Exploring Libyan Higher Education Institutions Employees’ Information Security Policy Awareness
DOI:
https://doi.org/10.14738/assrj.118.17412Keywords:
Awareness, Higher Education, Information Institution, Policy SecurityAbstract
Incidents of data breach in higher education could harm students since the exposure of sensitive student data (e.g., social security numbers) could twist students into victims of identity theft and endanger their identities. Regrettably, while most of the developed countries have standard information security laws apply to higher education institutions, such laws are still in its infant stage in developing countries like Libya. However, there are established policies documented by Libyan authorities to guide employees against information security breach, yet existing higher education institutions’ information security awareness models did not investigate these policies into the awareness programs. Consequently, employees will rely on policies that can subvert the security best practice. This study aimed to explore the level of understanding of Libyan information security policies among employees of higher education institutions. The quantitative technique is applied in this research, 196 employees of Libyan higher education institutions were randomly surveyed to respond to Linker information security policy awareness questionnaire. Using SPSS statistics tools, a descriptive analysis of the data is achieved. The findings of the study revealed that employees of Libyan higher education institutions are much aware of Internet Usage and Workstation security policies.
References
Bulgurcu, B., H. Cavusoglu, and I. Benbasat, Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness. MIS Quarterly, 2010. 34: p. 523-548.
Li, L., et al., Investigating the impact of cybersecurity policy awareness on employees’ cybersecurity behavior. International Journal of Information Management, 2019. 45: p. 13-24.
Wiley, A., A. McCormac, and D. Calic, More than the individual: Examining the relationship between culture and Information Security Awareness. Computers & Security, 2020. 88: p. 101640.
McIlwraith, A., Information Security and Employee Behaviour: How to Reduce Risk Through Employee Education, Training and Awareness. 2021.
Bada, M., A.M. Sasse, and J.R. Nurse, Cyber security awareness campaigns: Why do they fail to change behaviour? arXiv preprint arXiv:1901.02672, 2019.
Hwang, I. and O. Cha, Examining technostress creators and role stress as potential threats to employees' information security compliance. Computers in Human Behavior, 2018. 81: p. 282-293.
Hina, S. and P.D.D. Dominic, Information security policies’ compliance: a perspective for higher education institutions. Journal of Computer Information Systems, 2020. 60(3): p. 201-211. 292
Höne, K. and J.H.P. Eloff, Information security policy — what do international information security standards say? Computers & Security, 2002. 21(5): p. 402-409.
Singh, A., A. Vaish, and P.K. Keserwani, Information security: Components and techniques. International Journal of Advanced Research in Computer Science and Software Engineering, 2014. 4(1).
Alhassan, M.M. and A. Adjei-Quaye, Information security in an organization. International Journal of Computer (IJC), 2017. 24(1): p. 100-116.
Chan, M., I. Woon, and A. Kankanhalli, Perceptions of Information Security in the Workplace: Linking Information Security Climate to Compliant Behavior. Journal of Information Privacy and Security, 2005. 1(3): p. 18-41.
Kruger, H., L. Drevin, and T. Steyn, A vocabulary test to assess information security awareness. Information Management & Computer Security, 2010. 18(5): p. 316-327.
Alfawaz, S., K. Nelson, and K. Mohannak. Information security culture: a behaviour compliance conceptual framework. in Proceedings of the 8th Australasian Information Security Conference (AISC 2010). 2010. University of Southern Queensland.
Lima, G., et al., Collecting the Public Perception of AI and Robot Rights. Proc. ACM Hum.-Comput. Interact., 2020. 4(CSCW2): p. Article 135.
Angraini, R.A. Alias, and Okfalisa. Affecting Factors in Information Security Policy Compliance: Combine Organisational Factors and User Habits. in Innovative Systems for Intelligent Health Informatics. 2021. Cham: Springer International Publishing.
Tamtam, A. and H. Asker, An investigation of the information security awareness and practices among third level education staff, case study in Nalut Libya. An Investigation of the Information Security Awareness and Practices among Third Level Education Staff, Case Study in Nalut Libya, 2020. 16(15): p.
Ghawail, E.A.A., S.B. Yahia, and M.A. Alrshah, Challenges of applying E-learning in the Libyan higher education system. arXiv preprint arXiv:2102.08545, 2021.
Ramadan, K., et al., An analysis of factors affecting learners’ attitudes towards the integration of e-learning into the higher education system in Libya: Case study; Misurata University. Australian Journal of Basic and Applied Sciences, 2019. 13(10): p. 55-64.
Othman, A., et al., Analysing the effectiveness of IT strategy in Libyan higher education institutes. International Journal of Digital Information and Wireless Communications (IJDIWC), 2013. 3(3): p. 114-
Salem, N. and B. Mohammadzadeh, A Study on the Integration of ICT by EFL Teachers in Libya. Eurasia Journal of Mathematics, Science and Technology Education, 2018. 14(7): p. 2787-2801.
Khando, K., et al., Enhancing employees information security awareness in private and public organisations: A systematic literature review. Computers & security, 2021. 106: p. 102267.
D'Arcy, J. and P.B. Lowry, Cognitive-affective drivers of employees' daily compliance with information security policies: A multilevel, longitudinal study. Information Systems Journal, 2019. 29(1): p. 43-69.
Moody, G.D., M. Siponen, and S. Pahnila, Toward a Unified Model of Information Security Policy Compliance. MIS Quarterly, 2018. 42(1): p. 285-A22. 293
Steinbart, P.J., et al., The influence of a good relationship between the internal audit and information security functions on information security outcomes. Accounting, Organizations and Society, 2018. 71: p.
Gharieb, M.E., Knowing the level of information security awareness in the usage of social media among female secondary school students in Eastern Makkah Al-Mukarramah-Saudi Arabia. International journal of computer science and network security: IJCSNS, 2021. 21(8): p. 360-368.
Yerby, J. and K. Floyd. Faculty and staff information security awareness and behaviors. in Journal of The Colloquium for Information Systems Security Education. 2018.
Abdallah, N., et al., Information security awareness behavior among higher education students: Case study. Journal of Theoretical and Applied Information Technology, 2020. 8(10): p. 3825-3836.
Hobbs, J., Cybersecurity awareness in higher education: a comparative analysis of faculty and staff. Issues in Information Systems, 2023. 24(1).
Schütz, A.E., K. Weber, and T. Fertig, Assessing the Information Security Awareness of University Students. 2020.
Kim, E.B., Recommendations for information security awareness training for college students. Information Management & Computer Security, 2014. 22(1): p. 115-126.
North, M.M., R. George, and S.M. North, Computer security and ethics awareness in university environments: a challenge for management of information systems, in Proceedings of the 44th annual Southeast regional conference. 2006, Association for Computing Machinery: Melbourne, Florida. p. 434–
Da Veiga, A. and J.H.P. Eloff, A framework and assessment instrument for information security culture. Computers & Security, 2010. 29(2): p. 196-207.
Nasir, A., M. Rashid, and A. Hamid. Conceptualizing and validating information security culture as a multidimensional second-order formative construct. in The Thirteenth International Multi-Conference on Computing in the Global Information Technology. 2018.
Aloul, F.A., The need for effective information security awareness. Journal of advances in information technology, 2012. 3(3): p. 176-183.
Roach, R., Ringing the alarm on campus computer security. Diverse Issues in Higher Education, 2001. 18(20): p. 50.
Steiner, C.M., M.D. Kickmeier-Rust, and D. Albert, Let’s talk ethics: Privacy and data protection framework for a learning analytics toolbox. Ethics and Privacy in Learning Analytics (# EP4LA), Poughkeepsie, NY, 2015.
Rezgui, Y. and A. Marks, Information security awareness in higher education: An exploratory study. Computers & Security, 2008. 27(7): p. 241-253.
Hadlington, L., J. Binder, and N. Stanulewicz, Exploring role of moral disengagement and counterproductive work behaviours in information security awareness. Computers in Human Behavior, 2021. 114: p. 106557.
Ishak, I., et al., Information Security Awareness and Practices In Malaysian IHLs: A Study at UNISEL. DOI, 2014. 10: p. 978-1.
Sherif, E., Information security policy: The national payment system in Libya. 2012. 294
Wang, X., Exploring Chinese college students' awareness of information security in the COVID-19 era. European Journal of Education, 2022. 5(2): p. 19-33.
Weippl, E.R. and M. Ebner. Security privacy challenges in e-learning 2.0. in E-Learn: World Conference on E-Learning in Corporate, Government, Healthcare, and Higher Education. 2008. Association for the Advancement of Computing in Education (AACE).
Abdulhadi, A.R., et al., The Impact of Risk Management on The Dimensions of Project Management Among Small and Medium Enterprises in Iraq. Advances in Social Sciences Research Journal, 2022. 9(11).
Abdulsamad, A., et al., The Importance of Entrepreneurial Orientation's Dimensions in Influencing the Organizational Performance of Food and Beverage SMEs. Advances in Social Sciences Research Journal, 2020. 7(12).
Al-Sharif, A.M., et al., The Role of Innovation Capability in the Relationship between Entrepreneurial Leadership and Innovation Performance in the SMEs Service Industry. Advances in Social Sciences Research Journal, 2023. 10(1).
Al-Zubaidi, R., et al., Sustainable Development Through Effective Project Management: The Petromasila in Yemen. Advances in Social Sciences Research Journal, 2023. 10(3).
Alghamdi, M.A.A., et al., Antecedents and Consequences of Employee Well-Being: Empirical Study on Saudi Aramco. Advances in Social Sciences Research Journal, 2021. 8(9).
Jandab, A., et al., THE INFLUENCE OF IT CAPABILITY ON IT-BASED INNOVATION: THE MEDIATING ROLE OF ORGANIZATIONAL LEARNING CAPABILITY. 2020: p. 2020.
Aldawood, H. and G. Skinner. Educating and raising awareness on cyber security social engineering: A literature review. in 2018 IEEE international conference on teaching, assessment, and learning for engineering (TALE). 2018. IEEE.
Kuppusamy, P., et al. Systematic literature review of information security compliance behaviour theories. in Journal of physics: conference series. 2020. Institute of Physics Publishing (IOP Publishing).
Mughal, A.A., Artificial Intelligence in Information Security: Exploring the Advantages, Challenges, and Future Directions. Journal of Artificial Intelligence and Machine Learning in Management, 2018. 2(1): p.
Zeng, E. and F. Roesner. Understanding and improving security and privacy in {multi-user} smart homes: A design exploration and {in-home} user study. in 28th USENIX Security Symposium (USENIX Security 19). 2019.
Abdulhadi, A.R., et al., The Impact of Internal Control on Project Management in Construction Site Among Small and Medium Enterprises in Iraq. Advances in Social Sciences Research Journal, 2023. 10(3).
Abdulsamad, A., et al., The Importance of Entrepreneurial Orientation's Dimensions in Influencing the Organizational Performance of Food and Beverage SMEs. Advances in Social Sciences Research Journal, 2020. 7: p. 81-99.
Al-Sharif, A., et al., Effects of Innovation Capability and Environmental Dynamism on the Relationship between Entrepreneurial Leadership and Innovation Performance in the SMEs Service Industry. International Journal of Academic Research in Business and Social Sciences, 2023. 13: p. 1547-1570.
Al-Zubaidi, R., et al., The Effect of Self-efficacy on Sustainable Development: The PetroMasila in Yemen. Advances in Social Sciences Research Journal, 2022. 9: p. 35-49. 295
Alghamdi, M.A.A., et al., Employee Well Being and Knowledge Sharing Behavior Among Employees of Saudi Aramco. Advances in Social Sciences Research Journal, 2021. 8(8).
Field, A., Discovering statistics using IBM SPSS statistics. 4th ed. 2013: sage. 952.
Hair, J.F., et al., Multivariate data analysis, ed. t. ed. 2010, Uppersaddle River, New Jersey: Pearson Education International.
Jandab, A., et al., IT-Based Innovation and New Product Development Performance in Yemen: The Moderating Role of Intellectual Property. International Journal of Business Society, 2019. 3(11): p. 1-8.
Asker, H. and A. Tamtam, Knowledge of information security awareness and practices for home users: Case study in Libya. ESI Preprints, 2023. 14: p. 22-22.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2024 Aisha Aissa Ali Ahmed, Hafiza Abas
This work is licensed under a Creative Commons Attribution 4.0 International License.
