Investigation of sustainability of information security management system in higher education institutions

This study aims to determine the difficulties faced by public universities, where the establishment and certification of information security management systems are required, and whether the systems they establish provide sustainability as required by the standard. The difficulties encountered during the establishment and operation of the information security management system were collected through interviews with the information security team members of the universities and the questionnaires applied to the members, and results that were thought to be beneficial for the institutions were obtained. With these results, it is aimed to provide a road map to the institutions that have not started the process yet and are experiencing difficulties in the process. In the study, in addition to the interviews with the information security teams of public universities, a survey was conducted across the institutions that received the certificate and the institutions approaching the audit by completing processes such as the team, asset inventory, creation of documents and risk analysis for this purpose.The questionnaire consists of multiple-choice, fill-in-the-blank and 5-point Likert scale questions. As a result of the analysis of the answers of the participants, the categories that may pose problems in the systems were determined and the obstacles to sustainability were revealed. It has been tried to present solutions for the elimination of the identified deficiencies.