Effectiveness of Cyber Security Practices on Prevention of Data Attacks in Public Organizations:

Abstract

In many public organizations there have been reported some data attack incidents. These attacks cause reputational damage, theft as well as financial losses. This problem has made public organizations including adopting various cyber security practices to prevent data attacks. This study assessed the effectiveness of cyber security practices on prevention of data attacks in public organization a case of Tanzania Revenue Authority, Arusha regional office. Descriptive survey research design and quantitative research approach was used. Stratified sampling technique was used to select sample of 65. Data were collected through structured questionnaires. Descriptive statistics such as mean and standard deviation was used to analyze data. Validity and reliability of data collection tools was ensured. Findings revealed that TRA had best existing cyber security practices. This is because the authority is responsible in gathering and keeping sensitive data for the customers and government as well thus best cyber security practices are essential for prevention of data attacks. The study further revealed that the user’s awareness of cyber security practices on prevention of data attacks was high at TRA. Moreover, the study shows that being custodian of sensitive data, Tanzania Revenue Authority, Arusha regional office had adequate initiatives and strategies to prevent data from attacks. One of the best practices to ensure data safety was through having technical support on cyber security practices. The study recommends that due to the rapid changing of technology, Tanzania Revenue Authority should prevent risks from various sources, including: internet-borne attacks, such as spyware or malware, user-generated weaknesses such as easily guessed passwords or misplaced information, inherent system or software flaws and vulnerabilities and subvert system or software features. The study further recommends TRA should maintain its control access to data and systems to make sure that individuals can only access data and services for which they are authorized. The study further recommends TRA should ensure that they use up to date software since the cyber-attacks happen because the systems or software are not fully up to date, leaving weaknesses. So cybercriminals exploit these weaknesses to gain access to the network. Once they are in it’s often too late to take preventative action. To counteract this, it is smart to invest in a patch management system that will manage all software and system updates, keeping the system resilient and up to date