Show the Way to Information Security Governance for Universities in Taiwan

Abstract

This study used a questionnaire survey, investigating the maturity of information security governance (ISG). The main objective is to assess the maturity, exploring the factors concerned, providing path analysis of maturity, and showing the way to ISG. Questionnaires were sent to 71 schools of CIO, and 68 returned. The effective sample return rate is 95.8%. In order to improve the maturity of ISG for universities, this study aims to look for maturity relevant factors. According to assessment Tool to explore an overall security evaluation rating approach, this study finds that schools with low rate of maturity take up 39.7%, schools with medium rate 33.8%, high 26.5%. With discriminant analysis, the maturity of ISG can distinguished in low, medium, and high rate. With correlation analysis, this study finds that 31 items have significant correlation. With analysis of variance (ANOVA), post hoc range test and ANOVA multiple comparison least significant difference (LSD) are used to confirm that there is significant differences between the items of the maturity of ISG. This study also finds the security management problems that are too much reliant on IT. Especially their maturity of ISG is lower and the items in the risk management aspect are very low.