Evaluating information security culture in higher learning institution

Abstract

Information security culture plays the crucial role in Higher Learning Institutions, thus cultivating information security culture is a major challenge in many universities. This study aims to evaluate the impact of information security culture among public universities in Klang Valley, Malaysia and proposes the model for cultivating information security culture through three major components which are Corporate Governance, Management Support, and Employee Security Management. This particular study applied quantitative research methodology and the questionnaires have been distributed among academic and administrative staff of IT faculties in public universities in Malaysia. Three hypotheses were tested and the findings showed that they were accepted to reach three main objectives, but the relationship between corporate governance and cultivating information security culture is more stronger than the other components. The results revealed that the management should demonstrate some information security privacy and policies and encourage the staff to adhere to them. The management should also train the employees through some awareness programs to avoid any kind of threats in the future. Finally , providing information security risk assessments help Higher Learning Institutions to identify threats and minimize risks.