Zhang-Kennedy, LeahChiasson, Sonia2021-10-192021-10-192021-01-02https://doi.org/10.1145/3427920http://hdl.handle.net/10012/17647© {Leah Zhang-Kennedy, Sonia Chiasson ​| ACM} {2021}. This is the author's version of the work. It is posted here for your personal use. Not for redistribution. The definitive Version of Record was published in {ACM Computing Surveys}, https://doi.org/10.1145/3427920.We conduct a comprehensive review covering academic publications and industry products relating to tools for cybersecurity awareness and education aimed at non-expert end-users developed in the past 20 years. Through our search criteria, we identified 119 tools that we cataloged into five broad media categories. We explore current trends, assess their use of relevant instructional design principles, and review empirical evi dence of the tools’ effectiveness. From our review, we provide an evaluation checklist and suggest that a more systematic approach to the design and evaluation of cybersecurity educational tools would be beneficial.enCybersecurity educational toolscybersecurity awarenesseducationSecurity and privacySocial aspects of security and privacyUsability in security and privacyArticle