CyberHER: Bridging the gender gap in cybersecurity

The CyberHER: Bridging the Gender Gap in Cybersecurity project, led by Dr Mohammad Haseeb Zafar, director of the Cybersecurity and Information Networks Centre at Cardiff Metropolitan University, UK, colleague Dr Fiona Carroll, and Dr Sumaira Johar of the Institute of Management Sciences (IMSciences), Peshawar, Pakistan, addresses the global gender gap in cybersecurity. By promoting cybersecurity awareness for women, international collaboration, and inclusive education, the project empowers women in Pakistan and the UK. By tackling barriers in STEM and championing diversity, CyberHER is sparking systemic change and redefining the role of women in technology.

Imagine a fortress under siege. The attackers are relentless, their strategies ever-evolving, and the defenders – though skilled – are incomplete. This is the reality of cybersecurity today: a field critical to global stability but operating with glaring gaps; among the most troubling is the absence of women. Globally, women comprise just a quarter of the cybersecurity workforce, a disparity echoing the barriers they face across STEM fields. The situation is even more dire in some regions of the world like Pakistan that are affected by cultural norms and systemic challenges.

In Pakistan, societal expectations often funnel women away from careers considered a male domain. STEM education – and, by extension, cybersecurity – is rarely encouraged for young girls. Role models are scarce, and opportunities to engage with this high-tech field even scarcer. The numbers tell a grim story, but the implications are even graver. Cybersecurity is not just a technical discipline but a battleground for innovation, creativity, and resilience. Without diverse perspectives, the fortress remains vulnerable.

The consequences of this disparity are far-reaching. As cyber threats become more sophisticated, the need for innovative thinking grows. Women, who often approach problem-solving from different angles than their male counterparts, can offer invaluable insights into these challenges. Diversity, therefore, is not just an ideal; it is a necessity. Yet, societal biases and systemic barriers deny them the opportunity to contribute. The imbalance exposes a vulnerability.

Research shows that teams with varied perspectives are more innovative and better equipped to solve complex problems. In cybersecurity, where adaptive thinking is paramount, the absence of women is a weakness. What, then, can be done to bridge this gap?

Transcending borders

In 2024, the British Council’s Gender Equality Partnerships programme funded CyberHER, a bold 12-month initiative spanning the UK and Pakistan. Its mission was to create inclusive pathways for women into the male-dominated world of cybersecurity. By focusing on cybersecurity awareness for women and promoting inclusive cybersecurity education, the CyberHER project forged a path for meaningful change. In May 2024, it delivered one of its most pivotal moments.

That month, the ‘Cybersecurity Awareness for Women’ event at the Institute of Management Sciences (IMSciences) in Peshawar brought the project’s ambitions to life. Students, professionals, and thought leaders gathered, blending in-person and virtual participation in a hybrid model that transcended borders. For many attending, it was a revelation – a glimpse into what collaboration across cultures and disciplines could achieve.

The day began with a presentation from Dr Mohammad Haseeb Zafar, the project’s lead and director of the Cybersecurity and Information Networks Centre at Cardiff Metropolitan University. He outlined CyberHER’s goals with vivid imagery, framing the initiative as a bridge between aspiration and action. His words set the tone for a series of talks combining inspiration and practical insight. Dr Fiona Carroll, project co-lead from Cardiff Metropolitan University, captivated the audience with her ‘Human Dimensions of Cybersecurity’ session, highlighting the interplay between user behaviour and digital safety.

The event also tackled hard truths. Advocate Mehwish Muhib Kakakhel provided a legal perspective on cybercrimes and women’s rights, offering a sobering look at the challenges faced in the digital world. Meanwhile, speakers from Women in Cyber Wales and Women in Cyber Pakistan shared their personal journeys, illustrating what perseverance could achieve. Dr Sumaira Johar, Partner Lead at IMSciences, delivered a keynote on the challenges and opportunities for women in cybersecurity. She also emphasised the importance of diversity in cybersecurity, outlining the project’s goals and roadmap. For many attendees, these stories were more than motivational; they were maps showing a way forward. They emphasised the importance of bridging gender inequality in STEM and the value of women in technology for global progress.

The ‘Cybersecurity Awareness for Women’ event raised awareness, inspired a diverse audience, and fulfilled a crucial project objective. The stories shared resonated far beyond the conference room’s walls. They highlighted not only the challenges women face but also the resilience and creativity they use to overcome them. These narratives laid the groundwork for the CyberHER project’s next steps.

A journey into possibility

That journey continued in June 2024 when CyberHER facilitated an international exchange programme. A team from Peshawar, comprising Dr Johar and students Ayesha Khattak and Mariam Durrani, travelled to Cardiff Metropolitan University. For the students, the week-long programme was more than an academic opportunity; it explored what the future could hold.

In Cardiff, they engaged with postgraduate researchers, attended expert talks, and showcased their own aspirations. One particularly impactful session, led by Dr Chaminda Hewage, Associate Dean of Research at Cardiff, delved into cutting-edge advancements in cybersecurity. Adding to the impact, Dr Johar shared insights from her current research work, inspiring a dynamic exchange of ideas on innovative research and cybersecurity practices. For the students, the exchange of perspectives was transformative. They returned to Pakistan with knowledge and a vision – a clear sense of how they could shape the future of cybersecurity in their communities.

The international exchange underscored the importance of collaboration in addressing global challenges. It demonstrated that by sharing resources, knowledge, and experiences, bridges can be built across cultural and geographical divides. The participants returned home equipped and prepared to inspire others. The focus on international collaboration in cybersecurity was a critical step in addressing these global challenges.

Reflecting on the exchange programme, Dr Zafar remarked, ‘These interactions provided invaluable global exposure, strengthened international collaboration, and promoted knowledge-sharing’. It was also a reminder that cybersecurity is a global challenge, and solutions lie in shared understanding and collaboration.

Empowering through education

Education is the bedrock of CyberHER. Recognising that empowerment begins with knowledge, the project delivered a 20-hour Cybersecurity Awareness Short Course in the autumn of 2024. The programme, taught by Dr Nisha Rawindaran, engaged 50 students from IMSciences and Women University Mardan. It was designed to inform and inspire, equipping participants with the digital skills for women to navigate the digital world confidently.

The course culminated in a celebration of learning on October 18, when students presented their projects through poster exhibitions. Faculty members, including Professor Usman Ghani, director of IMSciences, attended the event and commended the participants for their creativity and dedication. For many of these young women, this was their first step into a field they once thought inaccessible. The event, meticulously managed by Dr Johar, ended with certificates, a group photo, and a shared sense of accomplishment.

For participants, the course was a turning point. Many expressed a newfound confidence in their ability to contribute meaningfully to the field of cybersecurity. The impact of these sessions extended beyond the classroom as students began to see themselves as potential leaders in a transformative industry. By focusing on cybersecurity training programmes, CyberHER ensured these women were equipped to make meaningful contributions.

But CyberHER’s ambitions extended beyond individual milestones. One of its most significant achievements was sparking systemic change. It prompted IMSciences to explore the launch of a BSc programme in cybersecurity, ensuring that CyberHER’s progress would benefit future generations. By embedding inclusive cybersecurity education into academic frameworks, the project laid the groundwork for lasting transformation.

Overcoming challenges, amplifying impact

CyberHER’s journey wasn’t without its challenges. Cultural differences, logistical barriers, and variations in academic engagement posed hurdles. Yet, these obstacles became growth opportunities. The project’s foundation of mutual respect and open communication proved invaluable, turning potential setbacks into stepping stones.

The lessons learned from CyberHER offer a blueprint for future initiatives. They show that the right approach can dismantle even the most entrenched barriers. And as the project’s findings are shared on academic and professional platforms, including an upcoming publication in Springer’s Lecture Notes in Networks and Systems series, its impact continues to grow. This focus on diversity in cybersecurity highlights its vital role in addressing these pressing challenges.

Looking back on the challenges, Dr Zafar noted that the project’s success lay in its collaborative spirit. ‘We learned that by listening to one another and valuing each other’s perspectives, we could overcome even the most daunting obstacles’, he said.

CyberHER’s legacy is already evident. It has empowered women, fostered collaboration, and sparked systemic change. But perhaps its most significant achievement is the narrative it has created – one of resilience, innovation, and hope. Dr Zafar captured this sentiment best: ‘We envision a future where women play an equal role in shaping the cybersecurity industry. Through projects like CyberHER, this vision is becoming a reality’. Dr Johar stated, ‘CyberHER empowers women to lead and innovate in cybersecurity through education, collaboration, and lasting networks.’

CyberHER may be labelled a project, but it’s more of a movement, and by bridging gender inequality in STEM, fostering cybersecurity awareness for women, and championing diversity in cybersecurity, its story is far from over.

As for the fortress under siege, its garrison is now strengthened, more comprehensive and resolute.