In a rapidly evolving digital landscape, where information is the currency of progress, universities play a vital role in fostering innovation, research, and knowledge dissemination. However, this invaluable role also exposes universities to significant cybersecurity challenges. Cybersecurity is an increasingly important topic for organisations in all sectors, including universities. As repositories of valuable research data and other sensitive information, universities are attractive targets for cyber attacks. Addressing these challenges is crucial not only to protect intellectual property and sensitive data but also to maintain the trust and integrity of academic institutions. Despite the importance of cybersecurity for universities, there is a lack of research on how to effectively implement cybersecurity policies and practices in this context. The lack of a standardised approach to cybersecurity can leave universities vulnerable to cyber threats and hinder the sharing of best practices. This study is expected to identify key challenges and measures for cybersecurity policy in Dutch universities. It will provide insights into the implementation of effective cybersecurity policies and contribute to the development of an approach to cybersecurity in the higher education sector. The research question is: "How should the cybersecurity policies of Dutch universities be designed to mitigate cyber threats to ensure knowledge security?". To accomplish this research, a multidimensional approach was adopted. Extensive literature review provided a foundation for understanding cybersecurity standards and cyber ethics, while interviews were conducted with various Dutch universities to gain insights into their experiences and perspectives. Additionally, a comprehensive survey was administered to students and staff members of Dutch universities, enriching the study with diverse viewpoints. This work aligns with the objective of examining the quality of decision-making concerning grand societal challenges within the context of their socio-economic and political environments. It aspires to inform decision-makers in the public (policy) domain or at the intersection of the public and private spheres. By shedding light on the barriers faced by universities in implementing cybersecurity norms, this research aims to contribute to the ongoing discourse on securing knowledge assets in the face of emerging cyber threats. The thesis is structured as follows: it begins with an introduction that provides a comprehensive overview of the topic, delineating the problem at hand and outlining the proposed approach. Subsequently, the literature review section presents the findings of the extensive research conducted, exploring various subjects such as cybersecurity standards and cyber ethics, among others. The expected outcomes of this study are an overview of current cybersecurity challenges for Dutch universities, an understanding of the opinions and experiences of university staff and students, and recommendations for developing and implementing cybersecurity policies for Dutch universities.