Abstract:
This research aimed to assess the effectiveness of information system audits in Tanzanian
government agencies, employing a mixed-method research approach that combined
quantitative and qualitative data collection methods. The study focused on evaluating the
frequency of audits, challenges in implementing recommendations, and the overall
effectiveness in managing IT risks. Findings revealed a need for improvement in audit
frequency, emphasising the importance of standardised schedules for comprehensive
assessments. Challenges in implementation, including resource constraints and organisational
resistance, were identified, suggesting a multi-faceted approach involving increased
investment and capacity-building initiatives. The evaluation of audit effectiveness highlighted
strengths and areas for improvement, recommending a proactive risk-based approach aligned
with technological advancements. The study proposed several recommendations, such as
standardised audit frequencies, capacity building, resource allocation, fostering a compliance
culture, and a proactive risk management approach, to enhance information system audit
practices and improve overall cybersecurity in Tanzanian government agencies.
