Phishing in higher education combines technical exposure with user-level and organizational vulnerabilities, yet the literature often treats these dimensions separately. This study develops an Intelligent Human-Centric Cybersecurity Framework through a structured narrative review and thematic synthesis. Sources were drawn from Scopus, IEEE Xplore, SpringerLink, and ScienceDirect, with the main search window covering 2021–2026. The review screened 268 candidate records and retained 25 sources represented in the final synthesis. A hybrid deductive–inductive coding procedure was used to examine digital literacy, cybersecurity awareness, organizational security culture, behavioral monitoring, and adaptive response while allowing additional themes such as phishing simulation, user compliance, and security fatigue to emerge. The synthesis indicates that human capability and institutional reinforcement become more actionable when they are connected to behavioral evidence and a feedback mechanism. In the proposed framework, “intelligent” refers to the use of monitoring and analytics to support evidence-informed mitigation decisions, whereas “adaptive” refers to the adjustment of training, policy, or controls in response to observed behavior and evolving phishing patterns. The framework is conceptual rather than empirically validated; therefore, controlled phishing simulations and quantitative model testing are proposed as subsequent validation steps.
Copyrights © 2026