Internet-related attacks have become prevalent and are expected to increase as the reliance on the internet also increases. Consequently, cyber security has become an essential concept in everyday life and cyber security awareness is key in the protection of people and systems against cyber threats. The study is sought to establish the current levels of cyber security awareness among students and staff in universities and propose a framework for conducting cyber security awareness and education programs. Data analysis was carried out using SPSS and represented in descriptive and frequency ways as well as in percentage form. Based on research findings in this study it has been established that students and staff at universities do not have the requisite knowledge and understanding of the importance of cyber security principles, their practical application in their day-to-day activities, and are not aware of how to protect their data. It is therefore recommended that universities should implement comprehensive awareness and education programs for the adoption of necessary safety measures and a framework for conducting such programs is proposed.