eCFs for ZCICT 2023

The digital era has brought about a superfluity of information security attacks most of which are principally aimed at the financial services institutions for commercial gain. The possible safety measure to the plague is the implementation of information security culture. Information security culture targets to safeguard the information assets of organisations by way of influencing humans to conduct themselves in a manner that is compatible with the security of organizational assets. Technology, people and environment are proposed as some of the main determinants of information security culture in the financial services. Therefore, this paper investigates the impact that technology, people and environment exert on financial services firms’ information security culture. This paper is a quantitative case study of four financial services firms in Zimbabwe. The results of this study show that technology and people are both predictors of information security culture in the financial services. However, the results of this study show that the environment does not influence information security culture in the financial services sector. The results of this study enhance the existing knowledge of information security culture through providing empirically grounded evidence of elements that help shape information security culture, a relatively novel domain.