Assessing Cybersecurity Policy Frameworks in Higher Education Institutions’ Administrative Systems: Challenges and Best Practices

This study aims to assess the effectiveness of cybersecurity policy frameworks in higher education institutions’ administrative systems by examining key challenges and identifying best practices for strengthening governance, compliance, and risk management. The research adopts a systematic literature review approach by analyzing peer-reviewed articles, policy reports, and institutional publications from 2018 to 2025. Relevant sources were selected using defined inclusion criteria focusing on cybersecurity governance, policy frameworks, and administrative system security in higher education, followed by thematic analysis to synthesize key insights. The findings reveal that while institutions widely adopt frameworks such as ISO/IEC 27001 and the NIST Cybersecurity Framework, implementation often remains superficial and compliance-driven. Major challenges include fragmented governance, limited resources, low cybersecurity awareness among administrative staff, and weak policy enforcement. Effective practices emphasize centralized governance, leadership commitment, continuous risk assessment, and integration of cybersecurity into institutional strategy. The study highlights the need for universities to shift from symbolic policy adoption to operational integration by strengthening organizational capacity, enhancing training, and embedding cybersecurity into enterprise risk management to improve resilience. This research provides a governance-focused perspective on cybersecurity in administrative systems, bridging the gap between policy formulation and practical implementation in higher education contexts.