Information Systems Security Threats and Vulnerabilities: A Case of the Institute of Accountancy Arusha (IAA)

Abstract

All modern computer users need to be concerned about information system security (individuals and organisations). Many businesses established various security structures to protect information system security from harmful occurrences by implementing security procedures, processes, policies, and information system security organisational structures to ensure data security. Despite all the precautions, information security remains a disaster in Tanzania's learning institutions. The fundamental issue appears to be a lack of awareness of crucial information security factors. Various companies have different security issues due to differences in ICT infrastructure, implementations, and usage. The study focuses on identifying information system security threats and vulnerabilities in public higher learning institutions in Tanzania, particularly the Institute of Accountancy Arusha (IAA). The study involved all employees of IAA, academics, and other supporting staff, which totalled 302, and the sample size was 170. The study utilised a descriptive research design, where the quantitative methodology was used through a five-point Likert scale questionnaire, and found that key factors that affect the security of information systems at IAA include human factors, policy-related issues, work environment and demographic factors. The study proposed regular awareness and training programs; an increase in women's awareness of information system security; proper policy creation and reviews every 4 years; promote actions that lessen information system security threats and vulnerabilities, and the creation of information system security policy documents independently from ICT policy.

Information Security Awareness in Sub-Saharan African Schools: The Role of Educational Leadership in Turbulent Times

“…Additionally, studies conducted in Sudan and Tanzania found that students in African higher education institutions had low levels of cybersecurity awareness [14,53]. This highlights the need for increased cybersecurity education and awareness among African school students [54].…”

The Driving Forces for the Involvement of Higher Learning Institution’s Students in Cybercrime Acts. A Case of Selected Higher Learning Institutions in Tanzania

“…Attackers can exploit vulnerabilities and weaknesses from anywhere, using computer access linked to the network. Intruders demand no entry visa to commit crimes (Semlambo, Mfoi, & Sangula, 2022). Understanding the driving forces that lead students in higher learning institutions to participate in cybercrime is crucial for developing effective preventive measures and interventions.…”