Cybersecurity Education in Finnish Universities of Applied Sciences: Workforce Alignment

Abstract

Performing effectively in cybersecurity work roles demands a diverse professional skill set. Fresh graduates often struggle to meet the high expectations of employers. This study assesses how 12 Finnish universities of applied sciences equip students with the most relevant professional skills for graduates’ early careers. The question is topical because the cybersecurity profession suffers from a worldwide workforce shortage, with Finland requiring between 6000 and 13000 additional experts. This study compares the bachelor’s and master’s level study offerings in information and communications technology (ICT) of 12 universities of applied sciences in Finland with the professional skill requirements set by local companies and organizations for cybersecurity roles. The study offerings of participating universities are profiled and categorized based on the EU Joint Research Centre (JRC) Cybersecurity and Bloom’s taxonomies. As an outcome, this study represents visually how study offerings in the participating universities of applied sciences align with industry needs and employer expectations. Previous studies in Finland on university-level cybersecurity education have been based on the U.S.-originated National Initiative for Cybersecurity Education (NICE) Framework. This study extends the current understanding and leverages the latest interview and survey-based research results and the European Joint Research Centre Cybersecurity Taxonomy. Among the bachelor’s degree programs, five universities provide cybersecurity-focused programs, four universities offer complementary mid-level cybersecurity studies integrated within the non-cyber-focused education, and three universities have remarkably low-level cybersecurity study offerings in their curricula. The master’s degree programs are well-aligned with each other and complement the bachelor’s degree programs according to the Finnish dual model educational system.