Challenges Facing Information Systems Security Management in Higher Learning Institutions: A Case Study of the Catholic University of Eastern Africa - Kenya

Abstract

Abstract-

The least secure places in the universe? A systematic literature review on information security management in higher education

“…Sociotechnical, holistic approach (Hedström, Dhillon, & Karlsson, 2010) (Loser, Nolte, Herrmann, & Te Neues, 2011) (Noghondar et al, 2012) (Okibo & Ochiche, 2014) Technical solutions (Bhilare, Ramani, & Tanwani, 2009) (Lee, Larose, & Rifon, 2008) Culture and awareness (Ngoqo & Flowerday, 2014) (North, George, & North, 2006) (Yamanoue et al, 2013) Governance (Liu et al, 2017) (Nie & Dai, 2017)…”

“…As a result of these complex dynamics, the number of reported information security accidents in HE is growing throughout the world (Chapman, 2019), with several eminent cases making headlines in recent years (Table 1) Academic research on information security management in HE is still nascent (Marks, 2007;Okibo & Ochiche, 2014). At the same time, as demonstrated by prior research (Doherty, Anastasakis, & Fulford, 2009), information security in universities differs from other organisations, which renders information security management in HE a research domain per se.…”

A Secure Model for Storage and Dissemination of Examination Results: A Case Study of Zambia Technical Education Vocational and Entrepreneurship Training Authority

“…Institutions of higher learning retain sensitive data making them highly attractive targets for cybercrime (Verizon, 2017). Security risks on information systems in higher learning institutions are not theoretical, as some incidents have revealed; ranging from theft of information, unauthorised disclosure, unauthorised alteration of information, corruption of data or damage to networks (Verizon, 2017;Okibo and Ochibe, 2014;Ndolo et al, 2018;Juma, 2011;Capital Campus, 2015;Mugyenyi, 2017;BBC, 2018;Perlroth, 2012). In Kenya, a catholic university of Eastern Africa system was hacked by some students and this resulted into alteration of grades, registration for courses not yet covered and grading them, clearance/alteration of their financial balances (Okibo and Ochibe, 2014).…”

“…Security risks on information systems in higher learning institutions are not theoretical, as some incidents have revealed; ranging from theft of information, unauthorised disclosure, unauthorised alteration of information, corruption of data or damage to networks (Verizon, 2017;Okibo and Ochibe, 2014;Ndolo et al, 2018;Juma, 2011;Capital Campus, 2015;Mugyenyi, 2017;BBC, 2018;Perlroth, 2012). In Kenya, a catholic university of Eastern Africa system was hacked by some students and this resulted into alteration of grades, registration for courses not yet covered and grading them, clearance/alteration of their financial balances (Okibo and Ochibe, 2014). In 2011, a report was circulated by the Permanent Secretary, Ministry of Higher Education, Science and Technology to all Vice Chancellors of Jomo Kenyatta University of Agriculture and Technology, the Catholic University of Eastern Africa, Daystar University and Maseno University about a group of university students that compromised academic and financial systems' integrity by altering grades and fee balances (Ndolo et al, 2018).…”