With continued and rapid advancement in technology especially brought by the need for employees to use their personal devices, it presents a major opportunity and challenge for enterprises and poses a challenge as adversaries have taken advantage of the ever increasing cyber space to attack information and information systems. Our study provides a solution to determine the impact of information security maturity factors on university information security. The research is based on ISO 27001 by involving specific clauses relevant to universities because of its unique organizational nature having varied categories of user's and extensive research allowing it to serve as a plausible area for study compared to other organizations.