Toward a cybersecurity curriculum model for undergraduate business schools: A survey of AACSB-accredited institutions in the United States

With the increasing demand for cybersecurity professionals, the authors examined how business schools are meeting that demand, specifically the core requirements of their cybersecurity curricula related to information systems programs. They examined 518 Association to Advance Collegiate Schools of Business-accredited business schools in the United States and identified 278 schools that offered undergraduate information systems (IS) and information technology (IT) programs, of which 27 had cybersecurity programs. Both the IS 2010 curriculum model and Centers of Academic Excellence knowledge units are used to guide data collection. The top three security-related courses required are IT security, IT risk management/managerial issues, and digital forensics. A descriptive cybersecurity curriculum model is developed based on the results, which can also serve as baselines for future studies on business-school cybersecurity programs.