Enhancing Digital Resilience: A Cybersecurity Readiness Assessment of Kenyan TVET Institutions

Technical and Vocational Education and Training (TVET) institutions play a critical role in preparing the Kenyan workforce for the demands of the digital age. The rapid digitalization and widespread adoption of technology in these institutions poses significant cybersecurity threats, potentially compromising sensitive data, disrupting academic activities, and undermining the overall integrity of these institutions. This study aimed to assess the cybersecurity readiness of TVET institutions in Kenya. It analyzed their existing policies, practices, incident response and recovery procedures to identify potential weaknesses and areas for improvement. The research employed a mixed-methods approach, combining qualitative interviews with key stakeholders along with quantitative surveys distributed across multiple TVET institutions. 50 TVET institutions were randomly selected and questionnaires distributed to the Management and IT personnel in these institutions. 39 questionnaires were returned translating to 78% response rate. The design of the questionnaire was based on the four major cybersecurity elements: people, process, policy, and technology. The findings indicate that while some TVET institutions have made progress in developing and implementing cybersecurity policies, many are still lagging, and vulnerabilities remain prevalent. Several factors contribute to these gaps, including the absence of a comprehensive cybersecurity strategy, limited resources and inadequate training programs. This study recommends the development of robust cybersecurity policies, regular risk assessments and the establishment of security awareness programs. As TVET digital landscape continues to evolve, the implementation of effective cybersecurity measures is paramount to guarantee the protection of information and other IT assets.