Information Security Culture: The Effect of Strategy, Technology, Organization, People and the Environment

Financial services organizations are one of the leading targets of information security infringements because of the potential of the assailants to reap financial rewards from launching the attacks. Information security culture which is a collection of socio-cultural procedures implemented by firms, is predicted to forestall the menace of information security breaches. Information security culture targets to protect the information assets of firms through influencing personnel to conduct themselves in a way that is well-suited to the protection of firms' assets. Information security strategy, technology, organisation, people and environment are proposed as some of the main determinants of information security culture in the financial services. Therefore, this paper investigates the impact that strategy, technology, organisation, people and environment exert on financial services firms' information security culture. This paper is a quantitative case study of four financial services firms in Zimbabwe. The results of this study show that strategy, technology and environment are predictors of information security culture in the financial services. Conversely, the study established that, organisation, people are not related to information security culture in the financial services.