Cybersecurity Management Models in Higher Education Institutions According to NIS2 Requirements

Abstract

Higher education institutions (HEIs) are increasingly exposed to cybersecurity threats due to the growing reliance on digital platforms, cloud services, and the handling of sensitive research and personal data. The EU NIS2 Directive establishes a regulatory framework that strengthens cybersecurity obligations, including risk management, incident reporting, policy implementation, and staff awareness. This paper explores internationally recognized cybersecurity management models – ISO/IEC 27001, NIST Cybersecurity Framework, COBIT, and maturity models – and examines their application in higher education settings. A comparative mapping illustrates how these models help HEIs achieve compliance with NIS2 requirements while enhancing their overall cybersecurity posture. The paper also discusses specific challenges, such as limited budgets, technical expertise, and cultural barriers, and provides practical recommendations for gradual and sustainable adoption of cybersecurity practices in universities. CZU: 378:[005:004.056]; JEL: L86