Pastory, Pascal2019-11-232020-01-082019-11-232020-01-082009Pastory, P. (2009) Assessment of organizations information security practice and management in Tanzania: the case of Medical Stores Department, Master dissertation, University of Dar es Salaam.http://localhost:8080/xmlui/handle/123456789/5454Available in print form, East Africana Collection, Dr. Wilbert Chagula LibraryThe main objective of this study was to assess the state of organizations information security practice and management in order to ascertain the effectiveness of information security practice in organizations operating in Tanzania. The assessment was based on adequacy of top management support, documented and implemented security policy, risk assessment and security awareness and training. The study constituted a sample size of 82 respondents from Medical Stores Department as a case study whereas descriptive analysis through SPSS was used in data analysis. The study established that effective information security practice and management depends on adequate top management support, the adequacy and effective implementation of ICT Security Policy, regularly risk assessment and adequate information security awareness and training. The analysis concluded that there are weaknesses in implementation of ICT Security Policy and regular risk assessment, whereas security awareness and training is moderately done. The analysis further revealed that organizations receive fairly good support from top management. Analysis of the data and testing of hypotheses showed that effective information security practice and management has been moderately implemented in organizations leading to a conclusion that organizations operating in Tanzania need some improvement in the areas of information security policy, risk assessment and security awareness and training.enInformation securityOrganizationsPractice and managementMedical stores departmentTanzaniaThesis