The status of information security governance within state universities in Zimbabwe
This research focused on the identification and evaluation of information security governance practices that are being implemented in Zimbabwean universities. The rapid technological change and the systems interconnectivity has paused new threats to the information sys...
Saved in:
Main Authors: | , , |
---|---|
Format: | Article |
Language: | English |
Published: |
CIS Journal
2017
|
Subjects: | |
Online Access: | http://cisjournal.org/journalofcomputing/archive/vol5no9/vol5no9_8.pdf http://hdl.handle.net/11408/1937 |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1779905260236570624 |
---|---|
author | Magomelo, Munyaradzi Mamboko, Patrick Tsokota, Theo |
author_facet | Magomelo, Munyaradzi Mamboko, Patrick Tsokota, Theo |
author_sort | Magomelo, Munyaradzi |
collection | DSpace |
description | This research focused on the identification and evaluation of information security governance practices that are being implemented in Zimbabwean universities. The rapid technological change and the systems interconnectivity has paused new threats to the information systems that can have a significant impact on the business operations of an organization making information security governance a hot topic motivating this study to be done in order to have clear picture of the current status of information security governance in the Zimbabwean universities. The research approach adopted in this
dissertation was a case study with one of the Zimbabwean state universities. A combination of self-
administered questionnaire and semi structured interviews with the university council members, executive management and IT personnel were conducted to collect data. The findings from this research provided evidence that though the management and the university council do understand the importance of information security, they do not give adequate support to the function. The results also showed that no acceptable code of best practices is being implemented. A number of ISG practices which includes risk management, strategic alignment and resource management are being implemented. The main conclusion drawn from this study was that appropriate measures should be taken to improve implementation and measure of ISG performance in Zimbabwean universities. This study recommended that the management and the university councils in Zimbabwe should give adequate support to information security governance function. |
format | Article |
id | ir-11408-1937 |
institution | My University |
language | English |
publishDate | 2017 |
publisher | CIS Journal |
record_format | dspace |
spelling | ir-11408-19372022-06-27T13:49:06Z The status of information security governance within state universities in Zimbabwe Magomelo, Munyaradzi Mamboko, Patrick Tsokota, Theo Information Security, Information Security Governance, Risk Management, Corporate Governance This research focused on the identification and evaluation of information security governance practices that are being implemented in Zimbabwean universities. The rapid technological change and the systems interconnectivity has paused new threats to the information systems that can have a significant impact on the business operations of an organization making information security governance a hot topic motivating this study to be done in order to have clear picture of the current status of information security governance in the Zimbabwean universities. The research approach adopted in this dissertation was a case study with one of the Zimbabwean state universities. A combination of self- administered questionnaire and semi structured interviews with the university council members, executive management and IT personnel were conducted to collect data. The findings from this research provided evidence that though the management and the university council do understand the importance of information security, they do not give adequate support to the function. The results also showed that no acceptable code of best practices is being implemented. A number of ISG practices which includes risk management, strategic alignment and resource management are being implemented. The main conclusion drawn from this study was that appropriate measures should be taken to improve implementation and measure of ISG performance in Zimbabwean universities. This study recommended that the management and the university councils in Zimbabwe should give adequate support to information security governance function. 2017-05-02T17:02:16Z 2017-05-02T17:02:16Z 2014 Article 2079 - 8407 http://cisjournal.org/journalofcomputing/archive/vol5no9/vol5no9_8.pdf http://hdl.handle.net/11408/1937 en Journal of Emerging Trends in Computing and Information Sciences;Vol 5, No. 8; p. 710-727 open CIS Journal |
spellingShingle | Information Security, Information Security Governance, Risk Management, Corporate Governance Magomelo, Munyaradzi Mamboko, Patrick Tsokota, Theo The status of information security governance within state universities in Zimbabwe |
title | The status of information security governance within state universities in Zimbabwe |
title_full | The status of information security governance within state universities in Zimbabwe |
title_fullStr | The status of information security governance within state universities in Zimbabwe |
title_full_unstemmed | The status of information security governance within state universities in Zimbabwe |
title_short | The status of information security governance within state universities in Zimbabwe |
title_sort | status of information security governance within state universities in zimbabwe |
topic | Information Security, Information Security Governance, Risk Management, Corporate Governance |
url | http://cisjournal.org/journalofcomputing/archive/vol5no9/vol5no9_8.pdf http://hdl.handle.net/11408/1937 |
work_keys_str_mv | AT magomelomunyaradzi thestatusofinformationsecuritygovernancewithinstateuniversitiesinzimbabwe AT mambokopatrick thestatusofinformationsecuritygovernancewithinstateuniversitiesinzimbabwe AT tsokotatheo thestatusofinformationsecuritygovernancewithinstateuniversitiesinzimbabwe AT magomelomunyaradzi statusofinformationsecuritygovernancewithinstateuniversitiesinzimbabwe AT mambokopatrick statusofinformationsecuritygovernancewithinstateuniversitiesinzimbabwe AT tsokotatheo statusofinformationsecuritygovernancewithinstateuniversitiesinzimbabwe |