1. Individual traits that determine the BYOD IS culture: A case study of the banking sector in Zimbabwe.
Alfred Musarurwa
Stephen Flowerday
Liezel Cilliers

2. Overview Background and Motivation Statement of the problem
Information security in the banking sector
Research methodology
Individual traits
Organizational IS traits
The data collection survey
BYOD Information Security Culture
Ongoing and future works
Summary and Conclusion

3. Background and Motivation
BYOD phenomena growing in the Zimbabwean banking sector.
Organizations are at different maturity levels in implementing the IS.
Banking employees now administrators under BYOD.
IT no longer fully in charge of IS for the banks.

4. Statement of the problem
The employees have too much control in the BYOD posing an IS risk.
The ICT no longer fully in charge of the IS management for the banks.
Employees have become unintended administrators!

5. Information security in the banking sector
Always been the responsibility of IT.
In the Zimbabwean banks, IS standards are applied variedly and audited by the bank’s internal and external auditors as per the framework created by each individual organization.
BYOD IS

6. Information security in the banking sector contd.
Banking industry playing catch-up to BYOD IS.
Little attention paid to employees impact.
Banking is driven by trust.

7. Research Methodology A case study of a commercial bank in Zimbabwe.
A review of the literature and other empirical studies.
The findings from the literature culminated in the individual traits which were then tested using statistical techniques reported in the methodology section.
Survey of 270 banking employees.

8. Individual Traits BYOD IS Knowledge
Proposition P1: Employee operational and technical knowledge about IS is positively associated with the building of an information security culture in the BYOD phenomenon.
Attitude
Proposition P2: The employee attitude towards BYOD IS, technology, policies and procedures is positively associated with the building of an information security culture in the BYOD phenomenon.
Habit
Proposition P3: The habits that the employees practice towards IS are positively associated with the building of an information security culture in the BYOD phenomenon.

9. Organizational IS culture traits
Environment which was identified to be one of the Organizational governance is another key component that was identified to have an impact on information security culture.
Governance - good governance system will improve IS, thereby forming an information security culture for the BYOD unintended administrator.
Awareness training is also one important organisations trait fro the organisations have comprehensive awareness and training mechanisms.

10. The data collection survey
BYOD IS
60% = males and
40% were females.
The largest number of participants = 30 and 40 years of age (55%)
Followed by the 41 to 50 age group (21%).
89% of all the employees owned a smart phone
92% understood the distinction between personal and organizational data
Statistical analysis did not confirm knowledge
Attitude had the highest correlation with the behavioural intention
All factors were statistically reliable

12. Ongoing and Future work
Examine the organizational traits that impact the improvement of the BYOD IS.
Include a wider population of banks in Zimbabwe and abroad.
Additional statistical tests on the model will be conducted so as to bring the empirical evidence of the model and application to the banking sector.
The survey was confined to a commercial bank in Zimbabwe which means that the different cultures that individual banks have was not examined.
Whilst the bank examined is a regional bank, the study was only confined to Zimbabwe and it can be assumed that the model is only applicable to Zimbabwe.

13. Summary and Conclusion
The comfort that the banks used to enjoy controlling data through endpoint security has since been lost by the BYOD phenomenon.
Employees have been identified to be key stakeholders in the improvement of IS in BYOD for banks.
A BYOD IS culture model required in banks.
There is need to improve employee attitude trait followed by the habit trait and finally the knowledge trait to improve on behavioural intention.

14. BYOD IS
Thank You
Q&A