Abstract Purpose – The purpose of this paper is to argue that information security should be regarded as a critical cross-field outcome (CCFO). This could assist in narrowing the evident “information security gap” that currently exists in undergraduate information technology/information systems/computer science (IT/IS/CS) curricula at South African universities. Design/methodology/appro…