Information Security and Performance at Kenya Power

Abstract

The value of information goes beyond the written words and numbers: knowledge, concepts, ideas and brands are examples of intangible forms of information. Information security is achieved by implementing a suitable set of controls, including policies, processes, procedures, organizational structures, software and hardware functions.IS investments such as security are commonly believed to have a positive effect on a firm’s profitability, however quantifying the positive effect of information security investment on performance has proven to be difficult to determine. This study aimed at establishing the relationship between information security and organizational performance at Kenya power. Other objectives of the study included: to determine the extent to which Kenya Power has secured its information assets and to establish barriers to the provision of information security at the organization. A simple random sampling was used to identify 97 employees at Kenya power coast region from various departments. Data was collected from the respondents using a questionnaire. The study found out that extent to which Kenya power has secured its information assets includes the existence of an information security policy though, a large number of users (63%) do not know its contents and some are not trained (54%), also controls are in place to protect information and information processing equipment from power failures and fluctuations. The barriers the company faces to the provision of information security include: user trying to change the security settings of the computer they work on, downloading software from an unsecure site on the wed, writing passwords down and sharing password(s) with other people. Pearson correlation analysis was used to study the relationships between the variables. Independent t-tests (2-tailed) and ANOVA test were used to determine the level of significance. According to the results of the study, there is a weak relationship between information security and organizational performance. The study hopes to add to the body of academic knowledge in the public institutions in Kenya where information repository is a resource.