Information security (InfoSec) policies are widely used by institutions as a form of InfoSec control measure to protect their information assets. InfoSec policies are commonly documented in natural language, which is prone to ambiguity and misinterpretation, thereby making it hard, if not impossible, for users to comply with. These misinterpretations may lead the students or staff members to wrongfully execute the required actions, thereby making institutions vulnerable to InfoSec attacks. According to the literature review conducted in this work, InfoSec policy documents are often not followed or complied with; and the key issues facing InfoSec policy compliance include the lack of management support for InfoSec, organisational cultures of non-compliance, intentional and unintentional policy violation by employees (the insider threat), lack of policy awareness and training as well as the policy being unclear or ambiguous. This study is set in the higher education context and explores the extent to which the non-compliance problem is embedded within the policy documents themselves being affected by ambiguity. A qualitative method with a case study research strategy was followed in the research, in the form of an inductive approach with a cross-sectional time horizon, whereby a selection case of relevant institutional InfoSec policies were analysed. The data was collected in the form of academic literature and InfoSec policies of higher education institutions to derive themes for data analysis. A qualitative content analysis was performed on the policies, which identified ambiguity problems in the data. The findings indicated the presence of ambiguity within the policy documents, making it possible to misinterpret some of the policy statements. Formal methods were explored as a possible solution to the policy ambiguity. A framework was then proposed to address ambiguity and improve on the clarity of the semantics of policy statements. The framework can be used by policy writers in paying attention to the presence of ambiguity in their policies and address these when drafting or revising their policy documents. / School of Computing

The assumption of the present study is that teachers should possess an adequate understanding of the nature of science and scientific method and hence this aspect was investigated. The empirical research carried out with Secondary School teacher trainees at Botswana colleges of education showed the following: Subjects possess an adequate understanding of some aspects of the nature of science and several aspects of the scientific method. They however do not have an adequate understanding on certain aspects of the nature of science. An association was found between the nature of science, type of educational institution attended, years of study and majoring in science. A positive association was found between scientific method and years spent studying. The present study recommended the inclusion of history, philosophy and sociology of science in the curriculum of teacher education. / Educational Studies / M. Ed. (with specialisation in Natural Science Education)

The assumption of the present study is that teachers should possess an adequate understanding of the nature of science and scientific method and hence this aspect was investigated. The empirical research carried out with Secondary School teacher trainees at Botswana colleges of education showed the following: Subjects possess an adequate understanding of some aspects of the nature of science and several aspects of the scientific method. They however do not have an adequate understanding on certain aspects of the nature of science. An association was found between the nature of science, type of educational institution attended, years of study and majoring in science. A positive association was found between scientific method and years spent studying. The present study recommended the inclusion of history, philosophy and sociology of science in the curriculum of teacher education. / Educational Studies / M. Ed. (with specialisation in Natural Science Education)