Applying LEAN-principles on Cybersecurity Online Course: A Three-Year Longitude Study

Universities are increasingly pressured to work more efficiently with fewer resources while maintaining their relevance to the workforce and high educational quality. These demands are even higher in cybersecurity because the work-life indicates a competent workforce gap, and the availability of qualified instructors and educators is limited. As a solution, Laurea University of Applied Sciences piloted an online, LEAN-based, 5 ECTS introductory-level cybersecurity course in 2020, optimizing the use of resources based on industrial LEAN practices. The course was structured around the industry-relevant CompTIA Security+ competency framework, and instructors utilized third-party materials as much as possible, including videos, e-books, relevant internet sources, and CTF exercises. In practice, the teachers shifted from traditional content creators to instructors, focusing on pedagogical design, assessment, counseling, and tutoring. Now, four years later, this model is still in use, allowing for a deeper examination of its long-term performance. This study focuses on the same course structure as in 2020 but closely examines eight implementations offered between 2022 and 2024 implementations involving 550 students. The study applies quantitative and qualitative research approaches to relevant research metrics, including student pass rates, grade distributions, student feedback, and teacher observations. The results are promising, and the longitudinal research presented shows that LEAN-based online studies can be designed to be resource-efficient, work-life relevant, and engaging for students. However, LEAN-based online studies could lose a sense of community due to individual studies and a high automation rate. Additionally, complex tasks, like CTF exercises, still require teachers’ guidance and feedback.