“…Most existing risk management studies are more bent toward examining Information Security Governance (ISG) in organizations as a driver of security strategy adoption, a focus that does not address the wider scope of security governance (e.g., Tan et al, 2017;Ribbers et al, 2002;Posthumus & Von Solms, 2004). While a few authors have researched different risk management models, especially Enterprise Risk Management (ERM), in the higher education sector (Lundquist, 2015;Setapa et al, 2015;Malki & Aldwais, 2019;Perera et al, 2020), no recent research focuses on the nexus between ESRM adoption and security governance structures at the internal level. Therefore, based on the perceptions of university security executives in Kenya, the study will provide new evidence on the relationship between ESRM adoption and security governance in the higher education sector.…”