Abstract
The rapid digital transformation in Higher Education Institutions (HEIs) has heightened vulnerability to cyber threats like ransomware, phishing, and data breaches, yet cybersecurity infrastructure often lags. This study evaluates cybersecurity infrastructure in selected HEIs in Delta State, Nigeria, with a focus on technology availability, policy effectiveness, user awareness, and implementation challenges. A survey of 387 stakeholders, including IT personnel, academic and administrative staff, and students, yielded a 100% response rate, with data analyzed using descriptive statistics and a 3.50 mean threshold on a 5-point Likert scale. Results indicate broad use of basic protective tools like firewalls and antivirus software, contrasted by sparse deployment of advanced systems such as intrusion detection and security monitoring platforms. While formal policies are generally present, their enforcement, auditing processes, and incident response mechanisms prove inconsistent and underdeveloped. Threat awareness exists at a moderate level among users, yet formal training and institutional programs remain inadequate. Primary obstacles encompass chronic funding deficits, subpar ICT foundations, and shortages of skilled personnel. These institutions display incomplete cybersecurity maturity, heightening risks within their open-access networks and remote learning setups. Proposed actions urge prioritizing advanced technologies, strengthening policy execution through specialized units, rolling out mandatory awareness initiatives, securing greater financial support for capacity building and operations centers, and promoting partnerships to exchange threat insights. Such steps promise to bolster institutional defenses and support national goals for secure digital education environments.