دور عمليات إدارة الموارد البشرية في تحقيق الأمن المعلوماتي : دراسة تطبيقية على الجامعات الحكومية السعودية

Abstract EN

This study aims to reveal the reality of the human resources management units contribution to achieving information security at Saudi government universities by examining their compliance with the international standard of the information security management system (ISO/IEC 27002:2013).

the study was based on qualitative research methods, where a checklist was designed to collect the data needed for the study, using semi-structured interviews, direct observation, and documents examination which used in human resources management units.

the gap analysis method has also been used to analyse data in order to determine range of the compliance of the universities human resources management units that participated in the study to the information security controls provided by the international standard (ISO/IEC 27002:2013).

the study reached a number of results, the most important of which was the commitment of the participating universities in different rates ranging from medium to high in the application of international standard (ISO/IEC 27002:2013) controls concerning human resources management processes (prior to employment, during employment, termination or change of employment).

in the light of those findings, the study made several recommendations that guide universities towards full compliance with controls of that international standard in order to raise the level of the contribution of human resources management processes to achieve a full information security.

range of the compliance of the universities human resources management units that participated in the study to the information security controls provided by the international standard (ISO/IEC 27002:2013).

the study reached a number of results, the most important of which was the commitment of the participating universities in different rates ranging from medium to high in the application of international standard (ISO/IEC 27002:2013) controls concerning human resources management processes (prior to employment, during employment, termination or change of employment).

in the light of those findings, the study made several recommendations that guide universities towards full compliance with controls of that international standard in order to raise the level of the contribution of human resources management processes to achieve a full information security.