Assessing Cybersecurity Preparedness for Enhanced Digital Transformation; A Case of Selected Public TVET Institutions in Kenya

Technical and Vocational Education and Training (TVET) institutions play a pivotal role in equipping the Kenyan workforce with the knowledge, skills and competencies required in the digital era. The increasing digitalization of institutional procedures and the extensive adoption of technologies have exposed TVET institutions to cybersecurity threats. These threats compromise institutional integrity, protection of data and sensitive information, and disrupt teaching and learning processes. This study assessed cybersecurity preparedness in selected public TVET institutions in Kenya by investigating the internal cybersecurity policies, practices, technologies, incident response and recovery procedures of identifying existing vulnerabilities and areas of improvement. The study embraced mixed-methods research approach, integrating quantitative surveys with qualitative interviews involving the key stakeholders. Random sampling techniques was used to select fifty TVET institutions, questionnaires were used as data collection tools.
The findings revealed some TVET institutions had made significant progress in developing and implementing internal cybersecurity policies and controls. The study also found that many institutions were inadequately prepared to address advancing cyber threats. Key challenges identified by the researcher include the absence of comprehensive cybersecurity preparedness strategies, insufficient financial and technical resources, limited staff in-service training, and inadequate cybersecurity awareness programmes. The recommendations were; TVET institutions to develop comprehensive internal cybersecurity strategies and policies, management to ensure implementation of the policies, conduct regular cybersecurity risk assessments, strengthen incident retort and recovery competences, and ensure continuous cybersecurity preparedness and capacity-building programmes for staff and students. This measures will ensure safeguarding of institutional data and information, protect critical information technology resources, and enhance digital transformation.

Cyber Security, Digital Transformation, Preparedness, TVET.

1. Aliyu, A., Maglaras, L., He, Y., Yevseyeva, I., Boiten, E., Cook, A., & Janicke, H. (2020). A Holistic Cybersecurity Maturity Assessment Framework for Higher Education Institutions in the United Kingdom. Applied Sciences, 10(10), 3660. [Google Scholar] [Crossref]

2. Creswell, J. W., & J. David Creswell. (2023). Research design: Qualitative, quantitative, and mixed methods approaches (6th ed.). SAGE Publications. [Google Scholar] [Crossref]

3. Kiarie, N. (2024). Enhancing Digital Resilience: A Cybersecurity Readiness Assessment of Kenyan TVET Institutions. Journal of the Kenya National Commission for UNESCO, 5(1). https://doi.org/10.62049/jkncu.v5i1.191 [Google Scholar] [Crossref]

4. Koros, H. K., Imbwaga, M. S., & Malaki, H. L. (2024). Opportunities and Challenges of Skills Development using AI. KJ-TVET, 7(1). [Google Scholar] [Crossref]

5. KPMG, (2022). Africa cyber security outlook - KPMG South Africa. KPMG. https://kpmg.com/za/en/home/insights/2022/09/africa-cyber-security-outlook-report-2022.html [Google Scholar] [Crossref]

6. Mugenda, O. M., & Mugenda, A. G. (2003). Research Methods: Quantitative and Qualitative Approaches. Nairobi: Acts Press [Google Scholar] [Crossref]

7. Musila, G. (2023). The State of Cybersecurity in Africa: Current Concerns and Challenges. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4539841 [Google Scholar] [Crossref]

8. National Kenya Computer Incident Response Team Coordination Centre (National KE-CIRT/CC). (2022). National Cybersecurity Strategy 2022–2027. National Cybersecurity Strategy 2022–2027 [Google Scholar] [Crossref]

9. Owino, B., Oduor, C., & Chege, G. (2025). An Empirical Assessment of Cybersecurity Maturity in Higher Learning Institutions. Kabarak Journal of Research & Innovation, 15(2). [Google Scholar] [Crossref]

10. Robert Parua, & Wenming Yang. (2024). The driving logic of digital transformation in TVET. Vocational and Technical Education, 1(2), e17. https://doi.org/10.54844/vte.2024.0590 [Google Scholar] [Crossref]

11. Rotich, E. K. (2020). Cyber Terrorism and National Security in Africa: A Case Study of Kenya (Doctoral dissertation, university of Nairobi). [Google Scholar] [Crossref]

12. Sabillon, R., Bermejo Higuera, J. R., Cano, J., Bermejo Higuera, J., & Sicilia Montalvo, J. A. (2024). Assessing the Effectiveness of Cyber Domain Controls When Conducting Cybersecurity Audits: Insights from Higher Education Institutions in Canada. Electronics, 13(16), 3257. [Google Scholar] [Crossref]

13. Sang, M. (2023). An Appraisal of Kenya’s National Cybersecurity Strategy 2022: A Comparative Perspective. https://ict.go.ke/wp- [Google Scholar] [Crossref]

14. TVET CDACC, (2025). Competency Based Curriculum for Information Communication Technology KNQF Level 6. Nairobi: TVET Curriculum Development, Assessment and Certification Council. [Google Scholar] [Crossref]

• Smart Iot Device for Weather And Health
• Merlarchive: A Web-Based Academic Hub for UDM With AI-Powered Natural Language Processing
• Enhanced Social Network Security System: Integrating Biometric Authentication for Improved User Verification and Privacy Protection
• Smart Budget Allocation in Public Policy: A Data-Driven Approach for Equitable Resource Distribution
• Decision Support System for Faculty Selection, Promotion, and Reclassification Using Predictive Analytics