Information Security and Performance at Kenya Power
View/ Open
Date
2015-10Author
Kazungu, Agripa G
Type
ThesisLanguage
enMetadata
Show full item recordAbstract
The value of information goes beyond the written words and numbers: knowledge,
concepts, ideas and brands are examples of intangible forms of information. Information
security is achieved by implementing a suitable set of controls, including policies,
processes, procedures, organizational structures, software and hardware functions.IS
investments such as security are commonly believed to have a positive effect on a firm’s
profitability, however quantifying the positive effect of information security investment
on performance has proven to be difficult to determine. This study aimed at establishing
the relationship between information security and organizational performance at Kenya
power. Other objectives of the study included: to determine the extent to which Kenya
Power has secured its information assets and to establish barriers to the provision of
information security at the organization. A simple random sampling was used to identify
97 employees at Kenya power coast region from various departments. Data was collected
from the respondents using a questionnaire. The study found out that extent to which
Kenya power has secured its information assets includes the existence of an information
security policy though, a large number of users (63%) do not know its contents and some
are not trained (54%), also controls are in place to protect information and information
processing equipment from power failures and fluctuations. The barriers the company
faces to the provision of information security include: user trying to change the security
settings of the computer they work on, downloading software from an unsecure site on
the wed, writing passwords down and sharing password(s) with other people. Pearson
correlation analysis was used to study the relationships between the variables.
Independent t-tests (2-tailed) and ANOVA test were used to determine the level of
significance. According to the results of the study, there is a weak relationship between
information security and organizational performance. The study hopes to add to the body
of academic knowledge in the public institutions in Kenya where information repository
is a resource.
Publisher
University of Nairobi