• Corpus ID: 15673191

The effects of national culture on the assessment of information security threats and controls in financial services industry

  title={The effects of national culture on the assessment of information security threats and controls in financial services industry},
  author={Princely Ifinedo},
  journal={Int. J. Electron. Bus. Manag.},
  • P. Ifinedo
  • Published 2014
  • Computer Science
  • Int. J. Electron. Bus. Manag.
This study enriches the information provided in the 2012 Deloitte Touche Tohmatsu Limited (DTTL) survey that dealt with information security threats and controls in the global financial services institutions (GFSI). It seeks to provide information on the effects of national cultural dimensions on information security threats and controls in GFSI. The study’s analysis used secondary data, which was acquired from relevant, reputable sources. The study’s findings offer partial support for the… 

Figures and Tables from this paper

Relationships between socio-technological factors and information security threats and controls: perspectives from the global financial services industry

The findings partly supported the view suggesting that contextual factors such as national transparency levels, ethical behaviour of firms and technological readiness have positive relationships with information security threats and controls and showed that such factors have effects on information security threat and controls.

Impact of Excessive Access Permissions and Insider Threat Opportunity in the Financial Industry: A Qualitative Study

The study examined the vulnerability risk to insider threats from the view of the possible connection to excessive access permissions which represent a gap in the literature.

Cybersecurity Strategies to Protect Information Systems in Small Financial Institutions

The findings of this study indicate that leaders of financial institutions protect their information systems from cyber threats by effectively managing information security practices; developing robust cybersecurity policies; identifying, assessing, and mitigating cybersecurity risks; and implementing a holistic organizational strategy.

Information security culture: A systematic literature review

Nine common factors have been found to influence information security culture in organisation setting which are cultural differences, security awareness, security behaviour, top management commitment, trust, information sharing, security knowledge, security policy, and belief.

Employees' non-malicious, counterproductive computer security behaviors (CCSB) in Nigeria and Canada: An empirical and comparative analysis

  • P. IfinedoB. Akinnuwesi
  • Business
    2014 IEEE 6th International Conference on Adaptive Science & Technology (ICAST)
  • 2014
Employees indulgence in counterproductive computer security behaviors (CCSB) is a growing phenomenon worldwide. Essentially, CCSB are ill-prescribed computer use practices and general information

Improving Information Security Training: An Intercultural Perspective

A quantitative study of 177 professionals across 35 national cultures to investigate whether national culture influences InfoSec training and best practices indicates that training programmes should more directly address the variances in perception of InfoSec across cultures.

The Effects of National Culture on the Implementation of ISM Standards based on the ISO 27001 Bahareh Shojaie

This paper analyses the reasons for creating national security standards and laws in contrast to applying the most adopted international ISO/IEC 27001 standard. The ISO 27001 is popular among several

Universal and Culture-dependent Employee Compliance of Information Systems Security Procedures

ABSTRACT Employee information systems security behavior (ISSB) is a key concern for organizations. Previous studies have proposed models aimed at explaining employees’ ISSB and related behavioral

Information Security Culture for Guiding Employee’s Security Behaviour: A Pilot Study

A pilot study of a research-in-progress that proposes a holistic ISC model to be used as guidance for employee’s security behaviour in organization based on seven comprehensive dimensions based on widely accepted concepts of Organizational Culture and ISC is discussed.

Getting the Full Benefits of the ISO 27001 to Develop an ISMS based on Organisations’ InfoSec Culture

This study reduces the cultural barriers of implementing ISO 27001 by enhancing required resources and insiders’ cooperation in overarching employees’ bypassing of defined rules and regulations.



Information technology security management concerns in global financial services institutions: Is national culture a differentiator?

The results indicate that the dimensions of national culture are not statistically important in differentiating responses and perceptions of IT security concerns across GFSI.

Relationships Between Relevant Contextual Influences and Information Security Threats and Controls in Global Financial Services Industry

  • P. Ifinedo
  • Business, Computer Science
    J. Comput. Inf. Technol.
  • 2013
This study’s findings indicated that contextual factors such as national transparency levels and ethical behavior of firms do have positive associations with, and effects on some information security threats and controls.

Information Technology Security Concerns in Global Financial Services Institutions: Do Socio-Economic Factors Differentiate Perceptions?

  • P. Ifinedo
  • Computer Science
    Int. J. Inf. Secur. Priv.
  • 2009
It is suggested that IT security threats and risks in the financial sector compare reasonably well across socio-economic contexts, as a consequence, managers of GFSI may avail themselves of this information as they develop and propose measures for managing security concerns in their industry.

Information security management : a case study of an information security culture

This thesis argues that in order to establish a sound information security culture it is necessary to look at organisation's information security systems in a socio- technical context, and introduces a conceptual framework based on Peterson and Smith's (1997) model of national culture.

On security preparations against possible IS threats across industries

This study examines whether the security preparation of firms matches the severity of IS threats they perceive in developing countries, especially in issues concerning “people” and “administration”.

User behaviour towards protective information technologies: the role of national cultural differences

This study examines the cross‐cultural differences between South Korea and the United States in user behaviour towards protective information technologies and develops a theoretical model of user behaviour based on the framework of the theory of planned behaviour and national cultural dimensions and indices.

A cross-cultural investigation of situational information security awareness programs

The study shows that global citizens also react differently to security awareness as would be expected due to differing cultures, and the implications are apparent that the issue of security awareness should be studied from different cultural perspectives.

Security concerns of system users: A study of perceptions of the adequacy of security

Information Security and National Culture Comparison between ERP system security implementations in Singapore and Sweden

SUMMARY IT security, national culture and enterprise resource planning systems that seem to be three distinctive concepts have been merged in this explorative study. Several factors have contributed