The Status Quo of Information Security from the Perspective of Information Technology Staff in Jordanian University Libraries
محتوى المقال
الملخص
This study aims to explore the status quo of information security from the perspective of information technology (IT) staff in Jordanian university libraries and to discuss the most prominent difficulties they face. Moreover, it aims to identify the effect of the variables (years of experience, type of university, job level, and specialization) on the staff estimation of the status quo of information security and the difficulties they face. The study population consisted of all (96) staff members of the IT departments in the libraries of public and private Jordanian universities for the academic year 2015-2016, of whom (84) responded. To answer the study questions, a questionnaire that examines the status quo of information security was adopted, it consisted of five themes. The questionnaire also included questions to study the difficulties facing IT staff. The results indicated that the respondents’ estimation of the status quo of information security in Jordanian universities libraries was at medium level, as the item “procedures for the protection of computer systems and networks” and the item “access control to information systems” were ranked first in the study fields with a high rating. Results also indicated that the overall level of difficulties attained a medium level, and that the most prominent difficulties facing IT staff in universities libraries are the shortage of personnel specialized in information security and the lack of budget allocated to information security in university libraries. The study also showed a statistically significant difference at the level of significance (α≤0.05) for the variables of “job level” and “specialization” in the staff estimation of the status quo of information security. Also, a statistically significant difference was found in the staff estimation of the difficulties they face related to the specialization variable. The study recommends paying more attention to the various aspects of information security in libraries, such as the infrastructure in regard to technology and the existence of a precise policy to ensure information security and to increase the number of human resources specialized in the field of information security.
الكلمات المفتاحية
Information Security، Confidentiality، Information Technology، University Libraries
التنزيلات
المراجع
S. S. Al-Sarhan and H. Al-Mashhdani, 'aman alhasub walmelwmat, [Computer & Information Security] Amman, Jordan: Dar Wael for Publishing, 2001.
S. M. Alsalem, “Scientific theft is an issue that threatens information security,” (in Arabic), Inf. Stu. J., no. 6, pp. 5-6, Dec. 2009.
X. Liang, “Internet of things and its applications in libraries: a literature review,” in Libr.Hi Tech, vol. 38, no. 1, pp. 67-77, Aug. 22, 2018, doi: 10.1108/LHT-01-2018-0014.
S. Hervieux and A. Wheatley, “Perceptions of artificial intelligence: A survey of academic librarians in Canada and the United States,” in J. Acad. Librariansh., vol. 47, no. 1, Jan. 2021, Art. no. 102270, doi: 10.1016/j.acalib.2020.102270.
B. Massis, “The Internet of Thing and its impact on the library,” in New Libr. World, vol. 117, no. 3/4, pp. 289-292, Mar. 13, 2016, doi: 10.1108/NLW-12-2015-0093.
V. Malik and S. Singh, “Security risk management in IoT environment,” in J. Discrete Math. Sci. Cryptogr., vol. 22, no. 4, pp. 697-709, Sep. 1, 2019, doi: 10.1080/09720529.2019.1642628.
E. O. Makori, “Promoting innovation and application of internet of things in academic and research information organizations,” in Libr. Rev., vol. 66, no. 8/9, pp. 655-678, Nov. 7, 2017, doi: 10.1108/LR-01-2017-0002.
Ş. Eroğlu and T. Çakmak, “Personal data perceptions and privacy in Turkish academic libraries: An evaluation for administrations,” in J. Acad. Librariansh., vol. 46, no. 6, Nov. 2020, Art. no. 102251, doi: 10.1016/j.acalib.2020.102251.
T. S. Nicolas-Rocca and R. J. Burkhard, “Information Security in Libraries: Examining the Effects of Knowledge Transfer,” in Inf. Technol. Libr. (ital), vol. 38, no. 2, pp. 58-71, June 17, 2019, doi: 10.6017/ital.v38i2.10973.
D. Al-badayneh, ala'mn whrb alma'loumat, [Security and Information Warfare] Amman, Jordan: Dar Alshorok, 2002.
H. T. Dawood, 'aman shabakat almaelumat, [Security of Information Networks] Riyadh, Saudi Arabia: Institute of Public Administration, 2004.
E. Kritzinger and E. Smith, “Information security management: An information security retrieval and awareness model for industry,” in Comput. Secur., vol. 27, no. 5-6, pp. 224-231, Oct. 2008, doi: 10.1016/j.cose.2008.05.006.
D. A. Al-Qahtani, almdkhl ala a'mn alma'loumat, [Introduction to Information Security] Lebanon: Dar Qabes, 2008.
J. H. P. Eloff and M. Eloff, “Information security management: a new paradigm,” in Proc. 2003 Annu. Res. Conf. South African Inst. Comput. Sci. Inf. Technol. Enablement Through Technol. (SAICSIT ’03), South Africa, Sept. 2003, pp. 130-136.
M. Kumar, “Academic Libraries in Electronic Environment: Paradigm Shift,” in Int. Conf. Acad. Libr. (ICAL-2009), Delhi, India, Oct. 5-8, 2009.
S. M. Ibrahim, almktbah aljama'iah wthdyat mjtma' alma'loumat [University Library and the Challenges of the Information Society] Alexandria, Egypt: Dar Alwafaa, Jan 01, 2009.
M. Aslam, A. Khalid, S. H. Batool and G. Farid, “Mapping digital information security management in the university libraries of Pakistan,” in Proc. Assoc. Inf. Sci. Technol., vol. 56, no. 1, pp. 356-359, Oct. 18, 2019, doi: 10.1002/pra2.70.
H. A. Alsereihy, “Library security and information systems case study on library King Abdulaziz University in Jeddah,” (in Arabic), King Fahad Natl. Libr. J., vol. 8, no. 1, pp. 112-154, 2002.
F. S. Bamofleh, “Information Security at UQU Libraries network: a case study,” (in Arabic), Majalat Alaitijahat Alhadithat fi Almaktabat Walmelwmat, vol. 9, no. 18, 2002.
S. S. Alzeheimi and W. A. Albadi, “The status quo of information systems security in Omani libraries: a case study on the main library of Sultan Qaboos University,” (in Arabic), presented at 6th Conf. Saudi Libr. Inf. Assoc., Riyadh, Saudi Arabia, 2010.
A. A. Maidabino and A. N. Zainab, “Collection security management at university libraries: assessment of its implementation status,” in Malays. J. Libr. Inf. Sci., vol. 16, no. 1, pp. 15-33, Apr. 2011.
O. Osayande, “Electronic Security Systems in Academic Libraries: A Case Study of Three University Libraries in Southwest Nigeria,” in Chin. Librariansh., no. 32, Dec. 1, 2011.
P. U. Akor, “Security Management for Prevention of Book Thefts in University Libraries. A Case Study of Benue State University Library, Nigeria,” in Libr. Philos. Pract., No. 995, 2013.
H. S. Al Aqili and B. F. Albayaty, “Information security and its applications in information science departments and libraries: survey,” (in Arabic), Jordanian J. Libr. Inf. Sci., vol. 52, no. 1, pp. 37-82, 2017, doi: 10.12816/0038789.
A. Aldanaf, “The status quo of managing information systems security in the technical colleges in the Gaza Strip and ways to develop them,” M.S. thesis, Fac. Econ. Adm. Sci., Islamic Univ. Gaza, Gaza, Palestine, 2013. [Online]. Available: http://hdl.handle.net/20.500.12358/19992
Z. A. Ammar, “Protect major networks from hacking and malware,” M.S. thesis, Coll. Grad. Stud., Al Neelain Univ., Khartoum, Sudan, 2001.
D. C. Phelps, “Information System Security: Self-Efficacy and Security Effectiveness in Florida Libraries,” Ph.D. dissertation, Coll. Inf., Florida State Univ., FL, USA, 2005.
R. Ismail, “Assessing Information Security Management in Malaysian Academic Libraries,” Ph.D. dissertation, Dept. Libr. Inf. Sci., Univ. Malaya, 2012.
R. Ismail and A. N. Zainab, “Information systems security in special and public libraries: an assessment of status,” in Malays. J. Libr. Inf. Sci., vol. 16, no. 2, pp. 45-62, May 2017.
A. F. Gohary and T. M. Hassan, “Digital Information Security and Protection Under the current Legislation,” (in Arabic), Arab Cent. Res. Stud. Libr. Inf. Sci., vol. 6, no. 12, pp. 85-132, July 2019.
M. M. Al-Hadi, “Trends in information security and transparency in the context of e-government,” (in Arabic), Cybrarians J., vol. 9, June 6, 2006.
M. S. Allozi, “Difficulties facing the application of electronic services as perceived by the employees of the civil service institutions in Jordan,” (in Arabic), Jordan J. Bus. Adm., vol 6, no. 2, pp. 184-209, June 30, 2010.
A. Alaraby, “The International Organization for Standardization ISO 27002: (ISO IEC 27002) for Information Security Policies: A descriptive and analytical study of the Arab Universities website,” (in Arabic), J. Taibah Univ. Arts & Humanit., vol. 4, no. 7, pp. 661-738, Dec. 30, 2015.
A. H. Al-Rifai, mnahj albhth ala'lmi ttbikat edariah waktsadiah, [Scientific Research Curricula: Administrative and Economic Applications] Amman, Jordan: Dar Wael for Publishing, 2007.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.