Thesis (MSc) - Cyprus International University. Institute of Graduate Studies and Research Management Information Systems

Information security culture within the Sierra Leone banking sector is an area of vital importance within professional and academic circles, yet it has remained largely understudied. This thesis contributes to the limited literature covering information security culture in Sierra Leone, and the broader West African region. It aimed to shed light on the state of the overall information security culture within the banking sector, and to investigate which areas were effectively implemented, and which areas need more work.
The study utilized non-probability sampling, a combination of convenience and snowball sampling, and it adopted a quantitative methodology to answer and fulfill the research objectives. A total of 327 professionals in the banking sector responded to the Information Security Culture Assessment (ISCA) questionnaire that was administered as the research instrument, in addition to the demographic questions. Responses were translated to a 5-point Likert-scale.
The results of the data were analyzed using Microsoft Excel and SmartPLS version 4, and showed a mean score across each dimension examined, reporting above “4” which equates to a continuum between “agree” and “strongly agree” responses, that were positively correlated, or consistent with a strong information security culture. Furthermore, the framework proposed to investigate the dimensions of the ISCA highlighted the vital importance of management buy-in in implementing a robust information security culture.