A Framework for Effective Information Security Risk Management

With the universities increasingly depending on information and communication technology to execute their core operations and functionalities, their exposure to growing cyber threats is inevitable and hence unprecedented security risks. With the security risks reportedly growing day by day many universities are reported to be unable to effectively respond to or guard against these risks. The study objectively sought to determine the security requirements which were important for asset protection in the Kenyan public universities, establish currently implemented security practices, identify vulnerabilities and threats to assets, establish the risk control measures implemented, and develop an effective information security risk management framework for Kenyan public universities.