Integrating Generative AI in Cybersecurity Education: Case Study Insights on Pedagogical Strategies, Critical Thinking, and Responsible AI Use

GenAI can enhance critical thinking when properly structured: The study found that when students were required to critique and refine AI-generated cybersecurity policies rather than simply accept them, they developed stronger analytical skills and better understood the gap between theoretical knowledge and real-world application.

Human oversight remains essential: While AI-assisted learning improved students' ability to evaluate security policies and assess risks, the research identified significant challenges including "AI over-reliance" and "contextual limitations of AI-generated content," underscoring that AI outputs require human judgment and verification, particularly in high-stakes fields like cybersecurity.

AI literacy varies significantly among users: The study noted "variability in AI literacy" as a key challenge, suggesting that responsible AI integration requires targeted training to help students understand both the capabilities and limitations of these tools—not all users naturally develop appropriate skepticism or evaluation skills.

Structured implementation matters more than tool availability: The two-stage approach combining tutorials (where students critiqued AI outputs) with real-world assessments (applying AI-generated content to industry standards) proved more effective than simply providing access to GenAI, indicating that how AI is integrated into education shapes whether it promotes responsible use or dependency.

Regulatory awareness and industry alignment are achievable: The framework successfully helped students recognize how AI-generated outputs must align with compliance requirements and industry standards, demonstrating that GenAI can support responsible decision-making when learning emphasizes real-world constraints and regulatory contexts.