Recommendations of Security Controls Using Threat Modeling in Information Systems in Higher Education Institutions

In Higher Education Institutions (HEIs) more and more information systems are used to automate their educational, administrative, or strategic processes. The information systems process, transmit and store a large amount of information on the processes and personal data of workers and students, which is why the information systems in HEIs have become the target of malicious people to obtain information easily and cause damage. Identifying threats to which information systems in HEIs are exposed will allow them to identify some security controls that must be implemented to reduce level of risk. This document presents recommendation of security controls determined from the use of threat modeling.