This study examines the role of higher education institutions (HEIs) in addressing cybersecurity challenges, in the wake of a prominent shortage of skills, specifically those related to information and cybersecurity professionals. Using qualitative semi structured interviews, the study sought to identify the factors influencing the offering of an information and cybersecurity curriculum at HEIs. The findings show that internal influencing factors were top management and individual academic’s awareness of information and cybersecurity, internal expertise, offering the program only at postgraduate level, and the workload and bureaucracy associated with having the program. External factors perceived to influence information and cybersecurity curriculum at HEIs include pressure from industry and stakeholders as well as institutional bodies that help shape curriculum development.

No abstract