Information Security Management and Employee Compliance in Selected Federal Agencies in Abuja

This study evaluates information security management practices and employee compliance levels in selected federal agencies in Abuja, the Federal Capital Territory. As Nigeria's federal government agencies increasingly migrate to digital administrative platforms, ensuring robust information security and cultivating a culture of compliance among staff have become urgent management imperatives. Using a professional survey design, the study targets information security officers, administrative managers, and general administrative staff in seven federal agencies. Data are collected through structured questionnaires and information security compliance audit tools. The ISO 27001 Information Security Management System Standard and the NIST Cybersecurity Framework provide the professional grounding, with reference to literature from 2020 to 2024 on public sector information security in Nigeria. Dimensions examined include policy awareness, password management practices, incident reporting behaviour, data handling compliance, and the effectiveness of security awareness training programmes. Recommendations are directed at the Office of the National Security Adviser, the Office of the Head of the Civil Service, and NITDA. Keywords: information security, employee compliance, federal agencies, Abuja, cybersecurity management