Examining the attitudes of employees towards information security and cybersecurity threats in the financial services industry

Abstract

The financial services industry in South Africa is the prime target of cyber-attacks to steal information, money, compromising customer data and disrupting operations. Employees in this industry have been identified as the weakest link and responsible for successful malware attacks mostly distributed via e-mails. Awareness of the recent cyber-threats is a key defence in the protection of employees and systems. The study examined the attitude of employees towards information security and cybersecurity threats in the financial services industry. A questionnaire tested employees on four variables: cyber threats, cybersecurity awareness; cybersecurity behaviour and employee attitude. The responses revealed limited cybersecurity awareness and employees’ negative attitude towards policy measures. The findings demonstrate the need for information management systems and cybersecurity training programs across the financial services industry.