Guardians of Data: Enhancing Information Security through Comprehensive Staff Training in Tanzania's Prison Services

Abstract

This study examines the effectiveness of information security training among staff in the Ruvuma Region Prisons Service in Tanzania, with a focus on their preparedness to manage cybersecurity risks in a sensitive environment. The target population consisted of 198 employees, including administrative staff, correctional officers, and personnel involved in ICT management. A sample size of 123 respondents was selected using stratified sampling, representing approximately 62% of the total population. Additionally, semi-structured interviews were conducted with 10 staff members directly involved in ICT systems, bringing the total sample size to 133 participants. Data were analysed using both quantitative and qualitative methods: descriptive statistics such as frequencies, means, and standard deviations were used to summarise the quantitative data, while inferential statistics, including correlation and regression analysis, explored relationships between variables. Qualitative data from interviews were thematically analysed to provide deeper insights. The findings revealed that although the training programs equip staff with essential skills, their infrequency and lack of regular updates reduce their effectiveness in addressing evolving cybersecurity threats. Regular, hands-on training and continuous evaluations are recommended to improve information security outcomes.