• Human-centric cybersecurity education emphasizes that effectiveness hinges on learners' behaviors, preferences, and mental models, guiding the design of awareness delivery and training that align with real-world practices and usability constraints [7], [3], [10], [9], [19].

• Core concepts and taxonomy-driven curricula standardize cybersecurity education across programs, leveraging Delphi-derived core topics and Bloom's/Webb's taxonomies to map competencies, assessment, and topic coverage [2], [4], [8].

• Policy frameworks and workforce definitions formalize roles, competencies, and protections, guiding education and practice through the NICE framework, NIST Cybersecurity Framework, and public-good framing in governance discourse [15], [11], [13], [12], [20].

• Threat representations and discourse analysis show how political and social narratives shape risk perception, policy priorities, and security strategies, illustrating the sociotechnical construction of cyber risk [6], [12].

• Engineering-focused reviews synthesize ICS/industrial infrastructure cybersecurity challenges and resilience, highlighting risk management, protection, and system-wide resilience through taxonomy and standards framing [17], [18], [11].