Y. Rezgui and A. Marks, Information security awareness in higher education: An exploratory study, Computers and Security, 2008.

D. Updegrove and W. Gordon, Computers and Network Security in Higher Education, EDUCAUSE, 2003.

R. K. Yin, Applications of case study research, SAGE, 2003.

E. Albrechtsen, J. Hovden, and T. Bray, The information security digital divide between information security managers and usersJ: Security actions during reduction in workforce efforts: what to do when downsizing Information systems security, Computers & Security, 2002.

M. Cooper, Information Security Training-Lessons Learned Along the Trail, Proceedings of the 36th annual ACM SIGUCCS conference on User services conference, 2009.

M. Dlimini, . Eloff, and M. Eloff, Information security: The moving target, Computers & Security, vol.28, issue.3-4, 2008.
DOI : 10.1016/j.cose.2008.11.007

C. Dunlop, R. Kling, R. Dunlop, and . Kling, Social Relationship in Electronic Commerce Introduction in Computerization and Controversy-Value Conflicts and Social change Academic Press Governance, strategy, and practice in Higher Education [10] ISF-International Security Forum. The Forum's Standard of Good Practice for IS security, 1992.

F. H. Katz, The Effect of a University Information Security Survey on Instructing Methods in Information Security, Proceedings of the 2nd annual conference on Information security curriculum development, 2005.

G. Kovacich, Information system security Officer's Guide: Establishing and Managing an Information Protection Program, 1998.

H. A. Kruger and W. D. Kearney, A prototype for assessing information security awareness, Computers & Security, vol.25, issue.4, pp.289-296, 2006.
DOI : 10.1016/j.cose.2006.02.008

K. D. Mitnick, W. L. Simon, G. Roy, and S. North, The Art of Deception: Controlling the Human Element of Security, 2002.

M. T. Siponen, A conceptual foundation for organizational information security awareness, Information Management & Computer Security, vol.8, issue.1, 2000.
DOI : 10.1108/09685220010371394

M. Joseph, IT in the middle east, Proceedings of the 7th conference on Information technology education , SIGITE '06, 2006.
DOI : 10.1145/1168812.1168821