Abstract:The security of information technology, specifically web applications, has become an area of concern today. Computer cybercrime is now a significant problem that affects more than just businesses and organizations. Higher education institutions also began to experience computer threats that revealed their information assets. Universities, polytechnics, colleges of education, research centers, and other postsecondary institutions are probably the most vulnerable because they house sensitive data on their faculty, staff, and students, as well as academic records of scientific and technological advancements and research. The first step in an information system security strategy is risk analysis management It helps in assessing the risk of information assets to know their security level or status, and assist in define a security control measures and implementation of technical plan to avoid threats that exploit some vulnerability that could cause severe damage to an asset or infrastructure of institutions higher education (IHEs). This article presents some recommendations to perform a risk analysis management in IHEs to accessed threats and vulnerability that helps to lower the risk of their information assets. This article presents existing educational threat and vulnerability on their web applications. Ensuring security is a goal of every organization regardless of its size or purpose and also proposed a risk management model. With the information technology, an organization may be considered secure when it ensures the confidentiality, integrity, and availability of information and IT assets. Confidentiality may be broken due to theft of sensitive information such as trade secrets, clients’ personal information.

Student Academic Record Systems and their Security Issues

Secure Web-Based Student Information Management System

Cyberspace Security Threats and Attacks on E-Records Management at Moi University, Eldoret, Kenya

Identification and mitigation of the vulnerability of web applications in institutions of higher education

E- Exams System for Nigerian Universities with Emphasis on Security and Result Integrity

The DeLone–McLean Information System Success Model for Electronic Records Management System Adoption in Higher Professional Education Institutions of Yemen

Perceived Security of E-Learning Portal

Automated Integrated Examination System: A Security Concern

Enhancing Information Systems Security in Educational Organizations in KSA through proposing security model

Password security: Password behavior analysis at a small university

System Security Assurance: A Systematic Literature Review

The need for effective information security awareness practices in Oman higher educational institutions

Information security policies’ compliance: a perspective for higher education institutions

Information Security Synthesis in Online Universities

Meeting the security requirements of electronic medical records in the ERA of high-speed computing

Security awareness of single sign-on account in the academic community: the roles of demographics, privacy concerns, and Big-Five personality

Assessment of Cybersecurity Awareness among Students of Majmaah University

Develop Security Architecture for Both In-House Healthcare Information Systems and Electronic Patient Record

A Review of Database Security Concepts, Risks, and Problems

Information Security Awareness at Oman Educational Institutions : An Academic Prespective

Information security analysis on physical security in university x using maturity model