2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia

Bibliographic Details
Format: General Document
_version_ 1860798058160193536
building INTELEK Repository
collection Online Access
collectionurl https://intelek.unisza.edu.my/intelek/pages/search.php?search=!collection3
copyright Copyright©PWB2025
country Malaysia
date 2024-07-30
format General Document
id 15686
institution UniSZA
internalnotes Sila masukkan subject wajib Dissertations, Academic. Terima kasih...
originalfilename REVISITING INFORMATION SECURITY RISK MANAGEMENT FRAMEWORK APPLIED BY PUBLIC UNIVERSITIES IN MALAYSIA (PHD_2024).pdf
person Balla Moussa Dioubate
recordtype oai_dc
resourceurl https://intelek.unisza.edu.my/intelek/pages/view.php?ref=15686
sourcemedia Server storage
Scanned document
spelling 15686 https://intelek.unisza.edu.my/intelek/pages/view.php?ref=15686 https://intelek.unisza.edu.my/intelek/pages/search.php?search=!collection3 General Document Malaysia Library Staff (Top Management) Library Staff (Management) Library Staff (Support) Terengganu Faculty of Business and Management English application/pdf 1.5 Malaysia Server storage Scanned document Universiti Sultan Zainal Abidin UniSZA Private Access Universiti Sultan Zainal Abidin SAMBox 3.0.10; modified using iTextSharp™ 5.5.10 ©2000-2016 iText Group NV (AGPL-version) Copyright©PWB2025 278 2024-07-30 REVISITING INFORMATION SECURITY RISK MANAGEMENT FRAMEWORK APPLIED BY PUBLIC UNIVERSITIES IN MALAYSIA (PHD_2024).pdf Balla Moussa Dioubate Revisiting Information Security Risk Management Framework Applied Public Universities 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia The increasing reliance on information and communication technology in Malaysian Higher Education Institutions (HEIs) has spurred an increased demand for effective information security risk management practices. However, the surge in information security threats has amplified the need for robust risk management in these institutions, prompting a comprehensive evaluation of vulnerabilities and the development of a tailored risk management process. This research seeks to identify the current information security risk management framework in Malaysian higher education institutions, scrutinize its impact on university performance, and propose an updated framework. Utilizing a qualitative multiple-case study design, the study conducted semi-structured interviews with twelve information security risk management administrators from ten public universities in Malaysia. Additionally, a focus group discussion was conducted with thirteen experts from higher education institutions and industries. Employing Nvivo 12 software, gathered information was transcribed, autocoded, and subjected to thematic analysis, revealing the ISO 27001:2013 international standard as the predominant framework. The findings suggest implications for enhancing data security, preserving university reputations, and improving decisionmaking communication in Malaysian higher education institutions. This study demonstrates that the framework not only secures university data but also significantly contributes to maintaining the university's excellent ranking. Furthermore, the research proposes an updated framework based on existing models and expert opinions to simplify the utilization of the Information Security Risk Management (ISRM) framework in Malaysian public universities. Serving as a pivotal point for the administration of higher education institutions, this updated framework contributes to increased data security, reduces the likelihood of information security threats damaging university reputations and economic profitability. It enhances information security risk governance for better decision-making at operational and strategic levels. Information security Risk management Universities and colleges Computer networks Educational technology Dissertations, Academic Sila masukkan subject wajib Dissertations, Academic. Terima kasih... Thesis
spellingShingle 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia
state Terengganu
subject Information security
Risk management
Universities and colleges
Computer networks
Educational technology
Dissertations, Academic
summary The increasing reliance on information and communication technology in Malaysian Higher Education Institutions (HEIs) has spurred an increased demand for effective information security risk management practices. However, the surge in information security threats has amplified the need for robust risk management in these institutions, prompting a comprehensive evaluation of vulnerabilities and the development of a tailored risk management process. This research seeks to identify the current information security risk management framework in Malaysian higher education institutions, scrutinize its impact on university performance, and propose an updated framework. Utilizing a qualitative multiple-case study design, the study conducted semi-structured interviews with twelve information security risk management administrators from ten public universities in Malaysia. Additionally, a focus group discussion was conducted with thirteen experts from higher education institutions and industries. Employing Nvivo 12 software, gathered information was transcribed, autocoded, and subjected to thematic analysis, revealing the ISO 27001:2013 international standard as the predominant framework. The findings suggest implications for enhancing data security, preserving university reputations, and improving decisionmaking communication in Malaysian higher education institutions. This study demonstrates that the framework not only secures university data but also significantly contributes to maintaining the university's excellent ranking. Furthermore, the research proposes an updated framework based on existing models and expert opinions to simplify the utilization of the Information Security Risk Management (ISRM) framework in Malaysian public universities. Serving as a pivotal point for the administration of higher education institutions, this updated framework contributes to increased data security, reduces the likelihood of information security threats damaging university reputations and economic profitability. It enhances information security risk governance for better decision-making at operational and strategic levels.
title 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia
title_full 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia
title_fullStr 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia
title_full_unstemmed 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia
title_short 2024_Revisiting Information Security Risk Management Framework Applied by Public Universities in Malaysia
title_sort 2024_revisiting information security risk management framework applied by public universities in malaysia