# A Systematic Review of Cybersecurity Risks in Higher Education
## 4 Description of Included Literature
### Included Academic Literature  
Our literature search did not reveal any prior research on assets for HE in relations with ISRA. However, in his doctoral thesis, [PERSON] [40] identifies the most valuable key performance indicators (KPI) in HE. He analyzed the content of the system portfolios submitted from 34 HEI and identified 2139 different KPI's related to these institutions. [PERSON] created 24 categories or \"Areas Measured\" for covering the KPI themes of his work. Additionally, [PERSON] and [PERSON] [41] researched KPIs and performance tracking in HEI. They \begin{table}
\begin{tabular}{l l l l l l} \hline \hline
**Source** & **Reference** & **Publication** & **Topics** & **Country** & **Year** \\ \hline Academic & [PERSON] [40] & Ph.D. Thesis & Asset/KPI & USA & 2013 \\ Literature & [PERSON] \& [PERSON] [41] & Journal article & Asset/KPI & Saudi-Arabia \& Canada & 2013 \\  & [PERSON] \& [PERSON] [2] & Journal article & Threat & USA & 2010 \\  & [PERSON] [42] & Conference article & Threat & Portugal & 2020 \\  & [PERSON] \& [PERSON] [43] & Journal article & Vulnerability & Middle east & 2016 \\  & [PERSON] et al. [44] & Journal article & Vulnerability & Greece & 2014 \\  & [PERSON] et al. [45] & Conference article & Vulnerability & Norway & 2020 \\  & [PERSON] \& [PERSON] [4] & Journal article & Vulnerability & Turkey & 2016 \\  & [PERSON] \& [PERSON] [46] & Journal article & Vulnerability & UAE & 2008 \\  & [PERSON] \& [PERSON] [47] & Conference article & Vulnerability & Malaysia & 2016 \\  & [PERSON] et al. [48] & Conference article & Vulnerability & Norway \& Switzerland & 2012 \\  & [PERSON] [49] & Journal Article & Vulnerability & USA & 2013 \\  & [PERSON] [9] & Conference article & Risk & Norway & 2019 \\  & [PERSON] \& [PERSON] [50] & Book chapter & Risk & India & 2020 \\  & [PERSON] \& [PERSON] [51] & Journal article & Risk & Ghana & 2018 \\  & [PERSON] et al. [52] & Journal article & Risk & Kingdom of Jordan & 2014 \\  & [PERSON] [53] & Ph.D. Thesis & Risk & USA & 2018 \\ \[PERSON] & Fawcett. [PERSON] [54] & Website & Asset & Australia & 2020 \\  & FireEye Inc. [3] & White paper & Threat & USA & 2016 \\  & [PERSON] et al. [55] & Bachelors thesis & Threat & Norway & 2018 \\  & CyberEdge group [56; 57] & White paper & Vulnerability & International & 2018-19 \\  & [PERSON] et al. [58] & Technical report & Vulnerability & Norway & 2019 \\  & [PERSON] et al. [59] & Bachelors thesis & Vulnerability & Norway & 2019 \\  & FireEye Inc. [5] & White paper & Risk & USA & 2015 \\  & Chapman [8] & Policy Note & Risk & UK & 2019 \\  & NCSC [10] & Technical report & Risk & UK & 2019 \\  & Grama [60] & White paper & Risk & USA & 2014 \\  & UNIT [6] & Technical report & Risk & Norway & 2019 \\  & Verizon [61; 62; 63; 64] & Technical report & Risk & USA & 2017-20 \\  & Hackmageddon [65; 66] & Website & Risk & International & 2018-19 \\  & [PERSON] et al. [67] & White paper & Risk & USA & 2016 \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Overview of referenced research sorted on publication type, topics, country, and publication year. propose a structured framework for this purpose which contains a hierarchical listing of said KPIs. While there is much academic literature regarding cyber threats, the findings were scarce regarding threats facing HE. [PERSON] and [PERSON] [2] analyzed data breach reports at universities and colleges in the U.S. The data was obtained from the Privacy Rights Clearinghouse (PRC), gathered between 2005-2009, and contained 290 incident records from 165 US universities. (Privacy Rights Clearinghouse [[https://privacyrights.org/](https://privacyrights.org/)]([https://privacyrights.org/](https://privacyrights.org/)) (Visited 28 January 2021)) In 2020, [PERSON] [42] conducted a literature review on the cyber threats on educational institutions. While the paper is informative, the sources for the study are primarily white papers and technical reports. The literature search revealed more academic sources on vulnerability in HE with some geographic diversity.