Information security awareness in higher education: An exploratory study

The research explores factors that affect information security awareness of staff, including information systems decision makers, in higher education within the context of a developing country, namely the UAE. An interpretive case-study approach is employed using multiple data gathering methods. The research reveals that factors such as conscientiousness, cultural assumptions and beliefs, and social conditions affect university staff behaviour and attitude towards work, in general, and information security awareness, in particular. A number of recommendations are provided to initiate and promote IS security awareness in the studied environment.