2026 IJRSE – Volume 15 Issue 22
Available Online: 31 October 2026
Author/s:
Maniago, Angel May
Holy Angel University, Philippines (angelmay.psm@gmail.com)
Abstract:
The increasing integration of digital technologies into teaching, learning, and educational administration has heightened the importance of cybersecurity risk management in educational institutions. As schools and universities rely on various operating systems to support digital learning environments, understanding platform-specific security vulnerabilities and protection mechanisms is essential for ensuring information security, educational continuity, and the protection of sensitive institutional data. This study compared the endpoint security risks of Apple macOS (versions 13 and 14) and Microsoft Windows (versions 10 and 11), using Philippine small and medium-sized enterprises as the original organizational context and examining the implications for educational technology governance. Guided by the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) 2.0, the NIST Risk Management Framework, and the Confidentiality, Integrity, and Availability (CIA) Triad, the study employed a two-strand quantitative comparative design. The first strand examined Common Vulnerabilities and Exposures (CVE) and Known Exploited Vulnerabilities (KEV) records published between June 2019 and December 2024, while the second evaluated native security controls using a 106-item CSF 2.0 alignment rubric. Findings indicated that Windows exhibited higher average vulnerability severity (M = 7.36) than macOS (M = 6.25) and a higher proportion of confirmed exploited vulnerabilities (3.65% versus 0.98%). Although Windows demonstrated slightly stronger security control alignment (.4747 versus .4281), its calculated Residual Risk Score remained higher (.01409 versus .00351). These findings highlight the importance of evaluating cybersecurity through multiple indicators rather than relying solely on operating system reputation or built-in security features. For educational institutions, the results suggest the need for systematic device management, timely software updates, cybersecurity awareness, and clearly established institutional security policies. The study contributes a comparative framework that may inform cybersecurity education, responsible technology use, and evidence-informed digital security governance in schools and universities.
Keywords: cybersecurity education, digital learning environments, endpoint security, educational technology governance, macOS, Windows, cybersecurity risk management, digital safety
DOI: https://doi.org/10.5861/ijrse.2026.26441
Cite this article:
Maniago, A. M. (2026). Comparative endpoint risk management of macOS and Windows: Evidence from Philippine SMEs and implications for educational technology governance. International Journal of Research Studies in Education, 15(22), 237-253. https://doi.org/10.5861/ijrse.2026.26441