01_Cybersecurity_Paper_Malawi

Abstract Cybersecurity resilience among organizations in Malawi remains under-researched despite growing digital fraud, ransomware, and social-engineering threats. This exploratory study investigated cybersecurity awareness, adoption of baseline security controls (multi-factor authentication and data backups), incident experience, and perceived barriers among professionals working in Malawian organizations. An anonymous convenience-sampled survey was distributed via KoboToolbox. From 25 raw submissions, five responses were excluded for failing eligibility criteria, yielding a final analytic sample of n = 20 eligible respondents. Descriptive analysis revealed that most respondents rated their organization's cybersecurity awareness as only moderate (50%). While formal training was rare—with only 25% receiving training in the past 12 months—self-reported adoption of technical controls was notably higher: multi-factor authentication (75%) and regular data backups (85%). Alarmingly, 40% of respondents reported a cybersecurity incident within the past three years, and an additional 35% were unsure. The most frequently cited barrier to improvement was a lack of in-house cybersecurity expertise (50%), ahead of cost (30%). Findings indicate that while technical safeguards are commonly utilized within this sample, foundational awareness, training, and incident visibility lag significantly. For resource-constrained Malawian organizations, this study highlights the need to prioritize low-cost, expertise-substituting interventions—such as shared regional advisory resources, vendor-default security configurations, and free national guidance via MACRA/mwCERT—to build robust digital resilience. Data Availability Statement All raw survey data, the KoboToolbox survey instrument, and calculation spreadsheets are published alongside this paper on Zenodo, allowing full verification of all findings. Research Quality Audit All statistics were recomputed directly from raw CSV export rather than initial summaries. Eligibility screening reduced sample from n = 25 to n = 20, transparently disclosed. Sample includes mixed organization sizes and sectors; findings are exploratory only. No inferential statistics reported. All literature citations are verifiable. Related Publications This paper forms the third publication in a research series on cybersecurity and digital resilience in Malawi, following: Securing Digital Transformation: Lessons from the February 2024 Ransomware Attack on Malawi's Immigration Service Low-Tech, High-Impact: The Maula Prison SIM and Mobile Money Fraud Model — How Psychological Manipulation and Systemic Gaps Enable Mass Scams in Malawi