The objective of this research was to propose a conceptual cybersecurity framework aimed at guiding developers in generating and implementing technological solutions for Edge Computing and Internet of Things (IoT) environments. The framework integrates NIST standards and SecDevOps practices, and was developed based on an extensive literature review, synthesizing evidence-based knowledge to offer a comprehensive perspective on actions necessary to address cybersecurity challenges in these environments. The core element of the framework, Govern, led to four primary components: Identity, Protect, Detect, and Respond and Recover. Each component outlines specific actions for identifying cybersecurity vulnerabilities, implementing strategies, and prioritizing privacy and integrity requirements. In order to establish a solid theoretical foundation of the proposal, the framework was conceptually validated through a qualitative method for collecting feedback from a panel of 35 experts from industry, government, and academia. Evaluators confirmed the framework’s relevance, highlighting its integration of NIST standards and SecDevOps practices. This combination is regarded as offering a modular and effective approach for aligning cybersecurity practices with governance principles, addressing cybersecurity challenges, enhancing compliance readiness, supporting secure development, and fostering resilient architectures in IoT and Edge Computing environments. The findings of this evaluation are perceived as promising, since the proposal is considered potentially beneficial to the field of cybersecurity by providing a structured practical framework that could serve as a foundational tool for strengthening security practices in Edge Computing and IoT environments.
The objective of this paper is to propose a set of guidelines to establish an office of Student Accessibility Services (SAS) in Higher Education Institutions (HEIs). The proposed guidelines help to integrate disjointed knowledge to facilitate its interpretation and implementation during deployment of basic support services in favor of students with disability. These guidelines can help to mitigate complexity in providing SAS for the first time in HEIs. These guidelines cover both the design and implementation of an office of SAS and its management. Knowledge was found through a multivocal literature review (MLR), which allowed to capture not only academic approaches but also vantage points and experiences from practice. Key concepts and aspects were organized into eight components (five related to the design and implementation, and three associated with the management context). An expert appraisal method was used as a proof of concept, which complemented a previously performed preliminary implementation example. Obtained results demonstrated the pertinence of the conceptual proposal and confirmed guidelines capability for full implementation in a real-world scenario.