Abstract
Although there is a steady use of information technology in institutions of higher learning, little is known about the level of information security awareness (ISA) amongst students joining universities in developing countries and more specifically Africa. The purpose of this study was to investigate ISA amongst undergraduate students at a higher education institution in Kenya. The study made use of a quantitative survey approach. Overall, the study findings indicate that majority of the students surveyed did not possess adequate understanding of ISA. Consequently, we submit that there is a strong need to cultivate ISA culture amongst students joining universities in developing countries. We further recommend that ISA needs to be incorporated in the undergraduate curriculum to help enhance such awareness. Equally, it would be useful for universities to have ISA program as part of the wider university information security management strategy.
