Cybersecurity readiness in local government authorities: A case study of municipal councils in Tanzania’s Dar es Salaam region

Abstract

Local Government Authorities (LGAs) in Tanzania have increasingly relied on shared ICT infrastructure, which heightens exposure to cyber risks. This study examines how cybersecurity policies, risk management, human factors, and technology and infrastructure shape cybersecurity readiness in five Dar es Salaam Municipal Councils, while also assessing the mediating role of Cybersecurity Implementation Effectiveness (CIE). An exploratory qualitative design was employed, with purposive sampling of 25 ICT staff and system administrators. Data were collected through semi-structured interviews and documentary reviews, and thematically analysed with codes formulated into themes. The findings reveal that readiness is associated with clear government and internal policies, active risk management, human-factor enablers such as staff training and user compliance, and infrastructure sophistication, including security tools and backup systems. However, these determinants translate into higher readiness only where implementation is effective—through regular audits, continuous training, enforcement, timely updates, and practiced incident-response drills. Respondents also identified obsolete systems and inconsistent policy adherence as critical barriers. The study concludes that strong policies, skilled personnel, and advanced infrastructure are necessary but insufficient without effective implementation, making CIE the decisive factor in turning plans into real preparedness. The study recommends that LGAs institutionalize audits and compliance checks, invest in sustained staff training, manage system life-cycles to retire outdated assets, and allocate dedicated budgets for cybersecurity tooling and capability development.