The Quality of Information Systems Security Policies in Addressing Information Security Challenges in Public Higher Learning Institutions in Tanzania

Abstract

Information and data in Higher Learning Institutions must be protected from attacks and secured from illegal access, unwanted interruptions, and unauthorised alteration or inhalation. Many institutions fall victim to such attacks due to weak information system security policies. Also, employees' disruption of these information system security policies can cause information technology vulnerabilities and lead to information security threats.

Through qualitative methodology, thematic and descriptive analyses were used to review ICT/ information system security policies to determine their quality in addressing information security challenges in public higher learning institutions in Tanzania. A sample of eight public higher learning institutions was used. Common themes included password management, email use principles, disaster handling and recovery, hardware and software management, and information handling. The study found that the security level of these elements varied among focused areas due to a need for more information system security policy awareness and compliance.

This study proposes using a harmonised information system security policy framework for all public higher learning institutions while maintaining good control through government agencies and appropriate training and awareness programs. The study also emphasises the need for policy review every four years so that these institutions’ Information System Security policies remain current and proactive in their use/ Also to accommodate new technological changes that bring new information system security threats.