Information security culture assessment of small and medium-sized enterprises in Tanzania

Zainab Ruhwanya; Jacques Ophoff

doi:10.1007/978-3-030-18400-1_63

Information security culture assessment of small and medium-sized enterprises in Tanzania

Zainab Ruhwanya, Jacques Ophoff

Research output: Chapter in Book/Report/Conference proceeding › Chapter

4 Citations (Scopus)

147 Downloads (Pure)

Abstract

This study explores the status of information security culture (ISC) of small and medium-sized enterprises (SMEs) in sub-Saharan Africa (SSA) using Tanzania as a case. To assess the ISC of SMEs, measurement criteria from organizational and environmental dimensions were compiled from the literature. A combination of quantitative and qualitative methods was employed to collect data. The ISC dimensions were assessed using surveys collected using both paper and online sources, from 39 SMEs in the roundtable and five focus group discussions. The findings indicated lack of information security policy, absence of security education, training and awareness (SETA) programs, lack of human resource, poor risk assessment, and management and lack of national information security culture initiatives. These findings show the immaturity of ISC in SMEs in Tanzania. The results and implications of these findings suggest further research and intervention is necessary to institutionalize ISC in the SME environment.

Original language	English
Title of host publication	Information and communication technologies for development
Subtitle of host publication	strengthening southern-driven cooperation as a catalyst for ICT4D, 15th IFIP WG 9.4 International conference on social implications of computers in developing countries, ICT4D 2019, Dar es Salaam, Tanzania, May 1-3, 2019 : proceedings
Editors	Petter Nielsen, Honest Christopher Kimaro
Place of Publication	Cham
Publisher	Springer
Pages	776-788
Number of pages	13
Volume	1
ISBN (Electronic)	9783030184001
ISBN (Print)	9783030183998
DOIs	https://doi.org/10.1007/978-3-030-18400-1_63
Publication status	Published - 4 Jun 2019
Externally published	Yes
Event	15th International Conference on Social Implications of Computers in Developing Countries - Dar es Salaam, Tanzania, United Republic of Duration: 1 May 2019 → 3 May 2019 https://2019ifipwg94.net/index.php/important-dates

Publication series

Name	IFIP Advances in Information and Communication Technology (IFIP AICT)
Publisher	Springer
Volume	552
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	15th International Conference on Social Implications of Computers in Developing Countries
Country/Territory	Tanzania, United Republic of
City	Dar es Salaam
Period	1/05/19 → 3/05/19
Internet address	https://2019ifipwg94.net/index.php/important-dates

Keywords

Information security culture
Information security
Security
Culture
Small and medium-sized enterprises
Tanzania
Sub-Saharan Africa

Access to Document

10.1007/978-3-030-18400-1_63

Ophoff_InformationSecurityCultureAssessment_Accepted_2018Accepted author manuscript, 628 KB

Cite this

Ruhwanya, Z., & Ophoff, J. (2019). Information security culture assessment of small and medium-sized enterprises in Tanzania. In P. Nielsen, & H. C. Kimaro (Eds.), Information and communication technologies for development: strengthening southern-driven cooperation as a catalyst for ICT4D, 15th IFIP WG 9.4 International conference on social implications of computers in developing countries, ICT4D 2019, Dar es Salaam, Tanzania, May 1-3, 2019 : proceedings (Vol. 1, pp. 776-788). (IFIP Advances in Information and Communication Technology (IFIP AICT); Vol. 552). Springer. https://doi.org/10.1007/978-3-030-18400-1_63

Ruhwanya, Zainab ; Ophoff, Jacques. / Information security culture assessment of small and medium-sized enterprises in Tanzania. Information and communication technologies for development: strengthening southern-driven cooperation as a catalyst for ICT4D, 15th IFIP WG 9.4 International conference on social implications of computers in developing countries, ICT4D 2019, Dar es Salaam, Tanzania, May 1-3, 2019 : proceedings. editor / Petter Nielsen ; Honest Christopher Kimaro. Vol. 1 Cham : Springer, 2019. pp. 776-788 (IFIP Advances in Information and Communication Technology (IFIP AICT)).

@inbook{0138b178cbaf4e1bb0d413d2f94faa70,

title = "Information security culture assessment of small and medium-sized enterprises in Tanzania",

abstract = "This study explores the status of information security culture (ISC) of small and medium-sized enterprises (SMEs) in sub-Saharan Africa (SSA) using Tanzania as a case. To assess the ISC of SMEs, measurement criteria from organizational and environmental dimensions were compiled from the literature. A combination of quantitative and qualitative methods was employed to collect data. The ISC dimensions were assessed using surveys collected using both paper and online sources, from 39 SMEs in the roundtable and five focus group discussions. The findings indicated lack of information security policy, absence of security education, training and awareness (SETA) programs, lack of human resource, poor risk assessment, and management and lack of national information security culture initiatives. These findings show the immaturity of ISC in SMEs in Tanzania. The results and implications of these findings suggest further research and intervention is necessary to institutionalize ISC in the SME environment.",

author = "Zainab Ruhwanya and Jacques Ophoff",

year = "2019",

month = jun,

day = "4",

doi = "10.1007/978-3-030-18400-1_63",

language = "English",

isbn = "9783030183998",

volume = "1",

series = "IFIP Advances in Information and Communication Technology (IFIP AICT)",

publisher = "Springer",

pages = "776--788",

editor = "Petter Nielsen and Kimaro, {Honest Christopher}",

booktitle = "Information and communication technologies for development",

note = "15th International Conference on Social Implications of Computers in Developing Countries ; Conference date: 01-05-2019 Through 03-05-2019",

url = "https://2019ifipwg94.net/index.php/important-dates",

}

Ruhwanya, Z & Ophoff, J 2019, Information security culture assessment of small and medium-sized enterprises in Tanzania. in P Nielsen & HC Kimaro (eds), Information and communication technologies for development: strengthening southern-driven cooperation as a catalyst for ICT4D, 15th IFIP WG 9.4 International conference on social implications of computers in developing countries, ICT4D 2019, Dar es Salaam, Tanzania, May 1-3, 2019 : proceedings. vol. 1, IFIP Advances in Information and Communication Technology (IFIP AICT), vol. 552, Springer, Cham, pp. 776-788, 15th International Conference on Social Implications of Computers in Developing Countries, Dar es Salaam, Tanzania, United Republic of, 1/05/19. https://doi.org/10.1007/978-3-030-18400-1_63

Information security culture assessment of small and medium-sized enterprises in Tanzania. / Ruhwanya, Zainab; Ophoff, Jacques.

Information and communication technologies for development: strengthening southern-driven cooperation as a catalyst for ICT4D, 15th IFIP WG 9.4 International conference on social implications of computers in developing countries, ICT4D 2019, Dar es Salaam, Tanzania, May 1-3, 2019 : proceedings. ed. / Petter Nielsen; Honest Christopher Kimaro. Vol. 1 Cham : Springer, 2019. p. 776-788 (IFIP Advances in Information and Communication Technology (IFIP AICT); Vol. 552).

Research output: Chapter in Book/Report/Conference proceeding › Chapter

TY - CHAP

T1 - Information security culture assessment of small and medium-sized enterprises in Tanzania

AU - Ruhwanya, Zainab

AU - Ophoff, Jacques

PY - 2019/6/4

Y1 - 2019/6/4

N2 - This study explores the status of information security culture (ISC) of small and medium-sized enterprises (SMEs) in sub-Saharan Africa (SSA) using Tanzania as a case. To assess the ISC of SMEs, measurement criteria from organizational and environmental dimensions were compiled from the literature. A combination of quantitative and qualitative methods was employed to collect data. The ISC dimensions were assessed using surveys collected using both paper and online sources, from 39 SMEs in the roundtable and five focus group discussions. The findings indicated lack of information security policy, absence of security education, training and awareness (SETA) programs, lack of human resource, poor risk assessment, and management and lack of national information security culture initiatives. These findings show the immaturity of ISC in SMEs in Tanzania. The results and implications of these findings suggest further research and intervention is necessary to institutionalize ISC in the SME environment.

AB - This study explores the status of information security culture (ISC) of small and medium-sized enterprises (SMEs) in sub-Saharan Africa (SSA) using Tanzania as a case. To assess the ISC of SMEs, measurement criteria from organizational and environmental dimensions were compiled from the literature. A combination of quantitative and qualitative methods was employed to collect data. The ISC dimensions were assessed using surveys collected using both paper and online sources, from 39 SMEs in the roundtable and five focus group discussions. The findings indicated lack of information security policy, absence of security education, training and awareness (SETA) programs, lack of human resource, poor risk assessment, and management and lack of national information security culture initiatives. These findings show the immaturity of ISC in SMEs in Tanzania. The results and implications of these findings suggest further research and intervention is necessary to institutionalize ISC in the SME environment.

U2 - 10.1007/978-3-030-18400-1_63

DO - 10.1007/978-3-030-18400-1_63

M3 - Chapter

SN - 9783030183998

VL - 1

T3 - IFIP Advances in Information and Communication Technology (IFIP AICT)

SP - 776

EP - 788

BT - Information and communication technologies for development

A2 - Nielsen, Petter

A2 - Kimaro, Honest Christopher

PB - Springer

CY - Cham

T2 - 15th International Conference on Social Implications of Computers in Developing Countries

Y2 - 1 May 2019 through 3 May 2019

ER -

Ruhwanya Z, Ophoff J. Information security culture assessment of small and medium-sized enterprises in Tanzania. In Nielsen P, Kimaro HC, editors, Information and communication technologies for development: strengthening southern-driven cooperation as a catalyst for ICT4D, 15th IFIP WG 9.4 International conference on social implications of computers in developing countries, ICT4D 2019, Dar es Salaam, Tanzania, May 1-3, 2019 : proceedings. Vol. 1. Cham: Springer. 2019. p. 776-788. (IFIP Advances in Information and Communication Technology (IFIP AICT)). https://doi.org/10.1007/978-3-030-18400-1_63