Assessing the Methods and Difficulties of Incorporating Software Security Testing into System Development Process in Tanzania's Public Sector

ABSTRACT: In recent years, the public sector in Tanzania, like many others globally, has continued to embrace digital transformation, facilitating the modernization of online public services and enhancing government operations. However, the complexity and interconnectedness of these systems raise concerns about their vulnerability to cyber threats, as security testing is often neglected during the development process. This oversight can lead to the deployment of systems with security flaws that compromise data, disrupt services, and erode public trust. While previous studies have focused on integrating security into the software development life cycle, none has specifically evaluated the challenges of embedding security testing into public sector systems. Therefore, this study aims to fill this gap by examining the current practices and challenges of integrating security testing early in the development lifecycle within Tanzania's public sector. Using a mixed-method approach, data were collected from 104 ICT managers, security officers, software developers, and systems administrators through surveys, with analysis focusing on practices and perceptions using descriptive statistics. The findings reveal that only 6.7% of public organizations have fully integrated security testing, while over 38% report little to no integration, highlighting significant gaps that leave systems vulnerable to cyber threats. Satisfaction with current security testing integration is low, with over 60% of respondents dissatisfied, indicating substantial challenges in implementing effective practices. Key obstacles identified include a lack of skilled personnel, inadequate resources, time constraints, and insufficient management support, indicating a need for targeted interventions. Hence, the study points out key recommendations to address this gap.