The quantitative method is a method that shows objective measurements and the statistical, mathematical, or numerical analysis of data collected using different way such as polls and questionnaires. This method allowed us to quantify and quantify the results of the research. It helps us to present the results in the form of graphs, tables. This method turned out to be important because we were able to determine in what exact proportion the results of the research are brought. The software used is SPSS.

The qualitative method is a method that does not involve measurement, Statistics or numerical analysis. It’s a research based on existing documentation.

The objective of the qualitative research is to develop concepts which will make it possible to apprehend social situations in natural contexts. The qualitative method does not seek to quantify or measure, it most often consists of collecting data such as documentaries facilitating an interpretative process

Our sample concerns the employees (users) of the Webmail, G-cloud system of Burkina-Faso public administration. To this end, a questionnaire is sent to the users of the system.

According to Alain Bouchard, for a population of more than 1000 individuals, for a margin of error of 10% with an accuracy of 95%, 94 is taken as a sample. 94 represents our sample.

When asked if users find that the services of mailer.gov.bf are unstable (regular failures, emails sent and not transmitted etc...) we obtain the following results:

The table was obtained based on the questionnaire result that we entered on the software spss.

It gives us a result of frequency, percent, and valid percent of 94 persons that have answered the questionnaire. As we can see the number of people that confirmed by the Yes answer is respectively 80, 85.1, for frequency and percentage. The number of people that confirmed by the No answer is respectively 14 and 14.9. We can conclude that most that ore that 85 percent is agreed that the mailer’s services are unstable.

Figure 1 was obtained based on Table 1. It shows clearly the proportion on which people recognized the mailer’s problems.

We find that 85.1% of the people questioned affirm that the services of the mailer are unstable compared to 14.9%. This could not be without consequences for the public administration. It is characterized by the permanent non-availability of data, hence slowness in decision-making and economic losses. Indeed, Unavailability can be seen as the time during which the user can no longer work efficiently due to a malfunction of the computer system. Since this tool is at the heart of the majority of organizations, the delay inevitably leads to a loss of turnover and

destroy the institution credibility.

When asked whether the public administration agents managed to communicate with other agents who left the public administration and still have their accounts active on the.gov.bf mailer, we obtain the following results:

Table 2 is also the result of the 94 persons’ answers that we introduced on SPSS software one by one in other to fully see the proportion on how people communicate with other people that left the public administration. We see that 85% recognize to still communicate with people that are not still in the administration through the domain.gov.bf. It means that their accounts are still active on the servers even those they’re not administration’s workers again compare to 9%.

As we can see in Figure 2, an agent who leaves the public service should have his account deactivated. We note that some agents who are no longer in office still have the possibility of communicating via their.gov.bf mail account and this

is not without risk. He could initiate a hoax and wreak havoc on the administration. Indeed, Ransomware is software that takes data hostage, encrypts it and then demands a ransom from its owner. The administration mail server could be attacked by agents who are no longer in the public service. Most of attacks are done via phishing email or on social networks.

We can see in Table 3, when asked whether public administration officials are satisfied with the government cloud, the following results are obtained:

When asked if users are satisfied with G-cloud services, we find that 80.9% of people surveyed are not satisfied. The problem of satisfaction could be the fact that they are not able to use the cloud all the time. In other word the availability is not permanent and it’s not without consequences. Indeed, the service unavailability leads to a major disruption affecting the business environment and the company goals. Hence, utmost care should be taken to scale the availability of services [6]. This table that we got through the spss software by entering the data we have collected shows that 80.9 percent are satisfied compared to 19.1.

When asked whether public administration officials manage the infrastructure put at their disposal well, the following results are obtained:

In Table 4, we find that 31.9% of imprudent behavior and 34% of not worried behavior of the usage of IT infrastructure and this is not without possible consequences. Human acts and errors are the direct and/or indirect cause of the majority of security incidents including both intentional and unintentional misbehaviors. In other word the companies’ data breaches are due to exploitation of human weaknesses [7]. This table is based on the data that we have collected and analyzed it through spss to get a broad view based on the frequency and the percentage.

Figure 3 shows the improper use of the system infrastructure that is increasing with a frequency from 9 to 32. The percentage of the improper use is also increasing from 9.6 to 34. The valid percentage goes from 9.6 to 34. We can conclude that there is a risk of security due to the improper usage of the system. The bad usage of the computer infrastructure can be considered as a security risk. Indeed, the actions that workers do deliberately or accidentally can impact the security, the failure of hardware, software, and information systems [8].

The actions that people do in their office describe a class of operational risk characterized by problems caused by the action taken or not taken by those people in a given situation [9].