Cyber security university courses should be purpose-driven, industry-aligned: report