Advancing Inclusivity in Cybersecurity Education: Integrating Intersectionality to Enhance Student Engagement in Australian Higher Education Curriculums Strategies, Barriers, and Future Directions
This study explores the perspectives of 15 Australian cybersecurity academics to identify barriers and propose strategies for integrating intersectional approaches—specifically addressing the needs of women, gender-diverse individuals, and CALD communities—into higher education curricula to enhance student engagement and workforce diversity.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
In the digital age, the most vulnerable targets in the world of cybersecurity are not the complex computer systems or the encrypted servers, but the people who use them. Attackers often bypass sophisticated firewalls by tricking individuals into revealing passwords or clicking on harmful links, a tactic known as phishing. This human element of security is deeply influenced by who a person is, where they come from, and the language they speak. For instance, women, people who identify as gender-diverse, and those from culturally and linguistically diverse backgrounds often face higher risks of falling victim to these scams. This happens because attackers tailor their deceptions to exploit specific cultural norms, language barriers, or social isolation. If the people who design the defenses and teach the next generation of security experts do not understand these diverse lived experiences, the entire system remains fragile.
A team of researchers from several Australian universities set out to investigate how well the country's university cybersecurity programs are preparing students to understand these human factors. They focused on a concept called intersectionality, which simply means looking at how different parts of a person's identity—such as their gender, culture, and language—overlap to create unique experiences and risks. The researchers wanted to know if Australian universities are teaching students to see the world through these diverse lenses, or if they are sticking to a narrow, technical view that ignores the social realities of the people they are trying to protect. To find out, the team spoke with fifteen experienced academics who teach and coordinate cybersecurity courses across every state in Australia. These educators, ranging from senior professors to lecturers, shared their honest perspectives on what is currently being done, what is stopping them from doing more, and what they need to move forward.
The researchers found that while universities often have broad policies about being inclusive, these ideas rarely make it into the actual lessons students receive in the classroom. There is no systematic way to weave these diverse perspectives into the curriculum. Instead, the effort to include them is left to individual teachers who might try to discuss gender or culture for a single week in an ethics course, or who might create their own informal support groups for students struggling with language barriers. One educator described how they would use early assignments to spot students who needed extra help with English, then organize small learning circles to bring them up to speed. While these individual efforts are well-intentioned, they are inconsistent and depend entirely on the energy and interest of specific staff members rather than being a standard part of the education system.
The study identified four major groups of barriers that prevent these inclusive changes from happening. First, there are significant government and institutional hurdles. Universities often lack the specific funding and dedicated government support needed to build new, inclusive courses. When budgets are tight, diversity initiatives are often the first things to be cut, and the frequent changes in government policies create uncertainty that makes long-term planning difficult. Second, the academics themselves face attitudinal and structural challenges. Many cybersecurity teachers come from a technical background and view their subject as purely about code and networks. They often feel they lack the training or confidence to discuss sensitive social topics, and they worry that adding these elements will distract from the technical skills students need to get jobs. Furthermore, the current workload models in universities do not reward this kind of work; if a teacher spends time redesigning a course to be more inclusive, it does not count toward their promotion in the same way that publishing a technical paper does.
Third, there are challenges in getting different experts to work together. To teach cybersecurity effectively in a diverse society, technical experts need to collaborate with specialists in psychology, sociology, and cultural studies. However, these groups often speak different academic languages, publish in different journals, and have different priorities, making it hard for them to build a shared curriculum. Finally, there is a lack of the right tools and resources. Teachers do not have access to a library of real-world examples or case studies that reflect the experiences of women, gender-diverse individuals, or people from diverse cultural backgrounds. Without these concrete materials, it is difficult to show students how a phishing scam might target a specific community differently than another.
Despite these obstacles, the researchers gathered clear ideas on how to fix the problem. The participants agreed that the solution lies in a coordinated, top-down approach rather than relying on individual heroes. They suggested that universities should create dedicated teams to help teachers design inclusive courses, and that accreditation bodies—the organizations that certify that a degree is valid—need to update their standards to require these diverse perspectives as a core part of the curriculum, not just an optional add-on. The researchers also emphasized the importance of involving the students and communities themselves in the design process. By asking women, gender-diverse people, and those from diverse cultural backgrounds what they need and what their experiences are, educators can create lessons that are relevant and engaging.
The path forward also requires a shift in how universities value their staff. If institutions want inclusive education, they must count the time spent creating it as real academic work and reward it in promotions and pay. They need to provide training so that teachers feel confident discussing these topics without fear of saying the wrong thing. Furthermore, the government and industry leaders must step up with funding and partnerships. The researchers noted that industry partners could provide real-world data and scenarios to help students practice, while the government could offer incentives for universities that successfully integrate these perspectives.
Ultimately, the study concludes that for Australia to build a cybersecurity workforce capable of protecting a diverse population, the education system must change. It is not enough to teach students how to secure a server; they must also learn how to understand the people who use it. By integrating these intersectional perspectives into the core of what is taught, universities can produce graduates who are not only technically skilled but also culturally aware and ready to solve the complex, human-centered security challenges of the future. The researchers believe that with the right support, resources, and commitment from all sectors, this shift is possible, leading to a safer and more inclusive digital world for everyone.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.