Cybersecurity Posture of Higher Learning Institutions in Tanzania

In a bid to become a middle-income country by 2025, the Government of the United Republic of Tanzania promoted the productive use of ICT for rapid development, which is why Higher Learning Institutions (HLIs) adopted information systems to handle admission matters. Urgent response to directives without enforcing credible cybersecurity measures is a massive security vulnerability that cyber attackers can exploit. This study assessed the cybersecurity preparedness of HLIs in protection, detection, and response to cyber-attacks using the NIST cybersecurity framework. To achieve this objective, a qualitative method and an interpretive research approach were adopted. The target population was four (4) Higher Learning Institutions located in Arusha Municipality. A purposive sampling technique was used due to an inadequate number of cybersecurity experts in the population. Empirical data were collected using semistructured, face-to-face interviews, documentary reviews, observation, penetration testing and analyzed using content analysis. Despite implementing minimal countermeasures, the study discovered that Higher Learning Institutions are vulnerable to cyber-attacks. Higher Learning Institutions must be vigilant by; addressing identified weaknesses, providing cybersecurity training to all staff, and continuously monitoring information systems. The study recommends a need to explore the factors affecting cybersecurity preparedness in Higher Learning Institutions.