CYBERSECURITY EDUCATION IN SECURITY AGENCIES: STRATEGIES, CHALLENGES, AND PATHWAYS TO IMPLEMENTATION

Abstract

Security agencies face an expanding cyber threat landscape, yet many lack a structured, institution-wide approach to cybersecurity education. This paper draws on a qualitative case study of a Namibian security organisation to examine the strategic, curricular and implementation challenges involved in institutionalising cybersecurity education in security-sector settings, and proposes a seven-phase implementation strategy to address them. Data were collected from twenty purposively sampled personnel through semi-structured interviews, observation and document analysis, and interpreted through Protection Motivation Theory and the ADDIE instructional design model. The findings show that implementation is constrained less by a lack of institutional will than by systemic factors, including limited financial resources, a shortage of specialised instructors, infrastructure deficits, and heterogeneous educational backgrounds among personnel, and that a strong institutional preference exists for face-to-face, rank-structured delivery over self-directed digital learning. The proposed strategy sequences situational analysis, governance alignment, rank-differentiated curriculum development, capacity building, piloting, full rollout, and continuous monitoring, and is designed to be resource-sensitive and adaptable to comparable security agencies operating in developing-country contexts. The paper concludes with recommendations for policymakers and training institutions responsible for cybersecurity capacity building in the security sector.