Guidelines to Develop a Cybersecurity Policy in Schools, Perspectives Informed from Jordanian Cybercrime Law

Ahmad Ghandour, Brendon J. Woodford

Abstract: For educational institutions the introduction of the Jordanian Cybercrime Law No. 17 of 2023 added an extra dimension of stricter legal compliance to the already challenging task of developing cybersecurity policies. As a response, this paper presents guidelines to support the education sector in this regard. What underpins this work is the knowledge gained from a comprehensive examination of the current state of cybersecurity practices in Jordanian schools. Then, combining case studies, insight from expert consultations, and a review of Jordanian cybercrime legislation informed the guidelines on how schools should approach effective cybersecurity policy and implementation. The findings combine essential elements which span strategy, standards, hardware and software, and training. A core theme of these guidelines is how legal compliance can be achieved for school policies in relation to Jordanian Cybercrime Law and the negative effects of non-compliance. These outcomes have ramifications for school administrators and policymakers to acknowledge the urgent need to integrate legal and educational strategies to strengthen their cybersecurity practices. The intent of this recommended framework is for Jordanian schools to strike a balance complying with national cybercrime laws and fostering a secure educational environment. This proactive approach has a dual purpose. Institutions can be protected from cyber threats and in doing so promoting a culture of cybersecurity awareness among students and staff. However, this framework relies on administrators and policymakers to navigate the complexities of digital security in educational environments.