  It is well known that technology utilization is not restricted for one sector
than the other anymore, Educational organizations share many parts of their
information systems with commercial organizations. In this paper we will try to
identify the main characteristics of information systems in educational
organizations, then we will propose a model of two parts to enhance the
information systems security, the first part of the model will handle the
policy and laws of the information system, the second part will provide a
technical approach on how to audit and subsequently maintain the security of
information system.
