Assessment of organizations information security practice and management in Tanzania: the case of Medical Stores Department

Pastory, Pascal

Assessment of organizations information security practice and management in Tanzania: the case of Medical Stores Department

Date

2009

Authors

Pastory, Pascal

Publisher

University of Dar es Salaam

Abstract

The main objective of this study was to assess the state of organizations information security practice and management in order to ascertain the effectiveness of information security practice in organizations operating in Tanzania. The assessment was based on adequacy of top management support, documented and implemented security policy, risk assessment and security awareness and training. The study constituted a sample size of 82 respondents from Medical Stores Department as a case study whereas descriptive analysis through SPSS was used in data analysis. The study established that effective information security practice and management depends on adequate top management support, the adequacy and effective implementation of ICT Security Policy, regularly risk assessment and adequate information security awareness and training. The analysis concluded that there are weaknesses in implementation of ICT Security Policy and regular risk assessment, whereas security awareness and training is moderately done. The analysis further revealed that organizations receive fairly good support from top management. Analysis of the data and testing of hypotheses showed that effective information security practice and management has been moderately implemented in organizations leading to a conclusion that organizations operating in Tanzania need some improvement in the areas of information security policy, risk assessment and security awareness and training.

Description

Available in print form, East Africana Collection, Dr. Wilbert Chagula Library

Keywords

Information security, Organizations, Practice and management, Medical stores department, Tanzania

Citation

Pastory, P. (2009) Assessment of organizations information security practice and management in Tanzania: the case of Medical Stores Department, Master dissertation, University of Dar es Salaam.