Individual traits that determine the BYOD IS culture: A case study of the banking sector in Zimbabwe. Alfred Musarurwa Stephen Flowerday Liezel Cilliers

Overview Background and Motivation Statement of the problem Information security in the banking sector Research methodology Individual traits Organizational IS traits The data collection survey BYOD Information Security Culture Ongoing and future works Summary and Conclusion

Background and Motivation BYOD phenomena growing in the Zimbabwean banking sector. Organizations are at different maturity levels in implementing the IS. Banking employees now administrators under BYOD. IT no longer fully in charge of IS for the banks.

Statement of the problem The employees have too much control in the BYOD posing an IS risk. The ICT no longer fully in charge of the IS management for the banks. Employees have become unintended administrators!

Information security in the banking sector Always been the responsibility of IT. In the Zimbabwean banks, IS standards are applied variedly and audited by the bank’s internal and external auditors as per the framework created by each individual organization. BYOD IS

Information security in the banking sector contd. Banking industry playing catch-up to BYOD IS. Little attention paid to employees impact. Banking is driven by trust.

Research Methodology A case study of a commercial bank in Zimbabwe. A review of the literature and other empirical studies. The findings from the literature culminated in the individual traits which were then tested using statistical techniques reported in the methodology section. Survey of 270 banking employees.

Individual Traits BYOD IS Knowledge Proposition P1: Employee operational and technical knowledge about IS is positively associated with the building of an information security culture in the BYOD phenomenon. Attitude Proposition P2: The employee attitude towards BYOD IS, technology, policies and procedures is positively associated with the building of an information security culture in the BYOD phenomenon. Habit Proposition P3: The habits that the employees practice towards IS are positively associated with the building of an information security culture in the BYOD phenomenon.

Organizational IS culture traits Environment which was identified to be one of the Organizational governance is another key component that was identified to have an impact on information security culture. Governance - good governance system will improve IS, thereby forming an information security culture for the BYOD unintended administrator. Awareness training is also one important organisations trait fro the organisations have comprehensive awareness and training mechanisms.

The data collection survey BYOD IS 60% = males and 40% were females. The largest number of participants = 30 and 40 years of age (55%) Followed by the 41 to 50 age group (21%). 89% of all the employees owned a smart phone 92% understood the distinction between personal and organizational data Statistical analysis did not confirm knowledge Attitude had the highest correlation with the behavioural intention All factors were statistically reliable

Ongoing and Future work Examine the organizational traits that impact the improvement of the BYOD IS. Include a wider population of banks in Zimbabwe and abroad. Additional statistical tests on the model will be conducted so as to bring the empirical evidence of the model and application to the banking sector. The survey was confined to a commercial bank in Zimbabwe which means that the different cultures that individual banks have was not examined. Whilst the bank examined is a regional bank, the study was only confined to Zimbabwe and it can be assumed that the model is only applicable to Zimbabwe.

Summary and Conclusion The comfort that the banks used to enjoy controlling data through endpoint security has since been lost by the BYOD phenomenon. Employees have been identified to be key stakeholders in the improvement of IS in BYOD for banks. A BYOD IS culture model required in banks. There is need to improve employee attitude trait followed by the habit trait and finally the knowledge trait to improve on behavioural intention.

BYOD IS Thank You Q&A