Enhancing Information Systems Security in Educational Organizations in KSA through proposing security model

TL;DR

This paper proposes a two-part security model for educational organizations in KSA, focusing on policy and technical measures to improve information system security amidst shared resources with commercial entities.

Contribution

It introduces a novel security model combining policy and technical auditing tailored for educational organizations in KSA.

Findings

Identified key characteristics of educational information systems.

Developed a dual-component security enhancement model.

Outlined procedures for policy enforcement and technical auditing.

Abstract

It is well known that technology utilization is not restricted for one sector than the other anymore, Educational organizations share many parts of their information systems with commercial organizations. In this paper we will try to identify the main characteristics of information systems in educational organizations, then we will propose a model of two parts to enhance the information systems security, the first part of the model will handle the policy and laws of the information system, the second part will provide a technical approach on how to audit and subsequently maintain the security of information system.