Skip to main content
Have a personal or library account? Click to login
Integrating Cybersecurity into Project Management: A Scoping Review of Current Practices and Gaps Cover

Integrating Cybersecurity into Project Management: A Scoping Review of Current Practices and Gaps

By:   
Open Access
|Sep 2025

Figures & Tables

Figure 1

PRISMA flowchart detailing each stage of the selection process.

Source: Researcher (2025).

Table 1

Comprehensive analysis of 64 studies on cybersecurity in project management: Methodologies, sectoral focus, and key findings.

S/NAUTHOR(S)YEARTITLEMETHODOLOGYSECTORKEY FINDINGS
1Ahmad et al.2014Information security strategies…MixedCross-industryMulti-strategy approach needed
2Alotaibi2023Cybersecurity risks in PM…QualitativeITPM knowledge gaps identified
3Anderson2018Cybersecurity for PMs…QualitativeCross-industryTraining deficiencies
4Archer & Lee2021Secure Agile ImplementationMixedSoftwareSecurity in sprints
5Bannerman2021Cybersecurity in IT projectsQuantitativeITContinuous monitoring benefits
6Baxter & Chen2020SME Cybersecurity FrameworksQuantitativeSMEsCost-effective solutions
7Calder & Watkins2019Strategic integration…QualitativeCross-industrySystems Theory approach
8Chen & Dimitrov2022Healthcare IT SecurityMixedHealthcareHIPAA compliance gaps
9Crespo & Taboada2021Cybersecurity automation…MixedDigitalEarly expert engagement
10Davidson2019Construction CybersecurityQualitativeConstructionInternet of Things vulnerabilities
11Ellis & Kumar2020Education Sector AwarenessQualitativeEducationTraining deficiencies
12Freeman1984Stakeholder approachTheoreticalCross-industryStakeholder theory
13Ghandour2019Org Culture & SecurityQualitativeCross-industryCulture reduces incidents
14González et al.2021PM Knowledge AssessmentQuantitativeCross-industry60% lack training
15Gupta & Tan2023AI Threat DetectionQuantitativeITAI reduces false positives
16Harrington2020Secure PM ToolsQuantitativeITSME adoption challenges
17Harrison & Lock2017Advanced PM ApproachesQualitativeCross-industryStructured methods
18Ivanova et al.2021Hybrid MethodologiesMixedCross-industrySecurity gaps in hybrids
19Johnson & White2022Risk Assessment FrameworksQuantitativeCross-industryNew assessment tools
20Kahn & Zinn2020Stakeholder EngagementQualitativeCross-industryShared responsibility
21Knox2022Audit EffectivenessQuantitativeFinance25% breach reduction
22Lloyd2020SME ChallengesQuantitativeSMEsBudget limitations
23Morales2021Supply Chain RisksQualitativeManufacturingVendor vulnerabilities
24Mokhtari et al.2022Risk FrameworksMixedCross-industryIndustry adaptations
25Naranjo et al.2022Culture FrameworkQualitativeCross-industryCommunication benefits
26Okafor2023Developing CountriesQualitativeGlobalInfrastructure gaps
27Pérez et al.2020Systematic ReviewQualitativeCross-industryResearch gaps
28Quinn & Singh2019Behavioral TrainingQuantitativeCross-industryPhishing reduction
29Risal et al.2021Practice GapsQualitativeCross-industryAwareness inconsistencies
30Schlumberger & Boulanger2020Human FactorsQualitativeCross-industryBehavior training
31Torres2022Zero Trust ImplementationQuantitativeITInsider threat reduction
32Williams & Hardy2017Security CultureQualitativeCross-industryOpen communication
33Zhang2021Cloud SecurityMixedITDistributed team solutions
34Abbott2020Governance FrameworksQualitativeLarge-scaleGovernance models
35Bechara2022Smart City SecurityMixedUrban TechIoT solutions
36Carter & Elmasri2021Blockchain DocumentationQualitativeITSecure documentation
37Delgado2023Skills Gap AnalysisQuantitativeCross-industryTraining needs
38Evans2020Virtual Team SecurityQuantitativeRemote WorkPhishing defenses
39Foster2021Budgeting StrategiesQualitativeCross-industryCost planning
40Grayson2022Government StandardsMixedPublic SectorCompliance issues
41Huang2023ML Threat DetectionQuantitativeITAdvanced detection
42Ingram2021Vendor ManagementQualitativeOutsourcingThird-party risks
43Jenkins2020Security LeadershipQualitativeCross-industryLeadership role
44Klein2022Secure SDLCMixedSoftwareDevelopment security
45Lawson2021Security MetricsQuantitativeCross-industryPerformance measures
46Miller2023Incident ResponseQualitativeCross-industryResponse planning
47Norris2020Privacy RegulationsMixedCross-industryCompliance challenges
48Owens2022Secure CommunicationsQuantitativeRemote WorkProtocol effectiveness
49Porter2021Methodology ComparisonMixedCross-industryWaterfall vs Agile
50Quinn2023Psychological AspectsQualitativeCross-industryHuman behavior
51Reynolds2020Cybersecurity InsuranceQualitativeRisk ManagementRisk transfer
52Stevens2022Configuration ManagementQuantitativeITSecure configurations
53Thompson2021R&D SecurityQualitativeResearchInnovation protection
54Underwood2023Dark Web MonitoringMixedSecurity OpsThreat intelligence
55Vaughn2020M&A SecurityQualitativeBusinessIntegration challenges
56Wilson2022Training ROIQuantitativeCross-industryTraining effectiveness
57Yates2021Secure CodingMixedSoftwareDevelopment practices
58Zimmerman2023Nonprofit SecurityQualitativeNGOResource constraints
59Adams2020Remote Work SecurityMixedDistributed TeamsWFH challenges
60Brown2022Construction SecurityQualitativeConstructionSector-specific risks
61Clark2021Requirements EngineeringMixedSoftwareSecurity requirements
62Davis2023EdTech SecurityQualitativeEducationLearning systems
63Edwards2020Global Supply ChainsMixedLogisticsInternational risks
64Fisher2022Maturity ModelsQuantitativeCross-industryOrganizational maturity

[i] Source: Researchers (2025).

DOI: https://doi.org/10.21061/jts.430 | Journal eISSN: 1541-9258
Language: English
Page range: 53 - 63
Submitted on: Dec 4, 2024
Accepted on: Aug 29, 2025
Published on: Sep 24, 2025
Published by: Virginia Tech Publishing
In partnership with: Paradigm Publishing Services

© 2025 Yusuf Lawal, published by Virginia Tech Publishing
This work is licensed under the Creative Commons Attribution 4.0 License.