Towards Information Security Savvy Students in Institutions of Higher Learning in Africa: A Case of a University in Kenya

Whereas there is growing use of information technology (IT) within institutions of higher learning, little is known about the level of information security awareness (ISA) amongst students joining such institutions in developing countries and more specifically Africa. This study investigates ISA amongst undergraduate students in one of the universities within Nairobi in Kenya. From the study findings, it was clear that majority of the students did not possess adequate understanding of ISA. This was further affirmed by more than 60% of the students indicating not to have received any ISA training program before. We therefore submit that, there is a strong need to cultivate ISA culture amongst students joining institutions of higher learning. Cultivating this culture at the entry level will ensure that students as well as the institutions' communities at large have secure utilization of various IT resources. Furthermore, we recommend that ISA needs to be incorporated in the undergraduate curriculum to help enhance such awareness. Likewise, it would be valuable for such institutions to have ISA program as part of their wider information security strategy framework.