We are thrilled to share that Constancio Paranal III successfully passed his dissertation proposal defense today and is now ABD (All But Dissertation)! The committee commended his work as both timely and important, noting that Constancio is exceptionally well positioned to carry the project forward. Congratulations, Constancio!
Title: Cybersecurity Readiness in Disadvantaged Micro Businesses in Hawai‘i: A Sociotechnical and Community-Centered Approach
Abstract: Microbusinesses, those with fewer than ten employees, represent the foundation of Hawai‘i’s local economy, yet they remain highly vulnerable to cyber threats. Existing cybersecurity research and frameworks primarily target small and medium-sized enterprises (SMEs), overlooking the unique needs and barriers faced by disadvantaged and immigrant-owned microbusinesses. These businesses often operate with limited financial resources, varying levels of digital literacy, and linguistic and cultural barriers that constrain access to cybersecurity education and support. Consequently, traditional frameworks such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework are misaligned with the lived realities of these entrepreneurs. This misalignment perpetuates inequity, weakens local digital resilience, and widens the digital divide. This study examines the cybersecurity readiness, challenges, and support experiences of disadvantaged microbusinesses in Hawai‘i through the lens of Sociotechnical Systems Theory (Trist & Bamforth, 1951) and Community Resilience Theory (Heeks & Ospina, 2019). Integrating these frameworks allows for a multidimensional understanding of how technical, social, and organizational factors intersect to shape cybersecurity behavior and capacity. The study employs a qualitative case study design (Yin, 2018), using semi-structured interviews, surveys, document analysis, and participatory co-design workshops to capture diverse perspectives from immigrant microbusiness owners and cybersecurity service providers. The ETHICS framework (Leitch & Warren, 2010) and Resilience Activation Framework (Abramson et al., 2015) guide data collection and analysis to ensure inclusion, fairness, and contextual validity. Through thematic and participatory analysis (Braun & Clarke, 2006; Quayyum, 2025), the study identifies patterns in risk perception, trust, digital literacy, and service accessibility. It also co-develops a Community-Informed Cybersecurity Readiness Model, which integrates sociotechnical and resilience principles into a culturally grounded, community-centered approach to cybersecurity. The findings are expected to provide both theoretical and practical contributions: expanding the application of sociotechnical and resilience theories to marginalized entrepreneurial contexts, and informing policymakers, nonprofits, and public agencies on designing equitable, culturally responsive cybersecurity programs. This research reframes cybersecurity not merely as a technical concern but as a matter of social justice, community trust, and economic survival, advocating for an inclusive digital future in which all communities have the capacity to protect and sustain their livelihoods.
Committee:
Scott Robertson, Chair
Rich Gazan
Min Sun Kim
Colin Moore
Jerome Agrusa, University Representative