The article discusses the importance of information security at universities, focusing on Sofia University. It examines security measures used by top universities worldwide to identify weaknesses and propose improvements for Sofia University's security approach. The key finding is that a holistic security policy system is crucial for effective information security in universities, which have unique processes and requirements compared to regular businesses.