Abstract:Security evaluation and management has become increasingly important for Web-based information technology (IT) systems, especially for educational institutions. For the security evaluation and management of IT systems in educational institutions, determining the security level for a single IT system has been well developed. However, it is still difficult to evaluate the information security level of the entire educational institution considering multiple IT systems, because there might be too many different IT systems in one institution, educational institutions can be very different, and there is no standard model or method to provide a justifiable information security evaluation among different educational institutions considering their differences. In light of these difficulties, a security evaluation model of educational institutions’ IT systems (SEMEIS) is proposed in this work to facilitate the information security management for the educational institutions. Firstly, a simplified educational industry information system security level protection rating (EIISSLPR) with a new weight redistribution strategy for a single IT system is proposed by choosing important evaluation questions from EIISSLPR and redistributing the weights of these questions. Then for the entire educational institution, analytic hierarchy process (AHP) is used to redistribute the weights of multiple IT systems at different security levels. Considering the risk of possible network security vulnerabilities, a risk index is formulated by weighting different factors, normalized by a utility function, and calculated with the real data collected from the institutions under the evaluation. Finally, the information security performance of educational institutions is obtained as the final score from SEMEIS. The results show that SEMEIS can evaluate the security level of the education institutions practically and provide an efficient and effective management tool for the information security management.

An Information Security Management System Based on Qfive-in-oneq

Research on Information Security Model and Security System Design

Design and Application Research on Management Information System Security Architecture in Digital Campus

Design and Implementation of Information Security System in E-Campus

Information system and management for campus safety

Design a management information system for financial risk control

THE RESEARCH AND IMPLEMENTATION OF INTEGRATED SECURITY MANAGEMENT PLATFORM

RESEARCH AND IMPLEMENTATION OF MODEL OF INFORMATION SECURITY EVALUATION

Study on Quality Management Information System Based on CIMS

Study on Information-led System Operation of Public Order Maintenance

Management System Construction and Design for Security Management

Computer Aided Quality System Based on Quality Information Integration

An integrated system theory of information security management

An risk measurement model for assessing information systems

Research and implementation of fire safety management information monitoring system

Research on Information Security Protection System of Industrial Control System

Building Information System of safety library based on risk management

New Approach for Information Security Evaluation and Management of IT Systems in Educational Institutions

Integrated Technology of Security Management and Control in On-line Share Trading

A Framework Of Information Management System For Indemnificatory Housing

Building a Viable Information Security Management System