Cybersecurity Practices and Insider Threats in the Financial Industry: A Case Study

Thesis Abstract

The increasing sophistication of cyber threats and the critical reliance of financial institutions on digital infrastructure have heightened the need to examine cybersecurity practices, particularly concerning insider threats. Despite significant investments in cybersecurity protocols, insider threats remain one of the most persistent vulnerabilities within the financial industry, often leading to substantial financial losses, reputational damage, and data breaches. This study aims to investigate the relationship between cybersecurity practices and insider threats within a major banking corporation, with the overarching goal of identifying gaps and recommending effective mitigation strategies. Specific objectives include evaluating existing cybersecurity policies, examining employee awareness and behavior, and analyzing organizational factors that contribute to insider threats. Employing a mixed-methods research design, the study combines quantitative surveys with qualitative interviews. The quantitative component involves administering structured questionnaires to a purposive sample of 250 employees across various departments, including IT, compliance, and management within the bank, to assess their perceptions of cybersecurity protocols, awareness levels, and behavioral tendencies related to insider threat risks. The qualitative component comprises semi-structured interviews with 20 key organizational stakeholders, including cybersecurity officials, HR managers, and frontline employees, to capture in-depth insights into organizational culture, internal controls, and incident responses. Data collection instruments are validated through pilot testing and expert reviews to ensure reliability and validity. Descriptive statistics, including frequencies and mean scores, will be used to summarize the survey data, while inferential analyses such as multiple regression will test the hypotheses concerning the predictors of insider threat behaviors. Furthermore, thematic analysis will be applied to interview transcripts to elucidate contextual factors influencing insider threats and cybersecurity practices. The study applies Robert Taylor's Theory of Insider Threats and the Technology-Organization-Environment (TOE) framework to underpin the analysis, providing theoretical insights into individual motives and organizational influences. Data will be analyzed using SPSS and NVivo software to generate comprehensive profiles of current practices, perceptions, and organizational vulnerabilities. Expected findings suggest that deficiencies in cybersecurity policies, insufficient employee training, and organizational culture significantly contribute to insider threats. The study anticipates that higher levels of cybersecurity awareness correlate negatively with insider threat incidences, while lax internal controls and a permissive organizational climate facilitate insider malicious activities. These findings are expected to demonstrate that effective cybersecurity practices grounded in organizational commitment and comprehensive employee engagement can significantly mitigate insider threats. This research contributes to knowledge by offering empirical evidence on the specific organizational and behavioral factors influencing insider threats in the financial sector. It advances the theoretical understanding of insider threats through the application of the Theory of Insider Threats and the TOE framework, integrating organizational culture and behavior with technological safeguards. It also provides a tailored framework for financial institutions to enhance cybersecurity resilience through targeted policy improvements, employee training programs, and internal control systems. In conclusion, the study underscores the importance of a holistic approach that combines robust cybersecurity policies, employee awareness, and organizational culture change to effectively reduce insider threat risks. It recommends the development of continuous training modules, the implementation of advanced internal monitoring systems, and fostering an organizational climate of transparency and accountability. Future research could explore comparative analyses across different financial institutions and geographic regions to validate and refine the proposed organizational model. The results aim to guide policymakers, cybersecurity practitioners, and organizational leaders in strengthening defensive mechanisms against insider threats in the financial sector.