Kenya Methodist University crestKENYA METHODIST UNIVERSITYDigital Repository
 

Master of Management Information Systems

Permanent URI for this collectionhttp://41.89.31.6:4000/handle/123456789/317

Welcome to Master of Management Information Systems collection

Browse

Search Results

Now showing 1 - 3 of 3
  • No Thumbnail Available
    Item
    Development of an Integrated Cybersecurity Framework for Mitigating Online Identity Theft and Phishing Among Youth in Westlands Constituency, Nairobi County.
    (2026-10) OGORO ALICE KEMUNTO
    The rapid expansion of digital platforms in communication, finance, education, and public services has heightened exposure to cyber threats, with online identity theft and phishing emerging as major risks. Despite the existence of legal frameworks and cybersecurity awareness initiatives in Kenya, urban youth remain exposed to increasingly sophisticated cyber threats. This study examined the relationships between technology adoption, cybersecurity education, policy awareness, and the mitigation of online identity theft and phishing among youth in Westlands Constituency, Nairobi County. Guided by Routine Activity Theory, the Health Belief Model, Protection Motivation Theory, and Institutional Theory, the study specifically examined the relationship between technology adoption and mitigation of identity theft and phishing; assessed the relationship between cybersecurity education and mitigation; examined the relationship between policy awareness and mitigation; determined the joint predictive contribution of the three factors; and developed a proposed empirically informed cybersecurity framework. The study adopted a descriptive correlational research design with qualitative supplementation and was predominantly quantitative. From a target population of 116,798 youth aged 18–35 years, a sample of 399 respondents was determined, of whom 338 participated in the study, representing a response rate of 84.7%. Data were collected using a structured questionnaire containing closed- and open-ended questions and supplemented by document review. Quantitative data were analysed using descriptive statistics, Pearson correlation analysis, and multiple regression analysis, while qualitative responses were analysed thematically. The findings showed positive and statistically significant relationships between technology adoption, cybersecurity education, policy awareness, and the mitigation of online identity theft and phishing. Cybersecurity education had the strongest standardized predictive contribution, followed by technology adoption and policy awareness. Collectively, technology adoption, cybersecurity education, and policy awareness significantly predicted mitigation of identity theft and phishing, explaining 52.0% of the variation in mitigation outcomes (R2 = .520, F(3, 334) = 120.611, p < .001). Based on these findings, the study developed a proposed empirically informed cybersecurity framework integrating technological safeguards, cybersecurity education, and policy awareness for mitigating online identity theft and phishing among youth in Westlands Constituency. The study concludes that the three dimensions provide complementary contributions to understanding mitigation and recommends strengthening practical cybersecurity education, promoting accessible and user-friendly security technologies, and enhancing awareness of cybercrime policies and reporting mechanisms. The study contributes to knowledge by integrating technological, educational, and policy dimensions within a context-specific framework for understanding the mitigation of online identity theft and phishing among urban youth.
  • Thumbnail Image
    Item
    A Framework for User Involvement in Enterprise Resource Planning System Implementation
    (KeMU, 2023-10) Ngala, Derrick
    The vast majority of firms adopt a complete collection of enterprise resource planning tools and tailor them to their specific operations practices. Despite all of this and ongoing evaluation of the embraced ERP suite, realizing an effective ERP deployment is challenging due to the system's size and complexity. Additionally, failures when it comes to the implementation of ERP have usually been attributed to lack of or inadequate user involvement in the entire process. Using a descriptive research design, the study took place at currently the United Nations Human Settlements Programme in Nairobi, and a sample size of 70 participants was chosen using stratified proportionate sampling. Primary sources with a focus on the drop and pick process provided the data for the study, which was ultimately given to participants via standardized questionnaires. Inferential analysis was used to approximate the predictive model after quantitative analysis provided descriptive statistics. Figures and tables were used to present the results, and narrative analysis from data analysed using SPSS tools. In accordance with the study's findings, it was concluded that there exists a positive and significant relationship between users' functional requirements activities and ERP implementation, as well as positive and significant relationships between users' presentation requirement activities and ERP implementation, significant moderate relationships between users' quality assurance activities and ERP implementation, and significant moderate relationships between users' project management activities and ERP implementation. The study suggests that these entities adopt an ERP framework through establishing users' functional requirements operations policy pronunciation of the role of top management involvement, looking over its business process regulations to take into account different system implementation procedures and related documents, evaluating its current quality assurance operations by Customers in order to meet the planned ERP system demand of the provider, and acquiring and retaining the ERP systems.
  • Thumbnail Image
    Item
    Factors Contributing to Cyber Security Framework in Kenya: A Case Study of Kenyan Telecommunications Companies.
    (KeMU, 2018-09) Ngare, Benson Muriuki
    Modern days have seen an uncontrolled increase in cybercrime, targeting both developing and developed countries and more so the telecommunications sectors. Unfortunately, Cybersecurity frameworks, used by organizations to counter cybercrime, have failed in one way or another to ensure responsive and substantive security in developing countries. There is, therefore, a need for cost-effective and responsive cybercrime framework in the telecommunication sector in developing country. It based on this premise that the present study was carried out. This research sough to assess a cybercrime framework applicable to Kenyan telecommunications sector. The objectives of the research was to examine the cybercrime in telecommunications industry in Kenya; to establish the cybercrime frameworks currently used by telecommunications companies in Kenya and to propose a cybercrime framework applicable to Kenyan situation. The study used descriptive research design in soliciting information in the research of to assess the factors contributing to Cybersecurity Framework in Kenya. The target population was the 121 Information Technology experts in the telecommunications industry in Kenya. The study obtained a sample size of 92 respondents using the Slovin‟s formula The study adopted proportionate stratified random sampling to select the respondents form each company. Data was collected using a structured questionnaire administered using the drop and pick method. The research tool (questionnaire) was first tested for reliability and validity before administration. The study analyzed the data using descriptive analysis to produce descriptive statistics. Thereafter inferential analysis was carried out to establish a study model. The study concludes that personal data protection demands very highly contributes to development of the Cybersecurity framework in Kenyan telecommunications companies; computer use control highly influences the development and adoption of Cybersecurity framework in Kenyan telecommunications companies; content exposure control highly contributes to Cybersecurity framework development in Kenyan telecommunications companies; and data copyright structures highly influences the Cybersecurity framework in Kenyan telecommunications companies. The study reveals that at 0.05 (5%) level of significance, personal data protection demands, computer use control, content exposure control, and data copyright structures are predictors of the Cybersecurity framework in Kenyan telecommunications companies. Each of computer use control and content exposure control has a significant positive relationship with Cybersecurity framework in Kenyan telecommunications companies while personal data protection demands has a moderate significant relationship and data copyright structures has negative insignificant relationship. It was established that 60.000% of change in Cybersecurity framework in Kenyan telecommunications companies is explained by personal data protection demands, computer use control, content exposure control, and data copyright structures. The study recommends that the Kenyan telecommunications companies should; enhance their personal data protection structures to fully protect their clients‟ data; unilaterally review the computer use controls for the adoption of Cybersecurity framework; come together to creation and development of content exposure control based Cybersecurity framework and advocate for strict law as on copyright related offences.