The Journal of Cybersecurity Education Research and Practice (JCERP) is a peer-reviewed scholarly online journal dedicated to promoting scholarship among faculty teaching and researching Cybersecurity topics. JCERP seeks to collect and publish high-quality research, perspective, and best practice articles on the understanding, investigation, conduct and instruction of security related topics written specifically for an academic audience. JCERP adheres to this definition of open access: anyone can read, download, copy, distribute, print, search, or link to the full texts of its articles and use them for any other lawful purpose.

The purpose of this study was to examine the impact of a GenCyber camp curriculum on teachers’ technology, pedagogy, and content knowledge (TPACK). The camp was designed to engage participants in developing the knowledge and skills to incorporate GenCyber Cybersecurity First Principles and GenCyber Cybersecurity Concepts (GenCyber, 2019) into their curriculums. Participants (37 middle and high school teachers from a variety of disciplines) attended one of two weeklong camps held at a Midwestern liberal arts university. Using the TPACK Self-Reflection and TPACK Self-Assessment Surveys, pre- and post-camp data were collected from participants. Findings indicate that participants demonstrated an increase in all domains of the TPACK framework from pre- to post-survey. The greatest increase was in Technological Pedagogy Knowledge (TPK) (0.57), followed by Pedagogical Content Knowledge (PCK) (0.51), and Technological Pedagogical Content Knowledge (TPACK) (0.46). GenCyber participants also demonstrated an average increase in pre- and post-test scores in all areas on the TPACK Self-Assessment Survey Results; however, individual results were mixed. The majority of participants (n=21), sixty percent, saw an increase in composite score from pre- to post, whereas 12 participants' (34%) scores decreased from pre- to post, and two (6%) stayed the same. Findings indicate the GenCyber Camp provided in-service teachers with the knowledge and skills necessary to incorporate GenCyber Principles and Cybersecurity Concepts into their curriculum. Recommendations for teacher professional development on cybersecurity are made.

Phishing is a common social engineering attack aimed to steal personal information. Universities attract phishing attacks because: 1) they store employees and students sensitive data, 2) they save confidential documents, 3) their infrastructures often lack security. In this paper, we showcase a phishing assessment at the University of Redacted aimed to identify the people, and the features of such people, that are more susceptible to phishing attacks. We delivered phishing emails to 1.508 subjects in three separate batches, collecting a clickrate equal to 30%, 11% and 13%, respectively. We considered several features (i.e., age, gender, role, working/studying field, email template) in univariate and multivariate analyses and found that students are more susceptible to phishing attacks than professors or technical/administrative staff, and that emails designed through a spearphishing approach receive a highest clickrate. We believe this work provides the foundations for setting up an effective educational campaign to prevent phishing attacks not only at the University of Redacted, but in any other university.

Since 2016, it has been the mission of the Journal of Cybersecurity Education, Research, and Practice (JCERP) to be a premier outlet for high-quality information security and cybersecurity-related articles of interest to teaching faculty and students.This is the 13 th edition of the (JCERP) and, as ever, we are seeking authors who produce high-quality research and practice-oriented articles focused on the development and delivery of information security and cybersecurity curriculum, innovation in applied scholarship, and industry best practices in information security and cybersecurity in the enterprise for double-blind review and publication.The journal invites submissions on Information Security, Cybersecurity, and related topics such as those found in this edition.