Information Security Policies in Nigerian Institutions: Evaluation and Readiness

Information systems have become part and parcel of today’s business operations, with competition on its rise. The security challenges related to information systems could have a severe impact on the overall business objectives of an institution if not handled at the right time. A well-meaning institution must take a full-blown step towards information security management to achieve information security. Information security management has been seen as any management system to address the security issues affecting an institution and align security needs to the overall business objectives. Conversely, Information security policy is the foundation upon which institutions base their entire information security management. This study looks at the uptake of information security policy among Nigerian institutions. The survey result created a clear picture of the uptake of information security policy among Nigerian institutions.