information security policies and their relationship with the effectiveness of the management information systems of major palestinian universities in the gaza strip

this paper aims to recognise information security policies (isp) and their relationship with the effectiveness of the management information systems (mis) of the major palestinian universities in the gaza strip. the researchers used the descriptive analytical approach. they used a questionnaire as a research tool. they used a stratified random sample to explore viewpoints of the research sample which comprised 169 employees of the islamic university – gaza, al azhar university - gaza, and al-quds open university - gaza strip branches. the population comprised it center employees and administrative departments’ employees who use mis in their daily work. 152 questionnaires were collected, with a response rate of 89.94%. the study found that the research sample had shown a high degree of agreement on the isp dimensions (risk assessment of information security, senior management support, reviewing and updating of isp, enforcement of isp, training and awareness of isp). those dimensions together gained a rate of 74%. the study also found that the research sample had shown a high degree of agreement on the field of the “effectiveness of mis”, with a rate of 81%. in addition, it demonstrated a statistically significance relationship level (α ≤ 0.05) between isp and the effectiveness of the mis of the major palestinian universities in the gaza strip. it recommends that the universities should support the information security policies from the process of risk assessment and creation of isp to the process of continuous reviewing and updating of isp. furthermore, the universities should measure the effectiveness of their mis periodically, to enhance this effectiveness and improve it regularly.