Abstract:

Information security remains omnipresent to the increasing concern for most organizations including those from the academic setting. Apart from technological aspect, Higher Education Institutions (HEIs) must implement and enforce proper policies, procedures, and standards in compliance with laws and regulations to safeguard and secure its assets. This research attempts to answer two research questions. First is to identify the major constructs of information security framework (ISF). Secondly, to investigate IT personnel perceptions on the existing information security policy practices. Two modes of data collection were adopted in this study; interview and survey respectively. The result from the preliminary investigation provides valuable information on ISF practices in establishing the components of the ISF. A proposed ISF specific for HEIs was designed. Then, a survey was conducted in order to investigate perceptions towards the implementation of the information security policy. This paper presents the results.