INFORMATION SECURITY IN HIGHER EDUCATION ADMINISTRATION: ANALYSIS OF RISKS AND EMPLOYEE ATTITUDES: INFORMATION SECURITY IN HIGHER EDUCATION ADMINISTRATION: ANALYSIS OF RISKS AND EMPLOYEE ATTITUDES

Donika  Dimanova; Eda Zakir

doi:10.46687/jsar.v30i1.479

Authors

Donika Dimanova Konstantin Preslavsky University of Shumen, Faculty of Technical Sciences, Bulgaria
Eda Zakir Konstantin Preslavsky University of Shumen, Faculty of Technical Sciences, Bulgaria

DOI:

https://doi.org/10.46687/jsar.v30i1.479

Keywords:

Information security, Higher education institution, Cyber risks, Human factor, Information systems, Training

Abstract

The digitalization of administrative and academic processes in higher education institutions increases their dependence on information systems while simultaneously creating new risks to the security of processed information. The paper analyzes the main information security risks in university administration and presents the results of a survey conducted among employees of a higher education institution. Particular attention is given to the human factor, the protection practices applied, perceived cyber risks, and the need for additional organizational and technical measures. Based on the results obtained, guidelines are formulated for enhancing information security and developing a stronger security culture within the university environment.

Author Biographies

Donika Dimanova, Konstantin Preslavsky University of Shumen, Faculty of Technical Sciences, Bulgaria

1Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: d.dimanova@shu.bg

Eda Zakir, Konstantin Preslavsky University of Shumen, Faculty of Technical Sciences, Bulgaria

Konstantin Preslavsky University of Shumen, Faculty of Technical Sciences, Bulgaria

References

Atanasova-Mollova, D. K. Risks and Threats to Information Protection from Artificial Intelligence. In: Bulletin of the Faculty of Police, No. 18/2025, Academy of the Ministry of Interior, 2025, pp. 103-113.

Dimov, P., Zdravkov, Z., Dobreva, H. Information Security. G. S. Rakovski National Defence College, Sofia, 2021.

Domozetov, H. Human Factor and Information Security. In: Information & Security: An International Journal, 1998, No. 1, pp. 46-60.

Draganov, I. Cybersecurity in the Education Sector: Importance, Threats and Future. Skill Catalyst, 2 July 2024.

Personal Data Protection Act. Promulgated, State Gazette, No. 1 of 4 January 2002; amended, State Gazette, No. 69 of 31 July 2026.

Stoitsov, G. Information and Communication Security. Paisii Hilendarski University of Plovdiv, Plovdiv, 2020.

Vasilev, D. Information Security Management in Educational Institutions: Policies, Procedures and Good Practices. In: Information and Communication Technologies in Business and Education: Proceedings of the International Scientific Conference on the Occasion of the 55th Anniversary of the Department of Informatics at the University of Economics – Varna. Varna: Science and Economics Publishing House, 2024, pp. 213-219. ISBN 978-954-21-1184-9.

Tasinov, T. Y., Toncheva, S. K. Anticipatory Technological Preparation and Digital Health Competencies in Nursing and Midwifery Education. Proceedings of the XIX National Forum of Health Care Specialists and Poster Session for Students “Fair Access to Quality Health Care”, Shumen, 24–25 October 2025, pp. 97–103. [Online]. Available: https://journals.mu-varna.bg/index.php/conf/issue/view/693.

INFORMATION SECURITY IN HIGHER EDUCATION ADMINISTRATION: ANALYSIS OF RISKS AND EMPLOYEE ATTITUDES