Development of Web-Based Learning Resource Cybersecurity Incident Response Playbook for the City Schools Division of Urdaneta

Abstract

The primary goal of this study is to develop and evaluate a Cybersecurity Incident Response (IR) Playbook for web-based learning resources maintained by the City Schools Division of Urdaneta, rather than to conduct a simple assessment of existing cybersecurity practices. Specifically, the study sought to identify the challenges encountered in current cybersecurity incident response (IR) practices, develop a standardized IR Playbook tailored for Google Sites and WordPress platforms, and evaluate its usability and user acceptance among intended users. A Design and Development Research (DDR) approach, supported by descriptive research methods, was employed. Data were gathered from seventeen (17) respondents consisting of Learning Resource Personnel, Division ICT Personnel, Administrative Staff, and ICT Coordinators through researcher-made questionnaires, semi-structured interviews, and document analysis. Findings revealed that respondents encountered serious challenges in incident detection and reporting, incident response and containment, and recovery, documentation, and post-incident evaluation due to the absence of standardized procedures, inconsistent reporting mechanisms, unclear roles, and inadequate documentation. Guided by these findings and anchored on the NIST Cybersecurity Framework (CSF 2.0), ISO/IEC 27035, and relevant Philippine cybersecurity laws and DepEd ICT policies, a comprehensive Cybersecurity Incident Response Playbook was developed. The playbook includes standardized procedures, reporting workflows, recovery guidelines, documentation templates, platform-specific response procedures for Google Sites and WordPress, and post-incident evaluation forms. Evaluation results showed that the developed playbook achieved a Highly Acceptable usability rating (WM = 3.47) and a Strongly Agree user acceptance rating (WM = 3.47), indicating that it is practical, comprehensive, and suitable for adoption within the SDO. The study concludes that implementing the developed playbook can strengthen cybersecurity governance, standardize incident handling, and improve the protection and resilience of web-based learning resources.