Information security management frameworks and strategies in higher education institutions: a systematic review

Effective information security management (ISM) practices to protect the information assets of organizations from security intrusions and attacks is imperative. In that sense, a systematic literature review of academic articles focused on ISM in higher education institutions (HEIs) is conducted. For...

Full description

Saved in:
Bibliographic Details
Published in:Annales des télécommunications 2021-04, Vol.76 (3-4), p.255-270
Main Authors: Merchan-Lima, Jorge, Astudillo-Salinas, Fabian, Tello-Oquendo, Luis, Sanchez, Franklin, Lopez-Fonseca, Gabriel, Quiroz, Dorys
Format: Article
Language:English
Subjects:
Circuits
Communications Engineering
Computer Communication Networks
Empirical analysis
Engineering
Higher education
Higher education institutions
Information and Communication
Information management
Information Systems and Communication Service
Literature reviews
Networks
R & D/Technology Policy
Security
Security management
Signal,Image and Speech Processing
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Effective information security management (ISM) practices to protect the information assets of organizations from security intrusions and attacks is imperative. In that sense, a systematic literature review of academic articles focused on ISM in higher education institutions (HEIs) is conducted. For this purpose, an empirical study was performed. Studies carried out from 2012 onward reporting results from HEIs data that perform the ISM through various means, such as a set of framework functions, implementation phases, infrastructure services, and securities to their assets, have been explored. The articles found were then analyzed following a methodological procedure consisting of a systematic mapping study with their research questions, inclusion and exclusion criteria, selection of digital libraries, and analysis of the respective search strings. A set of competencies, resources, directives, and strategies that contribute to designing and to developing an ISM framework (ISMF) for HEIs is identified based on standards such as ISO 27000, COBIT, ITIL, NIST, and EDUCAUSE. This study introduces a strategic reference that guides HEIs on the development of an ISMF and provides recommendations that should be considered for its implementation in an era of ever-evolving security threats.
ISSN:0003-4347
1958-9395
DOI:10.1007/s12243-020-00783-2