Cybersecurity Compliance and Other Factors Influencing Employee Protective Behavior: A Case Study of Bank X in Indonesia

Indonesia's banking sector faces over 1 million daily cyberattacks, with human error causing 80% of security breaches, yet existing cybersecurity research predominantly focuses on technology solutions rather than employee behavior within high-regulation environments.This study addresses a critical research gap by investigating how organizational levers-policy provision and Security Education, Training, and Awareness (SETA) programs-influence employee cybersecurity compliance behavior in Indonesia's banking industry.We surveyed 360 employees from Bank X (a consortium of Indonesia's three largest state-owned banks) using PLS-SEM analysis.Our theoretical framework integrates Protection Motivation Theory and Theory of Planned Behavior to examine pathways from organizational interventions through cybersecurity awareness, compliance attitude, and ISPC intention to protective behavior.Nine of ten hypotheses were supported: policy provision and SETA programs significantly enhance cybersecurity awareness, cascading through compliance attitude and ISPC intention to drive protective behavior.Notably, protection motivation does not directly influence behavior, revealing a boundary condition for PMT in hierarchical contexts.This study delivers the first largescale evidence from Indonesia's banking industry, demonstrating that clear policies and sustained SETA investment can turn human vulnerabilities into organizational resilience.Financial institutions should prioritize clear policies and comprehensive SETA programs as primary cybersecurity culture drivers.