Financial Services Information Security Culture Strategies

The digital era has been accompanied by an overabundance of information security attacks the bulk of which are predominantly directed at the financial services firms for financial gain. The possible safety measure to the menace of information security breaches is the refinement of information security culture. Information security culture strives to guard the information assets of firms by the way of influencing humans to conduct themselves in a way that is compatible with the safeguarding of organizational assets. Temporal strategies, spatial strategies, information security awareness and information security education and training are proposed as some of the main determinants of information security culture in the financial services. Therefore, this paper investigates the impact that temporal strategies, spatial strategies, information security awareness and information security education and training exert on financial services firms’ information security culture. This paper is a quantitative case study of four financial services firms in Zimbabwe. The results of this study show that temporal strategies, spatial strategies and information security awareness are not related to information security culture in the financial services. On the other hand, information security education and training is a predictor of information security culture in the financial services.