Abstract: “Securing information is essential for safeguarding an organization business operation since information is a valuable asset for the organization. One of the most vital information security controls is information security awareness and practice. The purpose of this study is to assess the levels of information security awareness and practice among faculty staffs in Malaysian IHLs. The survey questionnaire was distributed to faculty staffs in University Selangor as a sample study to assess the trend of information security awareness and practice. The finding of the study shows that more than half of them were aware of the importance of information security in educational learning environment. This research is expected to contribute to information security awareness in IHLs. This research recommends that an information security policy should be developed for Malaysian IHLs.”

Keywords: information security, information security awareness, security, information security policy, risk assessment