Data Handling Stages, Access Control and Information Security Practice among Non-Academic Staff in State-owned Polytechnics, Oyo State, Nigeria
No Thumbnail Available
Date
2025-12
Authors
Journal Title
Journal ISSN
Volume Title
Publisher
Lead City University Ibadan
Abstract
Information security serves as the strategic effort to shield data from threats that could compromise its privacy, accuracy, and accessibility. This study investigated the influence of data handling stages, access control and information security practices among Non-Academic staff in Oyo State–owned polytechnics, Nigeria. Traid CIA model, Record Continuum Model and Role-Based Access Control Model guided the study. The study used a descriptive survey design, for the population of 1109. The sample size for the study is 285 which was derived using Krejcie and Morgan sample size table and stratified sampling techniques was employed. Primary tools for data collection was a structured questionnaires which was administered
among the non-academic staff of The Polytechnic, Ibadan; Adeseun Ogundoyin Polytechnic, Eruwa; The Oke-Ogun Polytechnic, Saki; after which 272 valid responses were analyzed using SPSS. Descriptive results showed a high level of information security practice x = 3.10, a high implementation of data handling stages x = 2.89, and a high level of access control compliance x = 3.1. Multiple regression revealed that data handling stages and access control significantly predicted information security practice (R = .700, R² = .490, F(2,269) = 129.311, p < .001). Access control was the main predictor (β = .655, t = 14.438, p < .001), while data handling stages made a smaller but significant contribution (β = .125, t = 2.752, p = .006). The findings indicate that strong role and permission management substantially enhance confidentiality, integrity, and availability of institutional records, whereas gaps in systematic classification, archiving, monitoring of system use, and control of unauthorized software weaken overall resilience. The study concludes and recommended that strengthening access control mechanisms, institutionalizing clear data-handling procedures, instituting regular training and periodic user-access reviews will substantially improve information security among registry staff.
Keywords: Information security practice, Data handling stages, Access control, Non-Academic staff, Oyo State
Word count: 290
Description
Keywords
Information security practice, Data handling stages, Access control, Non-Academic staff, Oyo State
Citation
Kate Turabian