Investigating Benefits Realization of Information Security Policies for Palestine Higher Education: An SEM – ANN Approach

Abstract

In essence, Information Security Management (ISM) is a real-life situation based on its characteristics; confidentiality, integrity, and availability. To generate knowledge based on eight key concepts of ISM supported by popular management theory that uses the core principles of planning, organizing, leading and controlling (PLOC). The research will investigate benefits realization for IS Policies (ISP) by integrating Cranfield Benefits Management Model CBMM. A conceptual research model will be developed from extant academic literature, standards, and the examination of interrelationships between the objectives and practices, and refined via survey data from managers and security professionals based in Palestine higher education institutions. A benefits realization plan BRP is used to define the benefits of the overall ISM work and responsibilities for their realization, measurement and reporting for the ISP realization. Building on these previous efforts, the purpose of this study is to investigate the conceptual theoretical model to recognize benefits realization in the ISP based on the many guidelines and standards available in both academia and practice. Such a conceptual model could provide educational institutions with a favoured benefits realization approach to ISP and future research activities for Palestine higher education institutions. In the context of applied research, the research will use a quantitative method research paradigm using a grounded theory that employs quantitative data. The model used in this research was analysed in two steps. In the first step, Structural Equation Modelling (SEM) was used to determine significant determinants that affect the adoption of PLOC in the ISP realization. In the second step, a Neural Network Model ANN was applied to validate the findings in step 1 and establish the relative importance of each determinant to the adoption of ISP realization. The expected achievable benefits attributes from ISP implementation may include the following; It is beneficiary, gain, attributable and discernible.