Information Security Awareness of Employees in Ethiopian Banking Sector

Abstract

As threats have matured and information has increased in value, attackers have increased their capabilities and expanded to broader intentions, developed more attack methods and methodologies, and are acting on more diverse motives. The issue is too serious when it comes to financial institutions due to their sensitivity to information security attacks. The general aim of this research was to explore the levels of information security awareness of employees in the banking sector in Ethiopia. A quantitative and qualitative research approach was used. Findings showed that the information security awareness level of Ethiopian private banking sector employees is unsatisfactory and needs improvement through continuous on-the-job training. In addition, the training provided on information security awareness for the employees of the private bank in Ethiopia needs improvement.