Comparative Analysis of Cybersecurity Frameworks in Educational Institutions: Towards a Tailored Security Model

Abstract

Educational institutions face unique cybersecurity challenges due to their open culture, decentralised structures, and limited resources. While standard frameworks such as NIST, ISO/IEC 27001, and COBIT offer comprehensive guidance, their full implementation in academic settings is often impractical. This study addresses the gap by conducting a document-based comparative analysis of these frameworks, focusing on their applicability in educational institutions. A total of 42 documents—including case studies, cybersecurity guidelines, and academic articles—were analysed using thematic coding. The findings reveal significant misalignments between current frameworks and academic environments, particularly in terms of complexity, adaptability, and resource demand. Based on these insights, a tailored cybersecurity model is proposed. The model emphasises modularity, cultural integration, resource optimisation, and decentralised implementation to suit the educational context. A multi-step validation plan is also outlined to assess the model’s practicality. This research offers both theoretical and practical contributions to cybersecurity governance in the education sector.