An Exploratory Study on Information Security Vulnerabilities in Higher Education: Case of University of Vocational Technology, Sri Lanka

H. A. Seneviratne, M. Thenabadu and W.M.G.K. Wijerathne
Additional contact information
H. A. Seneviratne: Department of Multimedia and Web Technology, Faculty of Information Technology, University of Vocational Technology, Sri Lanka
M. Thenabadu: Department of Agriculture and Food Technology, Faculty of Industrial Technology, University of Vocational Technology, Sri Lanka
W.M.G.K. Wijerathne: TECH- CERT, Pvt Ltd.,1 st Floor Bernard Business Park, N0106, Dutugemunu St, Dehiwala Sri Lanka

International Journal of Research and Innovation in Social Science, 2022, vol. 6, issue 6, 399-403

Abstract: The study investigates the University of Vocational Technology’s Information System’s (IS) security vulnerabilities. Aim of the study is to investigate general system security vulnerabilities, staff opinion on potential vulnerabilities of the system in relation to the CIA Triad and to identify measures to address vulnerability issues. Multiple data collection methods, such as questionnaire, observation, and focus group discussion, are used in case-study approach. According to the findings, hardware and software vulnerabilities indicated the highest possible occurrence (22%) and the occurrence of emanation vulnerabilities indicated the least (2 %) under identified general vulnerabilities. Findings of staff opinion on the IS security implemented in the University information system in terms of CIA triad, revealed that, majority were dissatisfied with the confidentiality, integrity and availability factors Hence, overall IS security satisfaction among university staff was found to be inadequate. According to the results of the observations and focus group discussions the University of Vocational Technology’s information system was discovered to be highly vulnerable. The system performed poorly in all aspects of the CIA Triad, indicating that the system’s overall vulnerability is high. A number of recommendations are made based on focus group discussions to mitigate IS security vulnerabilities in the studied environment. The major recommendations are, improve information security awareness of staff, develop operator guidelines and develop and implement a successful vulnerability management programme for the University. Further, the study’s findings add to the body of knowledge of empirical studies relevant to the CIA Triad.

Date: 2022
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.rsisinternational.org/journals/ijriss/ ... -issue-6/399-403.pdf (application/pdf)
https://www.rsisinternational.org/virtual-library/ ... echnology-sri-lanka/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:bcp:journl:v:6:y:2022:i:6:p:399-403

Access Statistics for this article

International Journal of Research and Innovation in Social Science is currently edited by Dr. Nidhi Malhan

More articles in International Journal of Research and Innovation in Social Science from International Journal of Research and Innovation in Social Science (IJRISS)
Bibliographic data for series maintained by Dr. Pawan Verma ().