Assessing the Awareness of Cybersecurity Within Entrepreneurship Students: The Cyberpreneurship Project

Abstract

This study addresses an important gap in both academia and practice related to the lack of a shared language and sometimes conflicting priorities between entrepreneurs and cybersecurity experts. Entrepreneurs are often pressed to create and launch products and services as quickly as possible to achieve a first-mover advantage in the market. In doing so, they tend to overlook cybersecurity threats and risks due to a lack of awareness and insufficient funding. This can lead to theft of intellectual property, project failure, and inaccurate risk assessment. In addition, cybersecurity students who study risk management often struggle to analyze real client issues due to the sensitive nature of the data and assets in most organizations. The Cyberpreneurship Project outlined within this research was designed to tackle to this problem by engaging cybersecurity students in a risk assessment of start-up businesses developed by entrepreneurship graduate students. The project is an interdisciplinary exploratory study developed to enhance awareness of cybersecurity risks and experiential opportunities among both entrepreneurship and cybersecurity students. The success of the project is assessed through a mixed-methods approach. The study also provides the academic community with valuable tools and resources to establish similar educational models at their own institutions.

Keywords

entrepreneurship education cybersecurity experiential education opportunity recognition risk mitigation

Get full access to this article

View all access options for this article.

References

Aldrich

(2005). Learning by doing: A comprehensive guide to simulations, computer games, and pedagogy in e-learning and other educational experiences. John Wiley & Sons.

Angel

(2019). Top 5 of the fastest-growing industries in the world. https://www.worldfinance.com/markets/top-5-of-the-fastest-growing-industries-in-the-world

Aven, T. (2011). On some recent definitions and analysis frameworks for risk, vulnerability, and resilience. Risk Analysis: An International Journal, 31(4), 515--522.

Bailetti

Zijdemans

(2014). Cybersecurity startups: The importance of early and rapid globalization. Technology Innovation Management Review, 4(11), 14--21.

Ballantyne

Packer

(2009). Introducing a fifth pedagogy: Experience‐based strategies for facilitating learning in natural environments. Environmental Education Research, 15(2), 243–262.

Barlette

Gundolf

Jaouen

(2015). Toward a better understanding of SMB CEOs’ information security behavior: Insights from threat or coping appraisal. Journal of Intelligence Studies in Business, 5(1).

Baron

R. A.

(2006). Opportunity recognition as pattern recognition: How entrepreneurs “connect the dots” to identify new business opportunities. Academy of Management Perspectives, 20(1), 104–119.

Broadhurst

Lord

Maxim

Woodford-Smith

Johnston

Chung

H. W.

Carroll

Trivedi

Sabol

(2018). Malware trends on ‘Darknet’Crypto-Markets: Research review. Available at SSRN 3226758.

CBINSIGHTS. (2019). The increasingly crowded cybersecurity unicorn club . https://www.cbinsights.com/research/cybersecurity-unicorns/

10.

Choi

B. C.

Pak

A. W.

(2006). Multidisciplinarity, interdisciplinarity and transdisciplinarity in health research, services, education and policy: 1. Definitions, objectives, and evidence of effectiveness. Clinical and Investigative Medicine, 29(6), 351.

11.

Cohen

Hulvey

Mongkolnchaiarunya

(2017). Cybersecurity as an engine for growth. New America.

12.

Cook

T. D.

Campbell

D. T.

Shadish

(2002). Experimental and quasi-experimental designs for generalized causal inference. Houghton Mifflin.

13.

Couger

J. D.

Higgins

L. F.

McIntyre

S. C.

(1990). Differentiating creativity, innovation, entrepreneurship, intrapreneurship, copyright and patenting of IS products/processes [Paper presentation]. Twenty-Third Annual Hawaii International Conference on System Sciences, Kailua-Kona, HI, United States.

14.

Duval‐Couetil

(2013). Assessing the impact of entrepreneurship education programs: Challenges and approaches. Journal of Small Business Management, 51(3), 394–409.

15.

Eisenmann

T. R.

(2013). Entrepreneurship: A working definition. Harvard Business Review, 10.

16.

Entrepreneurship Magazine. (2017). Infographic: The growth of entrepreneurship around the globe. https://www.entrepreneur.com/article/288286

17.

Espinel

Chopra

Schmidt

(2012). Combating online piracy while protecting an open and innovative Internet. The White House. https://petitions.whitehouse.gov/response/combating-online-piracy-whileprotectingopen-and-innovative-internet

18.

Fayolle

(2013). Personal views on the future of entrepreneurship education. Entrepreneurship & Regional Development, 25(7–8), 692–701.

19.

Fox

Pittaway

Uzuegbunam

(2018). Simulations in entrepreneurship education: Serious games and learning through play. Entrepreneurship Education and Pedagogy, 1(1), 61–89.

20.

Gault

Leach

Duey

(2010). Effects of business internships on job marketability: The employers’ perspective. Education+ Training, 52(1), 76–88.

21.

Gorab

A. K.

Dalal

R. S.

(2016). Insider threat in cyber security: What the organizational psychology literature on counterproductive work behavior can and cannot (yet) tell us. Psychosocial Dynamics of Cyber Security (pp. 122–140). Routledge.

22.

Gribbons

Herman

(1997). True and quasi-experimental designs. ERIC Clearinghouse on Assessment and Evaluation.

23.

Guion

L. A.

Diehl

D. C.

McDonald

(2011). Triangulation: Establishing the validity of qualitative studies (FCS6014). Institute of Food and Agricultural Sciences, University of Florida. http://edis.ifas.ufl.edu/pdffiles/FY/FY39400.pdf

24.

Gutbrod

Münch

Tichy

(2017). How do software startups approach experimentation? Empirical results from a qualitative interview study [Paper presentation]. International Conference on Product-Focused Software Process Improvement, Wolfsburg, Germany.

25.

Harliharan

(2017). Infographic: MAGNiTT’s 2016 State of MENA Funding. https://www.entrepreneur.com/article/287649

26.

Hayes

Bodhani

(2013). Cyber security: Small firms under fire [Information technology professionalism]. Engineering & Technology, 8(6), 80–83.

27.

Javidi

Sheybani

(2018). K-12 cybersecurity education, research, and outreach [Paper presentation]. 2018 IEEE Frontiers in Education Conference (FIE), San Jose, CA, United States.

28.

Jones

Bugge

(2006). Improving understanding and rigour through triangulation: An exemplar based on patient participation in interaction. Journal of Advanced Nursing, 55(5), 612–621.

29.

Jones

English

(2004). A contemporary approach to entrepreneurship education. Education+ Training, 46(8/9), 416–423.

30.

Kaila

Nyman

(2018). Information security best practices: First steps for startups and SMEs. Technology Innovation Management Review, 8(11), 32–42.

31.

Kaplan

Maxwell

J. A.

(2005). Qualitative research methods for evaluating computer information systems Evaluating the organizational impact of healthcare information systems (pp. 30–55). Springer.

32.

Kiseleva

I. A.

Karmanov

M. V.

Korotkov

Kuznetsov

Gasparian

(2018). Risk management in business: Concept, types, evaluation criteria. Espacios, 39(27), 18.

33.

Lombardi

M. M.

(2007). Authentic learning for the 21st century: An overview. Educause Learning Initiative, 1(2007), 1–12.

34.

Man

T. W.

Lau

Chan

(2002). The competitiveness of small and medium enterprises: A conceptualization with focus on entrepreneurial competencies. Journal of Business Venturing, 17(2), 123–142.

35.

McGrath

R. G.

(1999). Falling forward: Real options reasoning and entrepreneurial failure. Academy of Management Review, 24(1), 13–30.

36.

McGregor

D. M.

(1967). The professional manager. McGraw-Hill.

37.

Minniti

Bygrave

W. D.

Autio

(2006). Global entrepreneurship monitor, executive report 2005. Babson College y London Business School.

38.

Morris

M. H.

Webb

J. W.

Singhal

(2013). A competency‐based perspective on entrepreneurship education: Conceptual and empirical insights. Journal of Small Business Management, 51(3), 352–369.

39.

Murphy

P. J.

Hood

A. C.

(2019). The heptalogical model of entrepreneurship. Entrepreneurship Education and Pedagogy, 2(3), 188–213.

40.

Murphy

P. J.

Welsch

Heiser

D. R.

Young

S. T.

Jiang

(2012). Small firm entrepreneurial outsourcing: Traditional problems, nontraditional solutions. Strategic Outsourcing: An International Journal, 5(3), 248–275.

41.

Myers

M. D.

(1997). Qualitative research in information systems. MIS Quarterly, 21(2), 241–242.

42.

Nabi

Liñán

Fayolle

Krueger

Walmsley

(2017). The impact of entrepreneurship education in higher education: A systematic review and research agenda. Academy of Management Learning & Education, 16(2), 277–299.

43.

Neck

H. M.

Corbett

A. C.

(2018). The scholarship of teaching and learning entrepreneurship. Entrepreneurship Education and Pedagogy, 1(1), 8–41.

44.

Nobel

(2011). Why companies fail–and how their founders can bounce back. Harvard Business School.

45.

Nobles

Burrell

(2018). Using cybersecurity communities of practice (CoP) to support small and medium businesses [Paper presentation]. ICIE 2018 6th International Conference on Innovation and Entrepreneurship: ICIE 2018, Columbus, OH, United States.

46.

Opitz

E. L.

(2018). Cybersecurity for the board of directors of small and midsized businesses. Board Leadership, 2018(159), 4–5.

47.

Osborn

(2015). Business versus technology: Sources of the perceived lack of cyber security in SMEs. https://ora.ox.ac.uk/objects/uuid:4363144b-5667-4fdd-8cd3-b8e35436107e/download_file?file_format=pdf&safe_filename=01-15.pdf&type_of_work=Research+paper

48.

Plachkinova

Menard

(2017, October 6–7). Improving smart home security through end-user training [Paper presentation]. Secure Knowledge Management Workshop, Tampa, FL, United States.

49.

Raineri

E. M.

Fudge

(2019). Exploring the sufficiency of undergraduate students’ cybersecurity knowledge within top universities’ entrepreneurship programs. Journal of Higher Education Theory and Practice, 19(4), 73--92.

50.

Sanzgiri

Dasgupta

(2016). Classification of insider threat detection techniques [Paper presentation]. Proceedings of the 11th Annual Cyber and Information Security Research Conference, Oak Ridge, TN, United States.

51.

Shane, S., & Venkataraman, S. (2000). The promise of entrepreneurship as a field of research. Academy of management review, 25(1), 217--226.

52.

Shepherd

D. A.

(2004). Educating entrepreneurship students about emotion and learning from failure. Academy of Management Learning & Education, 3(3), 274–287.

53.

Singh

Goyal

(2017). An imperative analysis of security issues and challenges with big data in SMB’s. International Journal of Advanced Research in Computer Science, 8(9), 787--793.

54.

Smit

Watkins

(2012). A literature review of small and medium enterprises (SME) risk management practices in South Africa. African Journal of Business Management, 6(21), 6324.

55.

Söhoel

Jaatun

M. G.

Boyd

(2018). OWASP top 10-do startups care? [Paper presentation]. 2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), Glasgow, UK.

56.

South

J. R.

(2015). How cybersecurity education aims to fill the talent gap. https://www.securitymagazine.com/articles/86748-how-cybersecurity-education-aims-to-fill-the-talent-gap

57.

Tan

A. T.

(2017). Technology’s unlikely application of the art of war. Ateneo Chinese Studies Program Lecture Series (4), 89–104.

58.

Winter

Govindarajan

(2015). Engineering reverse innovations: Principles for creating successful products for emerging markets. Harvard Business Review, 93(7/8), 80–89.

59.

Zhang

(2016). A study on cybersecurity start-ups: A financial approach to analyze industry trends, entrepreneurship ecosystems and start-up exits. Massachusetts Institute of Technology.

Supplementary Material

Please find the following supplemental material available below.

For Open Access articles published under a Creative Commons License, all supplemental material carries the same license as the article it is associated with.

For non-Open Access articles published, all supplemental material carries a non-exclusive license, and permission requests for re-use of supplemental material or any part of supplemental material shall be sent directly to the copyright owner as specified in the copyright notice associated with the article.

0.00 MB

0.19 MB