Cybersecurity for UK SMEs: A Computing Curriculum below the SOC Fantasy

Abstract

UK SMEs in Oxfordium computing programmes rarely have a security operations centre. This paper reports a module on backup, identity, supplier questionnaires and ICO-facing incident basics. Students implemented calling-trees more often than ‘zero trust’ posters. Online and campus sections used the same assessed labs with remote datasets. Oxfordium University should keep computing regional and realistic. A dual-pathway UK university that only mimics a London unicorn lab will miss the firms that actually employ its graduates.