DIGITALISATION OPPORTUNITIES AS DRIVERS OF CONFIDENTIALITY RULES IN PUBLIC PROCUREMENT: ORGANISATIONAL INFORMATION CULTURE AS A MODERATOR
Abstract
As public procurement increasingly relies on digital systems, protecting sensitive procurement data becomes critical. Drawing on information security control theory (ISCT), this study examines the impact of digitalisation opportunities (DOP) on the enforcement of confidentiality rules in public procurement (CRP), with a specific focus on the moderating role of organisational information culture (OIC). The study employs a cross-sectional quantitative research design, collecting data from 218 procurement practitioners across public organisations in the Dodoma region, Tanzania. A structured questionnaire survey was employed to collect the data. Confirmatory factor analysis (CFA) and Hayes PROCESS Macro were used to test the model hypotheses. The results reveal that while DOP positively influence compliance with CRP. This relationship is significantly strengthened when the organisation exhibits a strong information culture. In contrast, a weak information culture diminishes the effectiveness of DOP in maintaining confidentiality. The results underscore the importance of synergies between technological systems and a strong security-conscious culture in safeguarding sensitive procurement information. This study contributes to the literature on public procurement, supply chain, and information management by integrating ISCT to explore how both technical and cultural factors influence confidentiality in public procurement processes. It provides new insights into the interplay between DOP and OIC, offering valuable guidance for policymakers and procurement practitioners in enhancing data security in public procurement processes.
References
Agostini, L., Galati, F., & Gastaldi, L. (2020). The digitalization of the innovation process: Challenges and opportunities from a management perspective. European journal of innovation management, 23(1), 1-12.
Alhassan, M. M., & Adjei-Quaye, A. (2017). Information security in an organization. International Journal of Computer, 24(1), 100-116.
Al Hogail, A. (2015). Cultivating and assessing an organizational information security culture; an empirical study. International Journal of Security and Its Applications, 9(7), 163-178.
Almeida, F., Santos, J. D., & Monteiro, J. A. (2020). The challenges and opportunities in the digitalization of companies in a post-COVID-19 World. IEEE Engineering Management Review, 48(3), 97-103.
Amalia, R., Alfan, M. A., Aliefia, M., bin Md Radzi, M. S. N., & Kurniawan, F. (2023). Digitalization of the public procurement system in Indonesia: Challenges and problems. Yuridika, 38(3), 499-518.
Amankwa, E., Loock, M., & Kritzinger, E. (2022). The determinants of an information security policy compliance culture in organisations: the combined effects of organisational and behavioural factors. Information and Computer Security, 30(4), 583-614.
Anderson, C., Baskerville, R. L., & Kaul, M. (2017). Information security control theory: Achieving a sustainable reconciliation between sharing and protecting the privacy of information. Journal of management information systems, 34(4), 1082–1112.
Asif, M., Siddiqui, M. S. and Sharma, H. P. (2024). Factors affecting adoption of e-procurement with electronic orders integrated systems by enterprises: evidence from World Bank survey of Saudi Arabia. Journal of Science and Technology Policy Management, in print. https://doi.org/10.1108/JSTPM-03-2024-0100
Da Veiga, A., Astakhova, L. V., Botha, A., & Herselman, M. (2020). Defining organisational information security culture—Perspectives from academia and industry. Computers & Security, 92, 101713.
Da Veiga, A. (2023). A model for information security culture with creativity and innovation as enablers – refined with an expert panel. Information and Computer Security, 31(3), 281-303.
Daneshmandnia, A. (2019). The influence of organizational culture on information governance effectiveness. Records Management Journal, 29(1/2), pp.18-41.
Ernest Chang, S., & Lin, C. (2007). Exploring organizational culture for information security management. Industrial Management & Data Systems, 107(3), 438-458
Fan, Y., Chen, J., Shirkey, G., John, R., Wu, S. R., Park, H., & Shao, C. (2016). Applications of structural equation modelling (SEM) in ecological studies: An updated review. Ecological Processes, 5(1), 1–12.
Flowerday, S. V., & Tuyikeze, T. (2016). Information security policy development and implementation: The what, how and who. Computers and Security, 61, 169–183.
Fornell, C., and Larcker, D. F. (1981). Evaluating structural equation models with unobservable variables and measurement error. Journal of Marketing Research, 18(1), 39-50.
Gunasekara, H.G., Sridarran, P. & Rajaratnam, D. (2022). Effective use of blockchain technology for facilities management procurement process. Journal of Facilities Management, 20(3), 452-468.
Halonen, K.-M. (2017). Disclosure rules in EU public procurement: Balancing between competition and transparency. Journal of Public Procurement, 16(4), 528-553.
Hallikas, J., Immonen, M., & Brax, S. (2021). Digitalizing procurement: the impact of data analytics on supply chain performance. Supply Chain Management: An International Journal, 26(5), 629-646.
Hair, J. F., Howard, M. C., & Nitzl, C. (2020). Assessing measurement model quality in PLS- SEM using confirmatory composite analysis. Journal of Business Research, 109, 101–110.
Harju, A., Hallikas, J., Immonen, M. & Lintukangas, K. (2023). The impact of procurement digitalization on supply chain resilience: empirical evidence from Finland. Supply Chain Management, 28(7), 62-76.
Hayes, A. F. (2022), Introduction to Mediation, Moderation, and Conditional Process Analysis: A Regression-Based Approach, 3rd ed. The Guilford Press.
Hayden, R., & Fok, H. (2021). Hong Kong SFC releases new FAQs on external electronic data storage. Journal of Investment Compliance, 22(4), 285-294.
Henty, P., & Ashmore, R. (2019). Disclosure rules within public procurement procedures and during contract period in the United Kingdom. Edward Elgar Publishing.
Herold, S., Heller, J., Rozemeijer, F. & Mahr, D. (2023). Dynamic capabilities for digital procurement transformation: a systematic literature review. International Journal of Physical Distribution & Logistics Management, 53(4), 424-447.
Hong, K. S., Chi, Y. P., Chao, L. R., & Tang, J. H. (2003). An integrated system theory of information security management. Information Management & Computer Security, 11(5), 243-248.
Israel, B., Mchopa, A., Mwaiseje, S., & Mashene, A. (2021). Ethical procurement practices and performance of public procuring entities in Tanzania: empirical evidences from Moshi district council. Journal of Co-operative and Business Studies (JCBS), 4(2), 39-47.
Israel, B. & Mwenda, B. (2024). Technological and market sensing capabilities as drivers of SME participation in public procurement: an empirical test of the moderating role of financial capability. IIMBG Journal of Sustainable Business and Innovation, 2(2), 186-207.
Israel, B. (2023). Mediating effect of integrated health commodities procurement system on the relationship between responsiveness and health service delivery. International Journal of Health Governance, 28(3), 284-298.
Israel, G. D. (1992). Sampling the evidence of extension programme: Programme evaluation and organisational development. International Statistical Review, 47(2), 99-109.
Iwaya, L. H., Iwaya, G. H., Fischer-Hübner, S., & Steil, A. V. (2022). Organisational privacy culture and climate: A scoping review. IEEE Access, 10, 73907-73930.
Kache, F., & Seuring, S. (2017). Challenges and opportunities of digital information at the intersection of Big Data Analytics and supply chain management. International Journal of Operations and Production Management, 37(1), 10–36.
Karlsson, M., Denk, T., & Åström, J. (2018). Perceptions of organizational culture and value conflicts in information security management. Information and Computer Security, 26(2), 213-229.
Karttunen, E., Lintukangas, K. & Hallikas, J. (2023). Digital transformation of the purchasing and supply management process. International Journal of Physical Distribution & Logistics Management, 53(5/6), 685-706.
Kaspersky. (2021). Kaspersky Security Bulletin Statistics: Kaspersky, Moscow.
Kulcu, O. (2009). Evolution of e‐records management practices in e‐government: A Turkish perspective. The Electronic Library, 27(6), 999-1009.
Lee, S. M., Tan, X., & Trimi, S. (2005). Current practices of leading e-government countries. Communıcatıons of the ACM, 48(10), 99-104.
Legner, C., Eymann, T., Hess, T., Matt, C., Böhmann, T., Drews, P., ... & Ahlemann, F. (2017). Digitalization: opportunity and challenge for the business and information systems engineering community. Business & information systems engineering, 59, 301-308.
Lorentz, H., Aminoff, A., Kaipia, R., & Srai, J. S. (2021). Structuring the phenomenon of procurement digitalisation: contexts, interventions and mechanisms. International Journal of Operations & Production Management, 41(2), 157-192.
Meafa, A.-E., Chaouni Benabdellah, A., Zekhnini, K., Belhadi, A. & Kamble, S. (2024). Driving resiliency and digitalization in the sourcing process: integration of blockchain technology and smart contracts. Benchmarking: An International Journal, in press. https://doi.org/10.1108/BIJ-01-2024-0059
Mikuletič, S., Vrhovec, S., Skela-Savič, B., & Žvanut, B. (2024). Security and privacy-oriented information security culture (ISC): Explaining unauthorized access to healthcare data by nursing employees. Computers & Security, 136, 103489.
Mwakolo, A., Siwandeti, M., Mahuwi, L., & Israel, B. (2024). Procurement of good governance as a strategic tool for achieving value for money in public construction projects. LBS Journal of Management & Research, 22(2), 129-146.
Nawi, F. A., Tambi, M. A., Samat, M. F., & Mustapha, W. M. (2020). A review on the internal consistency of a scale: the empirical example of the influence of human capital investment on Malcom Baldridge quality principles in TVET institutions. Asian People Journal, 3(1), 19-29.
Nel, F., & Drevin, L. (2019). Key elements of an information security culture in organisations. Information & Computer Security, 27(2), 146-164.
Nunes, M. P., Malagri, C. N. A., Steinbruch, F. K., Schreiber, D., & Damacena, C. (2024). The relation between digital transformation and internationalization – a systematic literature review. European Journal of Innovation Management, in press. https://doi.org/10.1108/EJIM-01-2024-0092
Nyassölä, M. (2021). Dar es Salaam: City Scoping Study. The African Cities Research Consortium.
Pallant, J. (2020). SPSS survival manual: A step by step guide to data analysis using IBM SPSS (7th ed.). Routledge.
PPRA. (2021). Annual performance evaluation report for financial year 2020/21. Tanzania, Procurement Regulatory Authority.
Faridi, M. R., & Malik, A. (2020). Digital transformation in supply chain, challenges and opportunities in SMEs: a case study of Al-Rumman Pharma, Emerald Emerging Markets Case Studies, 10(1). https://doi.org/10.1108/EEMCS-05-2019-0122
Rutainurwa, V., Mwenda, B., & Israel, B. (2024). ICT-enabled supply chain integration capabilities and firms’ financial performance: an empirical study of Tanzania’s manufacturing SMEs. Cogent Business & Management, 11(1), 1-18.
Salvi, A., Petruzzella, F., Raimo, N., & Vitolla, F. (2023). Transparency in the digitalization choices and the cost of equity capital. Qualitative Research in Financial Markets, 15(4), 630-646.
Saunders, M., Lewis, P., & Thornhill, A. (2019). Research Methods for Business Students, 8th edition. Pearson.
Seyedghorban, Z., Samson, D., & Tahernejad, H. (2020). Digitalization opportunities for the procurement function: pathways to maturity. International Journal of Operations & Production Management, 40(11), 1685-1693.
Solomon, G., & Brown, I. (2021). The influence of organisational culture and information security culture on employee compliance behaviour. Journal of Enterprise Information Management, 34(4), 1203-1228.
Staba, R., & Turudic, M. (2024). The Conflict between the Principle of Transparency and the Principle of Data Confidentiality in the Public Procurement Law of the Republic of Croatia. Zbornik Pravnog fakulteta u Zagrebu, 74(1), 99-124.
Straub, D., & Welke, R. (1998). Coping with systems risk: Security planning models for management decision-making. MIS Quarterly, 22, 441–469.
Uluç, N. Ç. (2022). Digital Conflicts in Procurement. In: Özsungur, F. (Ed.), Conflict Management in Digital Business, Emerald Publishing, 85-106.
URT. (2023). Public procurement act number 10 of 2023, Ministry of Finance and Planning, Government Printers.
Viale, L., & Zouari, D. (2020). Impact of digitalization on procurement: the case of robotic process automation. Supply Chain Forum: An International Journal, 21(3), 185-195.
Wang, X., Ma, L., Niu, Q., & Zhang, Y. (2024). Supply chain digitalization and sports industry performance in Chinese context: a mediated moderated model. Business Process Management Journal, 30(7), 2213-2236.
Wolf, E. J., Harrington, K. M., Clark, S. L., & Miller, M. W. (2013). Sample size requirements for structural equation models an evaluation of power, bias, and solution propriety. Educational and Psychological Measurement, 73(6), 913-934.
Wright, T. (2013). Information culture in a government organization: Examining records management training and self‐perceived competencies in compliance with a records management program. Records Management Journal, 23(1), 14-36.
Yogeswaran, P., Modgil, S., & Singh, R. K. (2025). Leveraging digital technologies for operational excellence in pharmaceutical sourcing: A dynamic capability perspective. Benchmarking: An International Journal, in press. https://doi.org/10.1108/BIJ-03-2024-0198
Yevu, S. K., Ann, T. W., & Darko, A. (2021). Digitalization of construction supply chain and procurement in the built environment: Emerging technologies and opportunities for sustainable processes. Journal of Cleaner Production, 322, 129093.