Data security challenges in online education: requirements for information technology human resources in the context of digital transformation

Abstract

This study examines data security challenges in online education in Vietnam in the context of rapid digital transformation. The expansion of online learning platforms has exposed educational institutions to increasingly complex cybersecurity threats, including ransomware attacks, phishing campaigns, large-scale personal data breaches, and distributed denial-of-service (DDoS) attacks. These risks not only violate data protection regulations but also significantly undermine institutional reputation, learner trust, and the goal of developing a secure and sustainable digital education system. The research adopts the NIST Cybersecurity Framework (NIST CSF 2.0) as its core theoretical foundation to comprehensively assess the current situation, identify key vulnerabilities, and propose a multi-stakeholder coordination model. In this model, information technology (IT) personnel play a central role in facilitating collaboration among university leadership, administrative units, faculty members, and students. Quantitative analysis is conducted using mathematical models such as aggregated risk assessment formulas, Poisson distribution for estimating incident probability, and logistic models for evaluating response effectiveness and improvements in security culture. The findings indicate that human factors constitute the most critical vulnerability, particularly limited awareness, reluctance to report incidents, and insufficient coordination skills. Moreover, regular cybersecurity exercises (4–6 times per year) are identified as the most practical and effective solution to shift from a “static” security posture to a “dynamic” and proactive one. Based on these findings, the study proposes a new competency framework for IT human resources, emphasizing the integration of technical expertise, governance capacity, and soft skills, thereby contributing to the development of a secure and sustainable digital education ecosystem in Vietnam.