By advancing cybersecurity governance, policy compliance, and organisational accountability, Ghanaian researcher, Johnnecia Serwaa Agyemang, seeks to contribute to a safer digital future for institutions in the United States while creating opportunities for similar improvements in Ghana.
As cyberattacks, data breaches, and digital security threats continue to challenge institutions worldwide, Johnnecia Serwaa Agyemang is positioning herself to help strengthen cybersecurity governance and organisational resilience in the United States, with potential benefits extending to her home country, Ghana.
Affiliated with the Department of Cybersecurity Management at the University of Illinois Springfield, Agyemang is contributing to research addressing one of the most pressing challenges facing modern organisations: ensuring that cybersecurity policies are effectively implemented, consistently followed, and continuously improved.
Her research, titled A Cybersecurity Governance Framework for Strengthening Policy Compliance and Organizational Cybersecurity Management, examines the relationship between organisational leadership, employee accountability, cybersecurity policies, and effective security management.
For Agyemang, the importance of this research extends beyond academic discussion. It provides a foundation for helping institutions strengthen their digital security practices, protect sensitive information, and develop organisational cultures in which cybersecurity becomes a shared responsibility. The United States depends heavily on digital infrastructure to support healthcare delivery, financial transactions, government operations, education, transportation, and other essential services. Similar dependence on digital systems is growing in Ghana, making effective cybersecurity governance increasingly important. However, this growing reliance on digital systems also exposes institutions in both countries to significant cybersecurity challenges.
Organisations may invest in advanced security technologies and establish comprehensive cybersecurity policies yet continue to experience vulnerabilities because of inconsistent implementation, inadequate employee awareness, unclear responsibilities, and insufficient monitoring.
Agyemang’s research addresses these organizational weaknesses by emphasizing that cybersecurity protection requires more than technological solutions. Her work emphasizes the importance of leadership commitment, effective communication, employee training, clearly defined responsibilities, and continuous evaluation.
Through this approach, she seeks to contribute to a broader understanding of how American organizations can strengthen cybersecurity management and reduce weaknesses associated with ineffective policy compliance. The research is particularly relevant to institutions responsible for protecting confidential information, maintaining essential services, and ensuring public trust.
At the centre of Agyemang’s research is a proposed Cybersecurity Governance and Policy Compliance Framework designed to help organisations connect cybersecurity leadership with practical security implementation. The framework brings together seven interconnected components: leadership and accountability, policy development, security awareness and communication, policy implementation, compliance monitoring, corrective action, and continuous improvement.
These components provide a structured approach through which organisations can establish cybersecurity expectations, communicate responsibilities, evaluate compliance, identify weaknesses, and improve their security practices.
The framework builds upon established international cybersecurity approaches, including the National Institute of Standards and Technology Cybersecurity Framework 2.0, ISO/IEC 27001:2022, and COBIT 2019.
Its distinguishing contribution is the integration of organizational governance with the entire cybersecurity policy-compliance process.
Rather than viewing cybersecurity compliance as an individual employee obligation, the framework recognizes it as a shared organizational responsibility involving senior leadership, management, cybersecurity professionals, and employees. This approach could help American institutions develop stronger accountability systems and more consistent cybersecurity practices.
One of the potential contributions of Agyemang’s research is its applicability to sectors that depend on secure and reliable information systems.
In the United States, healthcare institutions manage sensitive patient records, financial organisations handle confidential transactions, educational institutions maintain student information, and government agencies depend on digital systems to deliver essential public services.
Weak cybersecurity governance in these environments can expose organizations to operational disruptions, financial losses, information breaches, and declining public confidence.
Agyemang’s proposed framework offers a foundation for examining how institutions can strengthen cybersecurity oversight and improve policy implementation.
For healthcare organisations, the approach could support stronger protection of patient information and more consistent adherence to security requirements.
For financial institutions, it could strengthen accountability, employee awareness, and organisational risk management. Government agencies and educational institutions could similarly benefit from clearer cybersecurity responsibilities, improved monitoring, and continuous policy evaluation.
Although the framework has not yet undergone empirical validation, it offers a research-based foundation for future organisational application and assessment.
A significant feature of Agyemang’s work is its recognition of the human and organisational dimensions of cybersecurity.
Cybersecurity incidents are not always the result of inadequate technology. They may also arise when employees misunderstand security requirements, managers fail to reinforce established policies, or organisations lack effective monitoring mechanisms.
Her research emphasizes that employees need practical cybersecurity education, appropriate resources, and clear guidance to perform their responsibilities securely.
It also highlights the importance of examining the underlying causes of policy violations rather than assuming that noncompliance always results from individual negligence.
By integrating employee awareness, organizational accountability, and leadership oversight, Agyemang’s proposed approach could help institutions develop more sustainable cybersecurity practices. This perspective is particularly valuable as organisations adopt emerging technologies and confront increasingly complex digital risks.
Although Agyemang’s research has important implications for the United States, its potential relevance extends to Ghana, where digital transformation is increasingly reshaping banking, healthcare, education, public administration, and business operations.
As Ghana continues to expand digital financial services, electronic government platforms, and information management systems, effective cybersecurity governance remains essential to protecting citizens, institutions, and national digital infrastructure.
The principles developed through Agyemang’s research could provide useful guidance for Ghanaian organisations seeking to strengthen cybersecurity policies, employee awareness, management accountability, and compliance monitoring.
The framework’s adaptability creates opportunities for future research, professional collaboration, and knowledge exchange between institutions in the United States and Ghana.
Such collaboration could help Ghanaian organisations adapt international cybersecurity governance principles to their own operational environments, technological capabilities, and regulatory requirements.
Agyemang’s work illustrates how Ghanaian researchers can contribute to addressing international technological challenges while generating knowledge that may benefit their countries of origin.
By engaging with cybersecurity governance research in the United States, she is helping advance discussions that have implications for organisational security across national boundaries.
Her proposed framework also provides opportunities for future collaboration among researchers, cybersecurity professionals, educational institutions, and organizational leaders.
These opportunities could include comparative studies, cybersecurity awareness initiatives, governance assessments, and the development of practical approaches suited to different institutional environments.
For Ghana, such knowledge exchange could support efforts to strengthen cybersecurity management capacity and promote greater institutional preparedness.
For the United States, the research offers an additional perspective on connecting organizational leadership, employee behaviour, and continuous improvement within cybersecurity governance.
Looking ahead, Agyemang’s research establishes a foundation for further investigation into how cybersecurity governance practices influence policy compliance and organisational security outcomes.
Such research would help determine how governance principles can be translated into practical improvements in digital security management.
Agyemang’s contribution reflects the growing importance of international scholarship in addressing cybersecurity challenges that transcend geographical boundaries.
As institutions in both the United States and Ghana continue to embrace digital transformation, the need for effective cybersecurity governance will become increasingly important.
Through her research, Johnnecia Serwaa Agyemang is contributing to a vision in which cybersecurity is not simply a technological responsibility, but an organisational commitment built upon leadership, accountability, education, and continuous improvement.
Her work demonstrates the potential for Ghanaian expertise to contribute to strengthening institutions in the United States while creating pathways for knowledge transfer, institutional development, and improved cybersecurity governance in Ghana.
Ultimately, her research carries a message of shared progress: a safer digital future requires not only stronger technologies but also stronger institutions, responsible leadership, and a sustained commitment to protecting the information and systems upon which modern societies depend.
BY MAGDALENE KUMI
SKIP THE QUEUE, TAP THE NEWS
Read the Ghanaian Times and The Spectator newspapers from the comfort of your device via TimesNewsPlus.
Follow our WhatsApp Channel now! https://whatsapp.com/channel/0029VbAjG7g3gvWajUAEX12Q
