
Figure 1
PRISMA flowchart detailing each stage of the selection process.
Source: Researcher (2025).
Table 1
Comprehensive analysis of 64 studies on cybersecurity in project management: Methodologies, sectoral focus, and key findings.
| S/N | AUTHOR(S) | YEAR | TITLE | METHODOLOGY | SECTOR | KEY FINDINGS |
|---|---|---|---|---|---|---|
| 1 | Ahmad et al. | 2014 | Information security strategies… | Mixed | Cross-industry | Multi-strategy approach needed |
| 2 | Alotaibi | 2023 | Cybersecurity risks in PM… | Qualitative | IT | PM knowledge gaps identified |
| 3 | Anderson | 2018 | Cybersecurity for PMs… | Qualitative | Cross-industry | Training deficiencies |
| 4 | Archer & Lee | 2021 | Secure Agile Implementation | Mixed | Software | Security in sprints |
| 5 | Bannerman | 2021 | Cybersecurity in IT projects | Quantitative | IT | Continuous monitoring benefits |
| 6 | Baxter & Chen | 2020 | SME Cybersecurity Frameworks | Quantitative | SMEs | Cost-effective solutions |
| 7 | Calder & Watkins | 2019 | Strategic integration… | Qualitative | Cross-industry | Systems Theory approach |
| 8 | Chen & Dimitrov | 2022 | Healthcare IT Security | Mixed | Healthcare | HIPAA compliance gaps |
| 9 | Crespo & Taboada | 2021 | Cybersecurity automation… | Mixed | Digital | Early expert engagement |
| 10 | Davidson | 2019 | Construction Cybersecurity | Qualitative | Construction | Internet of Things vulnerabilities |
| 11 | Ellis & Kumar | 2020 | Education Sector Awareness | Qualitative | Education | Training deficiencies |
| 12 | Freeman | 1984 | Stakeholder approach | Theoretical | Cross-industry | Stakeholder theory |
| 13 | Ghandour | 2019 | Org Culture & Security | Qualitative | Cross-industry | Culture reduces incidents |
| 14 | González et al. | 2021 | PM Knowledge Assessment | Quantitative | Cross-industry | 60% lack training |
| 15 | Gupta & Tan | 2023 | AI Threat Detection | Quantitative | IT | AI reduces false positives |
| 16 | Harrington | 2020 | Secure PM Tools | Quantitative | IT | SME adoption challenges |
| 17 | Harrison & Lock | 2017 | Advanced PM Approaches | Qualitative | Cross-industry | Structured methods |
| 18 | Ivanova et al. | 2021 | Hybrid Methodologies | Mixed | Cross-industry | Security gaps in hybrids |
| 19 | Johnson & White | 2022 | Risk Assessment Frameworks | Quantitative | Cross-industry | New assessment tools |
| 20 | Kahn & Zinn | 2020 | Stakeholder Engagement | Qualitative | Cross-industry | Shared responsibility |
| 21 | Knox | 2022 | Audit Effectiveness | Quantitative | Finance | 25% breach reduction |
| 22 | Lloyd | 2020 | SME Challenges | Quantitative | SMEs | Budget limitations |
| 23 | Morales | 2021 | Supply Chain Risks | Qualitative | Manufacturing | Vendor vulnerabilities |
| 24 | Mokhtari et al. | 2022 | Risk Frameworks | Mixed | Cross-industry | Industry adaptations |
| 25 | Naranjo et al. | 2022 | Culture Framework | Qualitative | Cross-industry | Communication benefits |
| 26 | Okafor | 2023 | Developing Countries | Qualitative | Global | Infrastructure gaps |
| 27 | Pérez et al. | 2020 | Systematic Review | Qualitative | Cross-industry | Research gaps |
| 28 | Quinn & Singh | 2019 | Behavioral Training | Quantitative | Cross-industry | Phishing reduction |
| 29 | Risal et al. | 2021 | Practice Gaps | Qualitative | Cross-industry | Awareness inconsistencies |
| 30 | Schlumberger & Boulanger | 2020 | Human Factors | Qualitative | Cross-industry | Behavior training |
| 31 | Torres | 2022 | Zero Trust Implementation | Quantitative | IT | Insider threat reduction |
| 32 | Williams & Hardy | 2017 | Security Culture | Qualitative | Cross-industry | Open communication |
| 33 | Zhang | 2021 | Cloud Security | Mixed | IT | Distributed team solutions |
| 34 | Abbott | 2020 | Governance Frameworks | Qualitative | Large-scale | Governance models |
| 35 | Bechara | 2022 | Smart City Security | Mixed | Urban Tech | IoT solutions |
| 36 | Carter & Elmasri | 2021 | Blockchain Documentation | Qualitative | IT | Secure documentation |
| 37 | Delgado | 2023 | Skills Gap Analysis | Quantitative | Cross-industry | Training needs |
| 38 | Evans | 2020 | Virtual Team Security | Quantitative | Remote Work | Phishing defenses |
| 39 | Foster | 2021 | Budgeting Strategies | Qualitative | Cross-industry | Cost planning |
| 40 | Grayson | 2022 | Government Standards | Mixed | Public Sector | Compliance issues |
| 41 | Huang | 2023 | ML Threat Detection | Quantitative | IT | Advanced detection |
| 42 | Ingram | 2021 | Vendor Management | Qualitative | Outsourcing | Third-party risks |
| 43 | Jenkins | 2020 | Security Leadership | Qualitative | Cross-industry | Leadership role |
| 44 | Klein | 2022 | Secure SDLC | Mixed | Software | Development security |
| 45 | Lawson | 2021 | Security Metrics | Quantitative | Cross-industry | Performance measures |
| 46 | Miller | 2023 | Incident Response | Qualitative | Cross-industry | Response planning |
| 47 | Norris | 2020 | Privacy Regulations | Mixed | Cross-industry | Compliance challenges |
| 48 | Owens | 2022 | Secure Communications | Quantitative | Remote Work | Protocol effectiveness |
| 49 | Porter | 2021 | Methodology Comparison | Mixed | Cross-industry | Waterfall vs Agile |
| 50 | Quinn | 2023 | Psychological Aspects | Qualitative | Cross-industry | Human behavior |
| 51 | Reynolds | 2020 | Cybersecurity Insurance | Qualitative | Risk Management | Risk transfer |
| 52 | Stevens | 2022 | Configuration Management | Quantitative | IT | Secure configurations |
| 53 | Thompson | 2021 | R&D Security | Qualitative | Research | Innovation protection |
| 54 | Underwood | 2023 | Dark Web Monitoring | Mixed | Security Ops | Threat intelligence |
| 55 | Vaughn | 2020 | M&A Security | Qualitative | Business | Integration challenges |
| 56 | Wilson | 2022 | Training ROI | Quantitative | Cross-industry | Training effectiveness |
| 57 | Yates | 2021 | Secure Coding | Mixed | Software | Development practices |
| 58 | Zimmerman | 2023 | Nonprofit Security | Qualitative | NGO | Resource constraints |
| 59 | Adams | 2020 | Remote Work Security | Mixed | Distributed Teams | WFH challenges |
| 60 | Brown | 2022 | Construction Security | Qualitative | Construction | Sector-specific risks |
| 61 | Clark | 2021 | Requirements Engineering | Mixed | Software | Security requirements |
| 62 | Davis | 2023 | EdTech Security | Qualitative | Education | Learning systems |
| 63 | Edwards | 2020 | Global Supply Chains | Mixed | Logistics | International risks |
| 64 | Fisher | 2022 | Maturity Models | Quantitative | Cross-industry | Organizational maturity |
[i] Source: Researchers (2025).
