Abstract
The primary goal of this study is to develop and evaluate a Cybersecurity Incident Response (IR) Playbook for web-based learning resources maintained by the City Schools Division of Urdaneta, rather than to conduct a simple assessment of existing cybersecurity practices. Specifically, the study sought to identify the challenges encountered in current cybersecurity incident response (IR) practices, develop a standardized IR Playbook tailored for Google Sites and WordPress platforms, and evaluate its usability and user acceptance among intended users. A Design and Development Research (DDR) approach, supported by descriptive research methods, was employed. Data were gathered from seventeen (17) respondents consisting of Learning Resource Personnel, Division ICT Personnel, Administrative Staff, and ICT Coordinators through researcher-made questionnaires, semi-structured interviews, and document analysis. Findings revealed that respondents encountered serious challenges in incident detection and reporting, incident response and containment, and recovery, documentation, and post-incident evaluation due to the absence of standardized procedures, inconsistent reporting mechanisms, unclear roles, and inadequate documentation. Guided by these findings and anchored on the NIST Cybersecurity Framework (CSF 2.0), ISO/IEC 27035, and relevant Philippine cybersecurity laws and DepEd ICT policies, a comprehensive Cybersecurity Incident Response Playbook was developed. The playbook includes standardized procedures, reporting workflows, recovery guidelines, documentation templates, platform-specific response procedures for Google Sites and WordPress, and post-incident evaluation forms. Evaluation results showed that the developed playbook achieved a Highly Acceptable usability rating (WM = 3.47) and a Strongly Agree user acceptance rating (WM = 3.47), indicating that it is practical, comprehensive, and suitable for adoption within the SDO. The study concludes that implementing the developed playbook can strengthen cybersecurity governance, standardize incident handling, and improve the protection and resilience of web-based learning resources.
Keywords: Cybersecurity Incident Response Playbook, Web-Based Learning Resources, Google Sites, WordPress
1.Introduction
The increasing adoption of digital technologies in basic education has transformed the way educational institutions develop, manage, and disseminate learning resources. In the Philippines, the Department of Education (DepEd) has strengthened the integration of Information and Communication Technology (ICT) through initiatives such as the Basic Education Learning Continuity Plan and the Digital Rise Program, encouraging schools and Schools Division Offices (SDOs) to utilize web-based platforms to support teaching, learning, and administrative operations (DepEd, 2020; DepEd, 2021). In the Schools Division Office of Urdaneta City, Google Sites and WordPress have become essential platforms for hosting learning resources, instructional materials, and school-related information.
2. Results and Discussion
This section presents the findings, analysis, and interpretation of data gathered in relation to the development and evaluation of Cybersecurity Incident Response (IR) Playbook for Web-Based Learning Resources in the City Schools Division of Urdaneta. The presentation of results is organized according to the Statement of the Problem. Specifically, it discusses the challenges encountered in the implementation of cybersecurity incident response practices, the developed Cybersecurity IR Playbook, and the usability and user acceptance evaluation conducted among the intended users of the developed playbook.
4. Conclusion
Based on the findings of the study, the following conclusions were drawn: The study revealed that the City Schools Division of Urdaneta encounters several challenges of cybersecurity incident response (IR) practices across the areas of incident detection and reporting mechanisms, incident response and containment procedures, and recovery, documentation, and post incident evaluation. The results indicated that the absence of standardized incident response procedures, unclear inadequate reporting documentation mechanisms, practices, limited cybersecurity awareness, and the lack of formal post-incident evaluation processes were among the major challenges experienced by personnel responsible for managing web-based learning resources. These findings demonstrate that the current cybersecurity IR practices are primarily manual, informal, and dependent on the individual knowledge and experience of personnel, resulting in inconsistencies in handling cybersecurity incidents.
References
[1] Alharbi, F., & Tassaddiq, A. (2021). Cybersecurity awareness and practices in educational institutions: A systematic review. International Journal of Advanced Computer Science and Applications, 12(5), 613–621.
[2] Davis, F. D. (1989). Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly, 13(3), 319–340.
[3] Department of Education. (2020). DepEd Order No. 12, s. 2020: Adoption of the Basic Education Learning Continuity Plan for School Year 2020–2021 in light of the COVID-19 Public Health Emergency. https://www.deped.gov.ph
[4] Department of Education. (2021). DepEd Order No. 29, s. 2021: Adoption of the Basic Education Development Plan 2030 andDigitalRisehttps://www.deped.gov.ph
[5] Department of Program. Information and Communications Technology. (2023). National Cybersecurity Plan 2023–2028. https://dict.gov.ph
Full reference list available in the PDF version.