Secondary School Students' Perceptions of Cybersecurity Training through Educational Programmes: A Qualitative Study

Percepción del Alumnado de Enseñanza Obligatoria sobre la Formación en Ciberseguridad a través de Programas Educativos: Un Estudio Cualitativo

Abstract

Introduction. The use of the Internet and social media has become pervasive, particularly among young people, often leading to problematic behaviours in peer relationships or the consumption of inappropriate content. In response to this context, Spanish educational institutions have developed training programmes (Ciberayudante Programme, Ciberexpert@ Programme, and Cibermentor Programme) aimed at adolescent students to promote responsible use of the Internet and social media and to minimise associated risks. Methodology. This qualitative study analyses and compares the perceptions of students in secondary school (n = 62), with a mean age of 14.87 years (SD = 1.29), regarding the organisation, pedagogical functionality, impact on school climate, educational community involvement, and sustainability of these programmes in their schools. The sample was selected through purposive sampling in urban Spanish secondary schools implementing cybersecurity education programmes. Data analysis was conducted through thematic content coding and categorisation using the NVivo software. Results. Participants highlighted the pedagogical functionality of the programmes and their positive impact on school climate as key strengths. However, there is a need to enhance the transferability and dissemination of the outputs generated within broader socio-educational contexts. Discussion. These programmes need to be flexible, open, and continuously updated to address new contexts of social interaction among adolescents in which digital risks may arise. It is concluded that these programs should be systematically integrated and updated within school coexistence plans and tutorial action, involving both teaching staff and families to ensure their continuity and effectiveness in preventing digital risks.