Evaluating Security Challenges in Digital Access Systems for Technology-Enabled Vocational Education: A Systematic Literature Review

https://doi.org/10.5614/sostek.itbj.2026.25.2.3

Authors

  • Kennedy Barfi Yaw Agyeibi Universitas Pendidikan Indonesia, Bandung, Indonesia
  • Budi Mulyanti Universitas Pendidikan Indonesia, Bandung, Indonesia
  • Agus Setiawan Universitas Pendidikan Indonesia, Bandung, Indonesia
  • Lala Septem Riza Universitas Pendidikan Indonesia, Bandung, Indonesia
  • Ilhamdaniah Universitas Pendidikan Indonesia, Bandung, Indonesia

Keywords:

digital access security, vocational education, learning continuity, socio-technical systems, cybersecurity governance

Abstract

The rapid expansion of technology-enabled vocational education has increased reliance on digital access systems that regulate entry to learning platforms, simulations, and assessment environments. This study examines how security challenges in these systems affect learning continuity in vocational education and identifies factors that intensify disruption risks. A systematic review of peer-reviewed studies published between 2020 and 2025 was conducted using five academic databases, applying predefined inclusion criteria and synthesizing findings through descriptive and thematic analysis. Results show that weaknesses in data confidentiality, integrity, and especially system availability frequently interrupt instructional activities, particularly practice-based learning dependent on digital laboratories and assessment tools. Disruptions are often amplified by misalignment between technical infrastructure, user practices, and institutional governance, with institutions lacking governance capacity and user training facing higher risks of learning interruption. Although technical and administrative mitigation strategies exist, they are often implemented without sufficient alignment to pedagogical needs. The study concludes that digital access security should be treated not merely as a technical concern but as a prerequisite for equitable and resilient vocational learning, calling for integrated socio-technical and pedagogically informed security strategies.

References

Abduhari, E. S., Shaik, T. C., Adidul, A. B., Ladja, J. H., Saliddin, E. S., Adin, A. J., Rumbahali, F. A., Sali, A. B., Jemser, J. M., & Tahil, S. K. (2025). Access control mechanisms and their role in preventing unauthorized data Access: A comparative analysis of RBAC, MFA, and strong passwords. Natural Sciences Engineering and Technology Journal, 5(1), 418–430. https://doi.org/10.37275/nasetjournal.v5i1.62.

Aboobaker, N., & Abdulkhader, Z. (2021). Digital learning orientation and innovative behavior in the higher education sector: Effects of organizational learning culture and readiness for change. International Journal of Educational Management, ahead-of-print. https://doi.org/10.1108/IJEM-09-2019-0345

Acheampong, R., Balan, T. C., Popovici, D.-M., Tuyishime, E., Rekeraho, A., & Voinea, G. D. (2025). Balancing usability, user experience, security, and privacy in XR systems: A multidimensional approach. International Journal of Information Security, 24(3), 112. https://doi.org/10.1007/s10207-025-01025-z

Ahmed, K. I., Tahir, M., Lau, S. L., Habaebi, M. H., Ahad, A., & Pires, I. M. (2024). Dataset for authentication and authorization using physical layer properties in indoor environment. Data in Brief, 55. Scopus. https://doi.org/10.1016/j.dib.2024.110589

Al-Husari, F., Nakov, O., & Nakov, P. (2025). Multi-factor authentication fatigue: A growing concern in user experience and security. 2025 60th International Scientific Conference on Information, Communication and Energy Systems and Technologies (ICEST), 1–4. https://doi.org/10.1109/ICEST66328.2025.11098219

Ali, M. G. (2025). Cybersecurity governance and policy development in higher education institutions: A strategic framework for resilience and compliance. In Online Submission. https://eric.ed.gov/?id=ED675147

Alrobaian, S., Alshahrani, S., & Almaleh, A. (2023). Cybersecurity awareness assessment among trainees of the technical and vocational training corporation. Big Data and Cognitive Computing, 7(2), Article 2. https://doi.org/10.3390/bdcc7020073

Alsirhani, A., Ezz, M., & Mostafa, A. M. (2022). Advanced authentication mechanisms for identity and access management in Cloud computing. Computer Systems Science and Engineering, 43(3), 967–984. Scopus. https://doi.org/10.32604/csse.2022.024854

Al-Slais, Y., & Elmedany, W. (2022). User-centric adaptive password policies to combat password fatigue. International Arab Journal of Information Technology, 19(1), 55–62. Scopus. https://doi.org/10.34028/iajit/19/1/7

Arina, A., & Anatolie, A. (2021). Cybersecurity threat analysis in higher education institutions as a result of distance learning. International Journal of Scientific & Technology Research, 10(03).

Bhandari, B. (2025). Cybersecurity awareness amongst university students: Legal remedies and policies to mitigate risks. Unity Journal, 6(1), 120–135. https://doi.org/10.3126/unityj.v6i1.75557

Bhawna, Gupta, P., & Rai, P. (2025). Can blockchain revolutionize educational practices? An in-depth analysis of applications and challenges. Sustainable Futures, 10, 101171. https://doi.org/10.1016/j.sftr.2025.101171

Bradatsch, L., Miroshkin, O., & Kargl, F. (2023). ZTSFC: A service function chaining-enabled zero trust architecture. IEEE Access, 11, 125307–125327. Scopus. https://doi.org/10.1109/ACCESS.2023.3330706

Braun, V., & Clarke, V. (2006). Using thematic analysis in psychology. Qualitative Research in Psychology, 3(2), 77–101. https://doi.org/10.1191/1478088706qp063oa

Cahyanto, I., Madihah, H., Budiarso, I., Sutrisno, A., & Hidayat, T. (2024). Effectiveness of multifactor authentication technology for protecting student privacy: A systematic literature review. Edum Journal, 7(2), 253–269. https://doi.org/10.31943/edumjournal.v7i2.286

Candido, V., Raemy, P., Amenduni, F., & Cattaneo, A. (2023). Could vocational education benefit from augmented reality and hypervideo technologies? An exploratory interview study. International Journal for Research in Vocational Education and Training, 10(2), 138–167. https://doi.org/10.13152/IJRVET.10.2.1

Carroll, C. (2021). Security fatigue and its effects on perceived password strength among university students. Honors Theses. https://scholar.utc.edu/honors-theses/290

Coombs, C., Hislop, D., Taneva, S. K., & Barnard, S. (2020). The strategic impacts of Intelligent automation for knowledge and service work: An interdisciplinary review. The Journal of Strategic Information Systems, 2020 Review Issue, 29(4), 101600. https://doi.org/10.1016/j.jsis.2020.101600

Coopamootoo, K. P., Gross, T., & Pratama, M. F. R. (2017). An empirical investigation of security fatigue: The case of password choice after solving a {CAPTCHA}. The LASER Workshop: Learning from Authoritative Security Experiment Results (LASER 2017), 39–48.

Coverdale, A., Lewthwaite, S., & Horton, S. (2024). Digital accessibility education in context: Expert perspectives on building capacity in academia and the workplace. ACM Trans. Access. Comput., 17(2), 10:1-10:21. https://doi.org/10.1145/3649508

Davies, A., Donald, B., & Gray, M. (2023). The power of platforms—Precarity and place. Cambridge

Journal of Regions, Economy and Society, 16(2), 245–256. https://doi.org/10.1093/cjres/rsad011

du Plooy, E., Casteleijn, D., & Franzsen, D. (2024). Personalized adaptive learning in higher education: A scoping review of key characteristics and impact on academic performance and engagement. Heliyon, 10(21), e39630. https://doi.org/10.1016/j.heliyon.2024.e39630

Educause. (2025). Higher education cybersecurity: Challenges, choices, and the case for training. Educause Review. https://er.educause.edu/articles/sponsored/2025/7/higher-educationcybersecurity-challenges-choices-and-the-case-for-training

Eisenbart, M. (2023). Boundary crossing within hybrid learning environments in vocational education in the northern netherlands [B]. https://campus-fryslan.studenttheses.ub.rug.nl/287/

Ellis, D. (2025). Technology education teacher professional learning: Enabling the future. https://doi.org/10.25918/thesis.519

Fadli, R., Surjono, H. D., Sari, R. C., Hidayah, Y., & Eliza, F. (2024). Assessing cybersecurity awareness among vocational students in office administration. International Journal of Safety and Security Engineering, 14(4), 1115–1123. Scopus. https://doi.org/10.18280/ijsse.140410

Fecke, M., Fehr, A., Schlütz, D., & Zillich, A. F. (2022). The ethics of gatekeeping: How guarding access influences digital child and youth research. Media and Communication, Article, 10(1), 361–370. https://doi.org/https://doi.org/10.17645/mac.v10i1.4756

Gamage, I., Malik, M., Andargoli, A., & Chavez Clavijo, R. (2025). Theorizing lean as a sociotechnical system: Examining the reciprocal interactions between lean social and technical subsystems.

IEEE Transactions on Engineering Management, 72, 2456–2472. https://doi.org/10.1109/TEM.2025.3569876

Ghosh, L., & Ravichandran, R. (2024). Emerging technologies in vocational education and training. Journal of Digital Learning and Education, 4(1), 41–49. https://doi.org/10.52562/jdle.v4i1.975

Gruenhagen, J. H., Sinclair, P. M., Carroll, J.-A., Baker, P. R. A., Wilson, A., & Demant, D. (2024). The rapid rise of generative AI and its implications for academic integrity: Students’ perceptions and use of chatbots for assistance with assessments. Computers and Education: Artificial Intelligence, 7, 100273. https://doi.org/10.1016/j.caeai.2024.100273

Haryadi, E., Karim, A., & Salahuddin, L. (2023). Socio-technical perspective in determining the factors and components for minimizing cybersecurity threat. TEM Journal, 12(3), 1825–1837. Scopus. https://doi.org/10.18421/TEM123-66

Hernández-Serrano, M. J., Cullen, J., Jones, B., & Romo, N. M. (2025). A flexible framework integrating digital and social competences in vocational education across diverse contexts. Media and Communication, Article, 13. https://doi.org/https://doi.org/10.17645/mac.8974

Ibrahim, N., Rajalakshmi, R., & Hammadeh, K. (2024). Exploration of defensive strategies, detection mechanisms, and response tactics against advanced persistent threats APTs. Nanotechnology Perceptions, 20(S4), 439–455. Scopus. https://doi.org/10.62441/nano-ntp.v20is4.33

Ika Sari, G., Winasis, S., Pratiwi, I., Wildan Nuryanto, U., & Basrowi. (2024). Strengthening digital literacy in Indonesia: Collaboration, innovation, and sustainability education. Social Sciences & Humanities Open, 101100. https://doi.org/10.1016/j.ssaho.2024.101100

ILO. (2024). Skills and lifelong learning [Advancing social justice, promoting decent work]. ILO. International Labour Organization. https://www.ilo.org/topics-and-sectors/skills-and-lifelonglearning

Iyengar, S. S., Nabavirazavi, S., Hariprasad, Y., HB, P., & Mohan, C. K. (2025). Cybersecurity Foundations: Theories, Technologies, and Applications. In S. S. Iyengar, S. Nabavirazavi, Y. Hariprasad, P. HB, & C. K. Mohan (Eds.), artificial intelligence in practice: Theory and application for cyber security and forensics (pp. 27–87). Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-89327-8_2

Jasso, J. (2025). Advancing cybersecurity awareness and training strategies. Social Science Research Network. https://doi.org/10.2139/ssrn.5244103

Kausar, S., & Laghari, A. R. (2025). Social engineering attacks in pakistan: Analyzing the weakest link in cyber security. Journal of Development and Social Sciences, 6(1), 364–374. https://doi.org/10.47205/jdss.2025(6-I)32

Khadka, K., & Ullah, A. B. (2025). Human factors in cybersecurity: An interdisciplinary review and framework proposal. International Journal of Information Security, 24(3), 119. https://doi.org/10.1007/s10207-025-01032-0

Kitchenham, B., & Brereton, P. (2013). A systematic review of systematic review process research in software engineering. Information and Software Technology, 55(12), 2049–2075. https://doi.org/10.1016/j.infsof.2013.07.010

Korchagin, S. (2025, September 22). How educational facilities across Australia can safeguard its systems from power outages. Treske Pty Limited. https://treske.com.au/blogs/treske-businessblogs/how-educational-facilities-across-australia-can-safeguard-it-systems-from-power-outages-1

LaFlair, G. T., Langenfeld, T., Baig, B., Horie, A. K., Attali, Y., & von Davier, A. A. (2022). Digital-first assessments: A security framework. Journal of Computer Assisted Learning, 38(4), 1077–1086. https://doi.org/10.1111/jcal.12665

Lallie, H. S., Thompson, A., Titis, E., & Stephens, P. (2025). Analysing cyber attacks and cyber security vulnerabilities in the university sector. Computers, 14(2), 49. https://doi.org/10.3390/computers14020049

Long, Y., Zhang, X., & Zeng, X. (2025). Application and effect analysis of virtual reality technology in vocational education practical training. Education and Information Technologies, 30(7), 9755–9786. https://doi.org/10.1007/s10639-024-13197-7

Mahmood, S., Chadhar, M., & Firmin, S. (2024). Addressing cybersecurity challenges in times of crisis: Extending the sociotechnical systems perspective. Applied Sciences (Switzerland), 14(24). Scopus. https://doi.org/10.3390/app142411610

Malik, G. (2024). Biometric authentication-risks and advancements in biometric security systems. Journal of Computer Science and Technology Studies, 6(3), 159–180. https://doi.org/10.32996/jcsts.2024.6.3.14

McKenzie, J. E., Beller, E. M., & Forbes, A. B. (2016). Introduction to systematic reviews and metaanalysis. Respirology, 21(4), 626–637. https://doi.org/10.1111/resp.12783

Mohamed, I., Hefny, H. A., & Darwish, N. R. (2024). Enhancing cybersecurity defenses: A multicriteria decision-making approach to mitre attack mitigation strategy. International Journal of Computer Networks and Communications, 16(4), 19–35. Scopus. https://doi.org/10.5121/ijcnc.2024.16402

Mohd Kassim, S. R. B., Li, S., & Arief, B. (2023). Understanding how national csirts evaluate cyber incident response tools and data: Findings from focus group discussions. Digital Threats: Research and Practice, 4(3). Scopus. https://doi.org/10.1145/3609230

Molla-Esparza, C., Gómez-Núñez, M. I., & García-García, F. J. (2025). Applications for learning analytics in the study of academic performance in higher education: A pilot-tested meta-review protocol. International Journal of Educational Research Open, 8, 100433. https://doi.org/10.1016/j.ijedro.2024.100433

Momanyi, C., Riechi, A. R., & Khatete, I. (2024). Digital skills and the use of digital platforms in the informal sector: A case study among Jua Kali artisans in Nairobi in Kenya. International Journal for Research in Vocational Education and Training, 11(1), 96–118. Scopus. https://doi.org/10.13152/IJRVET.11.1.5

Mookherji, S., Odelu, V., Prasath, R., Das, A. K., & Park, Y. (2023). Fog-based single sign-on authentication protocol for electronic healthcare applications. IEEE Internet of Things Journal, 10(12), 10983–10996. Scopus. https://doi.org/10.1109/JIOT.2023.3242903

Motamed, A. (2024). The zero trust security model and its application in organizations. Journal of Resource Management and Decision Engineering, 3(3), 21–32. https://doi.org/https://doi.org/10.61838/kman.jrmde.3.3.3

Mukherjee, M., Le, N. T., Chow, Y.-W., & Susilo, W. (2024). Strategic approaches to cybersecurity learning: a study of educational models and outcomes. Information, 15(2), 117. https://doi.org/10.3390/info15020117

Nguyen, T. D., & Adhikari, S. (2025). Bridging the gap: Enhancing bim education for sustainable design through integrated curriculum and student perception analysis. Computers, 14(11), 463. https://doi.org/10.3390/computers14110463

NIST. (2021). 2020 cybersecurity and privacy annual report. National Institute of Standards and Technology (U.S.). https://doi.org/10.6028/NIST.SP.800-214

NIST, N. I. of S. and T. (2024). The NIST cybersecurity framework (CSF) 2.0. National Institute of Standards and Technology. https://doi.org/10.6028/NIST.CSWP.29

OECD. (2023). OECD digital education outlook 2023: Towards an effective digital education ecosystem. OECD Publishing. https://doi.org/10.1787/c74f03de-en

Ojala, A.-L., Sipola, T., & Saharinen, K. (2025). Cybersecurity awareness and hygiene development in Finnish vocational education: Staff perceptions, training gaps, and diverse learning pathways. Information and Computer Security, 34(1), 66–85. https://doi.org/10.1108/ICS-12-2024-0311

Omirali, A., Kozhakhmet, K., & Zhumaliyeva, R. (2025). Digital trust in transition: Student perceptions of AI-enhanced learning for sustainable educational futures. Sustainability, 17(17), 7567. https://doi.org/10.3390/su17177567

Osazuwa, O. M. C. (2024). Confidentiality, integrity, and availability in network systems: A review of related literature. 8(12). https://doi.org/10.5281/ZENODO.10464076

Osegbue, G. C., Ohamobi, I. N., & Alordiah, C. O. (2025). Enhancing school safety and security: Developing and implementing effective protocols for a secured learning environment. African Journal of Social and Behavioural Sciences, 15(2).

Othman, N., Sarkam, N., Baharun, N., Hoon, T., Masrom, S., Faezah, N., & Abd Rahman, A. S. (2025). Enhancing teachers’ digital literacy for security: A systematic review of frameworks and analytical methods in education. International Journal of Evaluation and Research in Education (IJERE), 14, 4276. https://doi.org/10.11591/ijere.v14i6.32613

Page, M. J., McKenzie, J. E., Bossuyt, P. M., Boutron, I., Hoffmann, T. C., Mulrow, C. D., Shamseer, L., Tetzlaff, J. M., Akl, E. A., Brennan, S. E., Chou, R., Glanville, J., Grimshaw, J. M., Hróbjartsson, A., Lalu, M. M., Li, T., Loder, E. W., Mayo-Wilson, E., McDonald, S., … Moher, D. (2021). The PRISMA 2020 statement: An updated guideline for reporting systematic reviews. Systematic Reviews, 10(1), 89. https://doi.org/10.1186/s13643-021-01626-4

Penberthy, W. J. (2020). Remediation approaches for the recovery of trust after a privacy breach at an educational institution: An exploratory case study. Northcentral University ProQuest Dissertations & Theses. ProQuest. https://www.proquest.com/openview/230e94b11e706162d82a9db99069f429/1?pq-origsite=gscholar&cbl=51922&diss=y

Pigola, A., & Meirelles, F. de S. (2025). Zero trust in cybersecurity: Managing critical challenges for effective implementation. Journal of Systems and Information Technology, 27(4), 517–564. https://doi.org/10.1108/JSIT-08-2024-0326

Pittich, D., & Tenberg, R. (2020). Editorial: Hybrid learning landscapes in vocational education. Journal of Technical Education (JOTED), 8(2), 1–12. https://doi.org/10.48513/joted.v8i2.208

Pollini, A., Callari, T. C., Tedeschi, A., Ruscio, D., Save, L., Chiarugi, F., & Guerri, D. (2022). Leveraging human factors in cybersecurity: An integrated methodological approach. Cognition, Technology & Work, 24(2), 371–390. https://doi.org/10.1007/s10111-021-00683-y

Protasenko, O., & Ivashura, A. (2022). Effectiveness and safety of students’ work with digital learning ecosystems. 51(2), 337-349.

Rafiq, J. E., Namir, A., Zakrani, A., Amraouy, M., & Bennane, A. (2025). A systematic mapping study of the evolution of educational practices using disruptive digital technology. Journal of Educators Online, 22(1). Scopus. https://doi.org/10.9743/JEO.2025.22.1.19

Ragab, M., Alghamdi, B. M., Alakhtar, R., Alsobhi, H., Maghrabi, L. A., Alghamdi, G., Nooh, S., & AL-Ghamdi, A.-M. (2025). Enhancing cybersecurity in higher education institutions using optimal deep learning-based biometric verification. Alexandria Engineering Journal, 117, 340–351. Scopus. https://doi.org/10.1016/j.aej.2025.01.012

Rahmawati, S., Prestridge, S., Abdullah, A. G., & Widiaty, I. (2025). Unpacking the digital competence challenge in vocational education: A case from Indonesia. Social Sciences & Humanities Open, 12, 101803. https://doi.org/10.1016/j.ssaho.2025.101803

Raza, M., Jasim Saeed, M., Riaz, M. B., & Awais Sattar, M. (2024). Federated learning for privacypreserving

intrusion detection in software-defined networks. IEEE Access, 12, 69551–69567. Scopus. https://doi.org/10.1109/ACCESS.2024.3395997

Ren, Y., Wang, Z., Sharma, P. K., Alqahtani, F., Tolba, A., & Wang, J. (2025). Zero trust networks: Evolution and application from concept to practice. Computers, Materials and Continua, 82(2), 1593–1613. Scopus. https://doi.org/10.32604/cmc.2025.059170

Snyder, H. (2019). Literature review as a research methodology: An overview and guidelines. Journal of Business Research, 104, 333–339. https://doi.org/10.1016/j.jbusres.2019.07.039

Taherdoost, H. (2024). Towards an innovative model for cybersecurity awareness training. Information (Switzerland), 15(9). Scopus. https://doi.org/10.3390/info15090512

Tulin, K. (2024). Academic integrity in the digital age: Challenges and assurance strategies. Visnyk Taras Shevchenko National University of Kyiv. Pedagogy, 1, 73–77. Https://doi.org/10.17721/2415-3699.2024.19.12

UNESCO. (2023). Global education monitoring report 2023, Southeast Asia: Technology in education: A tool on whose terms? - UNESCO Digital Library. https://unesdoc.unesco.org/ark:/48223/pf0000387214

Vierke, I., Syarief, R., Fahmi, I., & Sailah, I. (2023). Comprehensive framework for addressing the challenges of technology-enhanced learning (TEL). International Journal of Social Science and Human Research, 6(9), 5519–5526. https://doi.org/10.47191/ijsshr/v6-i9-24

Wang, J., Fang, F., Han, G., Wang, N., & Wang, X. (2025). Joint secrecy rate achieving and authentication enhancement via tag-based encoding in chaotic UAV communication environment. IEEE Internet of Things Journal, 12(8), 9491–9507. Scopus. https://doi.org/10.1109/JIOT.2025.3529737

Yusop, M. I. M., Kamarudin, N. H., Suhaimi, N. H. S., & Hasan, M. K. (2025). Advancing passwordless authentication: a systematic review of methods, challenges, and future directions for secure user identity. IEEE Access, 13, 13919–13943. https://doi.org/10.1109/ACCESS.2025.3528960

Zangana, H., Sallow, Z., & Omar, M. (2025). The human factor in cybersecurity: Addressing the risks of insider threats. Jurnal Ilmiah Computer Science, 3, 76–85. https://doi.org/10.58602/jics.v3i2.37

Published

2026-07-31

Issue

Section

Articles