, S., & Al-Shourbaji, I. (2016). A study of cyber security awareness in educational environment in the Middle East. Journal of Information & Knowledge Management, 15(01), 1650007. https://doi.org/10.1142/S0219649216500076

Alwan, H. B. (2019). National cyber governance awareness policy and framework. International Journal of Legal Information, 47(2), 70-89. https://doi.org/10.1017/jli.2019.22

Armas, R., & Taherdoost, H. (2025). Building a cybersecurity culture in higher education: Proposing a cybersecurity awareness paradigm. Information, 16(5), 336. https://doi.org/10.3390/info16050336

Bada, M., & Nurse, J. R. (2019). Developing cybersecurity education and awareness programmes for small-and medium-sized enterprises (SMEs). Information & Computer Security, 27(3), 393-410. https://doi.org/10.1108/ICS-07-2018-0080

Chang, L. Y., & Coppel, N. (2020). Building cyber security awareness in a developing country: Lessons from Myanmar. Computers & Security, 97, 101959. https://doi.org/10.1016/j.cose.2020.101959

Cheng, E. C., & Wang, T. (2022). Institutional strategies for cybersecurity in higher education institutions. Information, 13(4), 192. https://doi.org/10.3390/info13040192

Filipenko, N., Lukashevych, S., Andrieieva, O., Palkova, K., Raksti, V., Jua, L. (2025). Information Security Policy in Higher Education Institutions. In: Lytvynov, O., Pavlikov, V., Krytskyi, D. (eds) Integrated Computer Technologies in Mechanical Engineering - 2024. ICTM 2024. Lecture Notes in Networks and Systems, vol 1474. Springer, Cham. https://doi.org/10.1007/978-3-031-94852-7_11

Furnell, S. M., & Vasileiou, I. (2022). A holistic view of cyber security education requirements. In M. Khosrow-Pour (Eds.), Research anthology on advancements in cybersecurity education (pp. 289 307). IGI Global. https://doi.org/10.4018/978-1-6684-3554-0.ch013

Khader, M., Karam, M., & Fares, H. (2021). Cybersecurity awareness framework for academia. Information, 12(10), 417. https://doi.org/10.3390/info12100417

Kumar, A., Mishra, K., Mahto, R. K., & Mishra, B. K. (2024). A framework for institution to enhancing cybersecurity in higher education: A review. LatIA, 2, 94-94. https://doi.org/10.62486/latia202494

Marune, A. E. M. S., & Hartanto, B. (2021). Strengthening personal data protection, cyber security, and improving public awareness in Indonesia: Progressive legal perspective. International Journal of Business, Economics, and Social Development, 2(4), 143-152. https://journal.rescollacomm.com/index.php/ijbesd/article/view/170

Oroni, C.Z., Xianping, F., Ndunguru, D.D. et al. Cyber safety in e-learning: The effects of cyber awareness and information security policies with moderating effects of gender and experience levels among e-learning students. Educ Inf Technol 30, 1419714236 (2025). https://doi.org/10.1007/s10639-025-13366-2

Pirinen, R., Rathod, P., Gugliandolo, E., Fleming, K., & Polemi, N. (2024, May). Towards the Harmonisation of Cybersecurity Education and Training in the European Union Through Innovation Projects. In 2024 IEEE Global Engineering Education Conference (EDUCON) (pp. 1-9). IEEE. https://doi.org/10.1109/EDUCON60312.2024.10578867

Sandi, S., & van den Berg, C. L. (2025). Cybersecurity mindset and upskilling: Resilience via lifelong learning and security education. South African Journal of Information Management, 27(1), 12. https://doi.org/10.4102/sajim.v27i1.2044

Shillair, R., Esteve-Gonzlez, P., Dutton, W. H., Creese, S., & Von Solms, B. (2023). Building cybersecurity capacity through education, awareness, and training. In Cybersecurity for decision makers (pp. 365-382). CRC Press. https://doi.org/10.1145/3344429.3372507

Shillair, R., Esteve-Gonzlez, P., Dutton, W. H., Creese, S., Nagyfejeo, E., & von Solms, B. (2022). Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise. Computers & Security, 119, 102756. https://doi.org/10.1016/j.cose.2022.102756

Triplett, W. J. (2023). Addressing cybersecurity challenges in education. International Journal of STEM Education for Sustainability, 3(1), 47-67. https://www.journal.gmpionline.com/index.php/ijses/article/view/132