CHAPTER TWO
LITERATURE REVIEW

2.1 Introduction

For a long time, university-managements have put much investment in IT security appliances towards improving system security, (Bichanga & Obara, (2014). Despite continued investment in IT security, there is increased frequency at which security of university information systems are getting breached thus compromising productivity and security of information systems that support teaching, learning, administrative and research activities, (Vacca, 2012). Research studies indicate that to ensure better IT security management, a reliable way of determining security status need to be considered besides heavy investment in security appliances, (Mong'ira, 2011). This is supported by Broadbent (2007), …show more content…
A review of the Security practices and activities as centered on the major Information technology security elements like network security, data security, personnel, malware control, and security policies, physical security and access control would help in understanding the IT security status within the universities, (Lennon, et. al, 2003)

This review encompasses network security appliances and practices, database security- including data encryption, database application security, malware control practices, implementation of information technology security policy, students and personnel management on security of information assets, physical / perimeter security control, access control within the universities as well as provision of metrics within the information security …show more content…
According to Mohlabeng, Mokwena, & Osunmakinde, (2012), among the elements of information security to be considered in the management framework are IT policies, users, network, and the general IT infrastructure security. This suggestion concurs with Jansen, (2010) which shows that holistic framework including all major elements of IT security can offer better security management for ITsystems.

Whitson, (2003) studied the model of CIA as applied in information security management within Australian universities. The model, as the study shows, guarantees confidentiality, integrity and availability of information. However, Jansen, (2010) shows that the CIA model of information security management is inadequate as it does not factor in accountability and responsibility features and hence a better security management and measurement model for information systems ought to be