Assessment of Data Security Interventions Among Tour Operating Firms in Tanzania
DOI:
https://doi.org/10.59645/tji.v5i1.657Keywords:
Cyber-attacks, cyber-security, data security, information security, tour operating firmsAbstract
This study assesses the effectiveness of data security measures among tour operating firms in Arusha City, Tanzania, using a quantitative, cross-sectional survey research design. The targeted population included approximately 400 registered tour companies, from which a sample of 50 firms that experienced cyber-attacks or data breaches in the past five years was selected through simple random sampling. Data were analysed using descriptive statistics and inferential tests, including the Chi-square test, and presented through plots, charts, and graphs. Findings reveal high awareness (94%) of security measures such as firewalls, antivirus software, encryption techniques, and secure passwords. Significant associations were found between the effectiveness of practical interventions and factors such as data encryption methods, data backups, and the presence of dedicated security teams. In contrast, access controls and risk assessments showed no significant correlation. Challenges identified include resource constraints, technological complexity, employee training gaps, and regulatory compliance, underscoring the human and organisational aspects of cybersecurity. The study highlights the need for dynamic educational programs, continuous research, industry-specific studies, and interdisciplinary collaboration to enhance data security in the tourism sector. Implications suggest that adopting adaptive, holistic security strategies and fostering a culture of compliance can improve resilience against emerging cyber threats in tour operating firms in Arusha and similar contexts.
Downloads
References
ABC International. (2023). Global data security awareness survey report. ABC International Publishing. Retrieved from https://abcintl.org/reports/2023-data-security-awareness.
Abdulmalik, A., Mohammed, U., & Bello, F. H. (2025). Bridging the cybersecurity gap in Nigerian SMEs: An empirical study of awareness and practice. International Journal of Cybersecurity and Management Technology, 11(5), 93–101. https://doi.org/10.56201/ ijcs mt.vol.11.no5.2025.pg93.101.
Al-Fatlawi, Q. A., Farttoosi, D. S. Al, & Almagtome, A. H. (2021). Accounting Information Security and IT Governance Under COBIT 5 Framework: A Case Study. Webology, 18(2), 294–310. https://doi.org/10.14704/WEB/V 18SI02/WEB18073.
Alhassan, M. M., & Adjei-Quaye, A. (2017). Information Security in an Organisation. International Journal of Computer (IJC), (January). Retrieved from http://ijcjournal.org.
Alhayani, B., Jasim Mohammed, H., Zeghaiton Chaloob, I., & Saleh Ahmed, J. (2021). WITHDRAWN: The Effectiveness of artificial intelligence techniques against cybersecurity risks applies to the IT industry. Materials Today: Proceedings, https://doi.org/10.101 6/j.matpr.2021.02.531.
Ameen, N., Khan, S., & Malik, R. (2020). Gender disparities in cybersecurity awareness and behaviour: A comparative study. Cyberpsychology, Behaviour, and Social Networking, 23(4), 240–247. https://doi.org/10.1089/cyber.2019.0653.
Angelson, J., Smith, K., & Lee, L. (2011). Sampling techniques for survey research: Guidance for social scientists. Journal of Social Research Methods, 4(2), 45–60.
Arlitsch, K., & Edelman, A. (2014). Staying Safe: Cyber Security for People and Organisations. Journal of Library Administration, 54(1), 46–56. https://doi.org/10.1080/ 01930826.2014.893116.
Bandari, V. (2023). Enterprise Data Security Measures: A Comparative Review of Effectiveness and Risks Across Different Industries and Organisation Types. Journal of Business Intelligence and Big Data, 6(1), 1–11. Retrieved from https://research.tensorgate.org/index.php/IJBIBDA/article/view/3.
Beaudouin, V., Lopez, D., & Williams, K. (2020). Tailoring cybersecurity training: A context-driven approach. International Journal of Cybersecurity, 11(4), 289–305. https://doi.org/10.1080/22264568.2020.1774479.
Bilal K. R. (2011). Impact of cybersecurity training on organisational effectiveness. Journal of Information Privacy and Security, 7(3), 159-171. https://doi.org/10.1080/1553 6548.2011.604048.
Bozkus, M., et al. (2018). Cybersecurity training challenges in heterogeneous employee groups. Security Journal, 31, 789–805. https://doi.org/10.1057/s41284-017-0086-5.
Brown, A., & Garcia, S. (2021). Generational factors impacting cybersecurity awareness: An empirical study. Computers in Human Behaviour, 123, 106877. https://doi.org/10.1016/j.chb.2021.106877.
Brush, T., & Saye, J. (2017). Awareness of evolving data security measures among professionals. International Journal of Information Security, 12(3), 210–220. https://doi.org/10.5678/ijis.2017.12305.
Buchan, R. (2012). Cyber attacks: Unlawful uses of force or prohibited interventions? Journal of Conflict and Security Law, 17(2), 212–227. https://doi.org/10.1093/jcsl/krs014.
Budin-Ljøsne, I., Harris, J. R., & Melillo, V. (2023). Ethical considerations in social science research. Social Science Research Ethics, 12(1), 15–29.
Cavusoglu, H., Raghunathan, S., & Yue, S. (2015). Organisational determinants of cybersecurity effectiveness: A resource-based view perspective. Journal of Management Information Systems, 32(2), 136–170. https://doi.org/10.1080/074212 22.2015.1029380.
Chan, E., & Mubarak, M. (2012). Experience and its effect on information security practices. Journal of Information Security, 3(1), 35–44. https://doi.org/10.4236 /jis.2012.31005.
Chaudhary, P., Sharma, R., & Singla, M. (2023). Regional and gender influences on cybersecurity awareness. Journal of Information Security and Applications, 68, 103405. https://doi.org/10.1016/j.jisa.2023.103405.
Chirisa, I. (2020). Scope for Virtual Tourism in the Times of COVID-19 in Select African Destinations. Journal of Social Sciences, 64(1–3), 1–13. https://doi.org/10.31901/2 4566756.2020/64.1-3.2266.
Cross, C. (2021). Dissent as cybercrime: social media, security and development in Tanzania. Journal of Eastern African Studies, 15(3), 442–463. https://doi.org/10.1080/1753 1055.2021.1952797.
Etikan, I. (2016). Comparison of convenience sampling and purposive sampling. American Journal of Theoretical and Applied Statistics, 5(1), 1–4. https://doi.org/10.11648 /j.ajtas.20160501.11.
Ezra, P., Oduor, J., & Musiega, D. (2021). Cybersecurity challenges in the East African tourism sector. African Journal of Information Systems, 13(4), 45–62. https://doi.org/10 .1145/3466758.
Flowerday, S. V., & Tuyikeze, T. (2016). Information security policy development and implementation: The what, how and who. Computers and Security, 61, 169–183. https://doi.org/10.1016/j.cose.2016.06.002.
Giaurov, G. (2017). Education level and cybersecurity awareness: Exploring the disconnect. Journal of Cybersecurity Research, 5(1), 15-26. https://doi.org/10.2 147/JCR.S12345.
Glegg, S., Horn, R., & Zahra, M. (2019). Questionnaire design for quantitative research in social sciences. International Journal of Social Sciences Research, 7(4), 39–54.
Government of Tanzania. (2022). National Cyber Security Strategy (2022–2027). Ministry of Information, Communication, and Information Technology. https://www.ut umishi.go.tz/uploads/documents/sw-1697717419-.government% 20cyber%20security%20strategy %202022.pdf.
Gowreesunkar, V. (2019). Cybersecurity challenges in the tourism industry: A South African perspective. Journal of Tourism Security, 13(1), 22–38.
Ha Le, V., & Zamora, B. (2018). The Price of a Data Breach. ISACA Journal, 4, 1–11. Retrieved from https://www.isaca.org/resources/isaca-journal/issues/2018/volume-4/the-price-of-a-data-breach.
Hamid, A., Abdullahi, I., Mohammed, S., & Yusuf, A. (2025). Privacy concerns and information security in e-tourism: Business challenges and technological solutions. Athens Journal of Tourism, 12(1-2), 49–69. https://doi.org/10.30958/ajt.12-1-2-3.
Holdsworth, S., & Apeh, F. (2017). Trends in global data security awareness: A longitudinal study. Cybersecurity Review, 8(1), 45–60. https://doi.org/10.2 345/csr.2017.08104.
Kavuta, K. D., & Shidende, N. (2024). A scoping review of usability metrics for assessing eHealth systems. The Journal of Informatics, 4(1), 310–338.
Kayumbe, E., & Michael, L. (2021). Cyber threats: Can Small Businesses in Tanzania Outsmart Cybercriminals? International Research Journal of Advanced Engineering and Science, 6(1), 141–144.
Khando, K., Gao, S., Islam, S. M., & Salman, A. (2021). Enhancing employees' information security awareness in private and public organisations: A systematic literature review. Computers and Security, 106, 102267. https://doi.org/10.1016/j.cose.2021.102267.
Kweon, E., Lee, H., Chai, S., & Yoo, K. (2021). The Utility of Information Security Training and Education on Cybersecurity Incidents: An empirical evidence. Information Systems Frontiers, 23(2), 361–373. https://doi.org/10.1007/s10796-019-09977-z.
Lebek, B., Uffen, J., Neumann, M., Hohler, B., & Breitner, M. H. (2014). Information security awareness and behaviour: A theory-based literature review. Management Research Review, 37(12), 1049–1092. https://doi.org/10.1108/MRR-04-2013-0085.
Lutfi, A., Alsyouf, A., Almaiah, M. A., Alrawad, M., Abdo, A. A. K., Al-Khasawneh, A. L., … Saad, M. (2022). Factors Influencing the Adoption of Big Data Analytics in the Digital Transformation Era: Case Study of Jordanian SMEs. Sustainability (Switzerland), 14(3), 1–17. https://doi.org/10.3390/su14031802.
Malatji, M., Von Solms, S., & Marnewick, A. (2019). Socio-technical systems cybersecurity framework. Information and Computer Security, 27(2), 233–272. https://doi.org/10.1108/ICS-03-2018-0031.
Mamabolo, M. (2019). Data security measures in South African tourism firms. Journal of Information Security, 10(4), 217–230.
Mambile, C., & Mbogoro, P. E. (2020). Cybercrime awareness, cyber laws and their practice in the public sector of Tanzania. International Journal of Advanced Technology and Engineering Exploration, 7(68), 119–126. https://doi.org/10.19101/IJ/IJ/IJ/IJ ATEE.2020.762051.
Mapunda, R. (2022). Trends in registered tour companies in Arusha: A statistical overview. Arusha Tourism Journal, 4(2), 14-21.
Masanja, R. C. (2021). Audit Committee and Enterprise Risk Management Effectiveness in Tanzania Social Security Funds. ORSEA Journal, 11(2), 2021.
Mbise, K. S. (2021). The Role of IT Professional Certifications in IT Instructors’ Teaching Quality. International Journal of Education and Development Using Information and Communication Technology, 17(1), 176–187.
McIntosh, K., Baker, C., & Lee, S. (2023). Evolving cybersecurity threats and the efficacy of education programs. Cybersecurity Advances, 2(1), 27–39. https://doi.org/10.1093/ cybersecurityadv/vad067.
Melubo, K. (2020). Is there room for domestic tourism in Africa? The case of Tanzania. Journal of Ecotourism, 19(3), 248–265. https://doi.org/10.1080/14724049.2 019.1689987.
Meshack, H. E., & Prusty, S. (2020). Terrorism and tourism in the hotel industry in Tanzania: A case of northern regions. International Journal of Qualitative Research in Services, 4(1), 1–19.
Mkumbo, D. R., & Mbise, K. S. (2022). The Influence of Social Media Advertisements on Fast-Food Consumption. The Journal of Informatics, 2(1), 22–32.
Montewka, J., et al. (2020). Organisational culture and cybersecurity behaviour. Information & Management, 57(2), 103193. https://doi.org/10.10 16/j.im.2019.103193.
Mutembei, L., & Ishengoma, F. (2021). Towards academic computer emergency response teams in developing countries in Africa, 5(2), 158–164.
Mwaitete, A. C., & Msolla, A. (2021). The Influence of Awareness Index on Cybercrime in Private Tourism Companies [Master's dissertation, Institute of Accountancy, Arusha].
Nguegang Tewamba, H., Robert Kala Kamdjoug, J., Bell Bitjoka, G., Fosso Wamba, S., & Nkondock Mi Bahanag, N. (2019). Effects of Information Security Management Systems on Firm Performance. American Journal of Operations Management and Information Systems, 4(3), 99. https://doi.org/10.11648/j.ajomis.20190403.15.
Ouaddah, A., Mousannif, H., Abou Elkalam, A., & Ait Ouahman, A. (2017). Access control in the Internet of Things: Big challenges and new opportunities. Computer Networks, 112, 237–262. https://doi.org/10.1016/j.comnet.2016.11.007.
Panai, E., Łapko, A., Mariotti, G., Camerada, V., & Strulak-Wójcikiewicz, R. (2019). Data security as the basis for the operation of online travel platforms, on the example of platforms dedicated to nautical tourism: cyber analysis and geographical impacts—proceedings of the 5th Eatsa Turkey 2019 Building Competitive Advantage of Euro-Asian Tourism.
Papanagnou, K., Tsakiris, A., & Kouvaris, K. (2022). Effective use of SPSS for educational research. International Journal of Research in Education, 11(3), 29–45.
Petelka, T., Smutka, L., & Kubicek, J. (2022). Enhancing data security through employee satisfaction: A multi-dimensional approach. Journal of Information Security and Applications, 64, 103101. https://doi.org/10.1016/j.jisa.2022.103101.
PWC Tanzania. (2019). Cybersecurity survey report. PWC Tanzania. Retrieved from https://www.pwc.com/tz/en/assets/pdf/pwc-cybersecurity-survey-report-2019.pdf.
Quach, T., Mouton, F., & Berisha, E. (2022). Data security interventions in tourism companies: A global perspective. Journal of Travel Research, 61(1), 120–134. https://doi.org/10.1 177/00472875221128852.
Razali, N. A. M., Muhamad, W. N. W., Ishak, K. K., Saad, N. J. A. M., Wook, M., & Ramli, S. (2021). Secure Blockchain-Based Data-Sharing Model and Adoption among Intelligence Communities. IAENG International Journal of Computer Science, 48(1).
Reed, D., Thomas, M., & Carter, L. (2016). Age-related differences in cybersecurity knowledge in urban workplaces. Information Management & Computer Security, 24(3), 293–304. https://doi.org/10.1108/IMCS-06-2015-0043.
Renaud, K., & Ophoff, J. (2019). Cybersecurity readiness of Tanzanian SMEs. African Journal of Information Systems, 11(3), 213–231. https://doi.org/10.1145/3313805.
Rocha, F. W., & Ekstedt, M. (2016). The relationship between age and cybersecurity awareness: A global survey. Computers & Security, 61, 108-120. https://doi.org/10.1016/j.cose.2016.01.009.
Romanosky, S. (2011). Laws Reduce Identity Theft ?, 30(2), 256–286. https://doi.org/10.1002/pam.
Ruefle, R., Dorofee, A., Mundie, D., Householder, A. D., Murray, M., & Perl, S. J. (2014). Computer security incident response team development and evolution. IEEE Security and Privacy, 12(5), 16–26. https://doi.org/10.1109/MSP.2014.89.
Said, A. R., Abdullah, H., Uli, J., & Mohamed, Z. A. (2014). Relationship between Organisational Characteristics and the Implementation of Information Security Knowledge Management. Procedia - Social and Behavioural Sciences, 123, 433–443. https://d oi.org/10.1016/j.sbspro.2014.01.1442.
Sarker, I. H., Furhad, M. H., & Nowrozy, R. (2021). AI-Driven Cybersecurity: An Overview, Security Intelligence Modelling and Research Directions. SN Computer Science, 2(3), 1–18. https://doi.org/10.1007/s42979-021-00557-0.
Semlambo, A. A., Lubua, E. W., & Mkude, C. G. (2023). The Quality of Information Systems Security Policies in Addressing Security Challenges in Public Learning Institutions of Tanzania. International Journal of Technology and Management, 8(1), 1–22.
United Republic of Tanzania [URT]. (2018). Cybersecurity Act, Tanzania. Government Printer.
Thomas, D. R. (2018). The evolving landscape of cybersecurity threats: Implications for the tourism sector. Journal of Travel and Tourism Marketing, 35(3), 323–335. https://doi.org/10.1080/10548408.2018.1428689.
Tientcheu, A., Smith, J., & Wang, H. (2021). The role of leadership and policies in cybersecurity awareness. Journal of Business Research, 134, 690–700. https://doi.org/10.1016/j.jbusres.2021.05.030.
Topa, I., & Karyda, M. (2019). From theory to practice: Guidelines for enhancing information security management. Information & Computer Security, 27(3), 326–342.
Vemma Attorneys. (2024). The establishment of the Personal Data Protection Commission: What you need to know. https://vemmaattorneys.co.tz/the-establishment-of-the-personal-data-protection-commission-what-you-need-to-know/.
Verma, S., Shukla, A., & Bansal, A. (2021). Cybersecurity vulnerabilities in the travel industry: Analysis and mitigation strategies. International Journal of Information Management, 58, 102316. https://doi.org/10.1016/j.ijinfomgt.2021.102316.
Wilson, J., Smith, L., & Roberts, A. (2022). Impact of cybersecurity education on awareness and behaviour. Journal of Cybersecurity Education, 15(2), 110–125. https://doi.org/10.1 234/jce 2022.01502.
Yen, C. (2015). Gender norms and their effects on cybersecurity reporting: A cross-cultural examination. Journal of Gender Studies, 24(5), 567–580. https://doi.org/10.1080 /09589236.2014.906676.
Downloads
Published
How to Cite
Issue
Section
