The cybersecurity industry faces a significant skills gap, with a shortage of qualified professionals to meet the growing demand for cyber talent. Although there is a wide variety of cybersecurity professional trainings available, these trainings use different approaches and the certificates obtained are not compatible with each other. Contrary to the United States, there is no European Authority responsible for approving these trainings. The situation becomes even more complex when considering sector-specific trainings. This paper sheds light on the certification landscape regarding relevant, organisations and bodies at the international and European level. The standards, the criteria, and the processes regarding professional certifications are discussed. The manuscript concludes with a proposal of a sector-agnostic schema for a cybersecurity professional training programme.

This paper delves into enhancing cybersecurity training efficacy through an in-depth examination of gamified learning, behavioural strategies, and the deployment of digital twins. It identifies the critical role of behavioural strategies in bolstering cybersecurity defences by influencing human behaviour. The study explores the benefits of gamified learning in engaging participants and improving knowledge acquisition, alongside applying digital twins and cyber ranges in offering practical, hands-on experience. By analysing these methodologies, the paper aims to bridge the gap between theoretical knowledge and real-world application, encouraging the researchers to work on a forward-looking approach to cybersecurity training using these innovative methodologies that are both effective and engaging. Our findings suggest that by creating an immersive, interactive learning environment, it is possible to enhance the cybersecurity competencies of individuals, making them better prepared to navigate the complexities of the digital age. This paper contributes to cybersecurity training by offering insights using innovative approaches for effective training programs that are both engaging and informative, ultimately aiming to bolster organisations’ cybersecurity posture.

NERO represents a sophisticated Cybersecurity Ecosystem comprising five interconnected frameworks designed to deliver a Cybersecurity Awareness initiative, as advocated by ENISA as the optimal method for cultivating a security-centric mindset among employees to mitigate the impact of cyber threats. It integrates activities, resources, and training to nurture a culture of cybersecurity. NERO primarily equips SMEs with a repository of Cyber Immunity Toolkits, a Cyber Resilience Program, and Gamified Cyber Awareness Training, all accessible through a user-friendly Marketplace. The efficacy and performance of this concept will be affirmed through three distinct use case demonstrations across various sectors: Improving Patient Data Security in Healthcare with Cybersecurity Tools, Enhancing Supply Chain Resilience in the Transportation and Logistics Industry through Cybersecurity Awareness, and Elevating Financial Security via Enhanced Cybersecurity Awareness and Tools.

Cybersecurity skilled workforce is a critical challenge for Europe. The increasing sophistication and frequency of cyberattacks demand a skilled and competent workforce to protect digital infrastructure and ensure online safety. This paper presents a viable solution for European cybersecurity workforce development and capacity-building efforts, leveraging the European Cybersecurity Skills Framework (ECSF) to facilitate cybersecurity training and professional workforce development. The paper begins by highlighting the cybersecurity workforce shortage and the challenges faced by higher education institutes in providing relevant education and training. It then emphasises the need for a qualified and competent cybersecurity workforce considering the increased cyber threats and risks. The paper explores ECSF as a solution for skilling, upskilling, and reskilling in the cybersecurity sector interwinding with a project case. Next, the paper presents a case study of the “CyberSecPro” and “NERO” projects that aims to equip the workforce with cutting-edge and relevant education and training. The paper argues that ECSF provides a common language and framework for cybersecurity skills and competencies development, harmonising education, training, and workforce development efforts across Europe. The case study outlines the methodology for selecting training modules aligned with the working-life demands and underscores the importance of collaboration between educational institutions, industry stakeholders, and government bodies to meet the cybersecurity workforce capacity-building goals. The paper concludes that ECSF is a valuable tool if used appropriately for addressing the cybersecurity workforce shortage and build European cybersecurity skills capacity.

Digital technology provides unique opportunities to revolutionize the healthcare ecosystem and health research. However, this comes with serious security, safety, and privacy threats. The healthcare sector has been proven unequipped and unready to face cyberattacks while its vulnerabilities are being systematically exploited by attackers. The growing need and use of medical devices and smart equipment, the complexity of operations and the incompatible systems are leaving healthcare organizations exposed to various malware, including ransomware, which result in compromised healthcare access, quality, safety and care. To fully benefit from the advantages of technology, cybersecurity issues need to be resolved. Cybersecurity measures are being suggested via a number of healthcare standards which are often contradicting and confusing, making these measures ineffective and difficult to implement. To place a solid foundation for the healthcare sector, in improving the understanding of complex cybersecurity issues, this paper explores the existing vulnerabilities in the health care critical information infrastructures which are used in cyberattacks and discusses the reasons why this sector is under attack. Furthermore, the existing security standards in healthcare are presented alongside with their implementation challenges. The paper also discusses the use of living labs as a novel way to discover how to practically implement cybersecurity measures and also provides a set of recommendations as future steps. Finally, to our knowledge this is the first paper that analyses security in the context of living labs and provides suggestions relevant to this context.