Effectiveness of banking card security in the Ethiopian financial sector: PCI-DSS security standard as a lens

Lemma F. Lessa, Daniel Gebrehawariat
{"title":"Effectiveness of banking card security in the Ethiopian financial sector: PCI-DSS security standard as a lens","authors":"Lemma F. Lessa, Daniel Gebrehawariat","doi":"10.1108/ijieom-10-2021-0015","DOIUrl":null,"url":null,"abstract":"PurposeThis study is aimed at assessing the information security management practice with a focus on banking card security in selected financial institutions in Ethiopia, using an international information security standard as a benchmark. It is to identify the gaps and recommend best security practices to help financial institutions meet the required security compliance.Design/methodology/approachTwo financial sectors were purposively selected. A total of twenty-five respondents (IT executives and IT staff) were included in the study. Quantitative data was collected using the PCI-DSS (Payment Card Industry Data Security Standard) security standard questionnaire. In addition, observation and document analysis were made.FindingsThe result shows that most of the essential security management activities in the financial sectors do not comply with the international security standard. Similarly, the level of most of the indispensable security requirements that should be in place is found to be below the acceptable level. The study also revealed major security factors that prohibit the financial sectors from PCI-DSS security standard compliance.Originality/valueThis study assessed the information security management practice with a focus on banking card security and tried to figure out the limitations of security practices of the organizations surveyed based on the standard adopted. The topic has not been well explored especially in the Ethiopia context. Hence, the result can positively influence security policies, particularly in the banking sector.","PeriodicalId":268888,"journal":{"name":"International Journal of Industrial Engineering and Operations Management","volume":"39 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2023-02-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"International Journal of Industrial Engineering and Operations Management","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1108/ijieom-10-2021-0015","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

Abstract

PurposeThis study is aimed at assessing the information security management practice with a focus on banking card security in selected financial institutions in Ethiopia, using an international information security standard as a benchmark. It is to identify the gaps and recommend best security practices to help financial institutions meet the required security compliance.Design/methodology/approachTwo financial sectors were purposively selected. A total of twenty-five respondents (IT executives and IT staff) were included in the study. Quantitative data was collected using the PCI-DSS (Payment Card Industry Data Security Standard) security standard questionnaire. In addition, observation and document analysis were made.FindingsThe result shows that most of the essential security management activities in the financial sectors do not comply with the international security standard. Similarly, the level of most of the indispensable security requirements that should be in place is found to be below the acceptable level. The study also revealed major security factors that prohibit the financial sectors from PCI-DSS security standard compliance.Originality/valueThis study assessed the information security management practice with a focus on banking card security and tried to figure out the limitations of security practices of the organizations surveyed based on the standard adopted. The topic has not been well explored especially in the Ethiopia context. Hence, the result can positively influence security policies, particularly in the banking sector.
查看原文
分享 分享
微信好友 朋友圈 QQ好友 复制链接
本刊更多论文
埃塞俄比亚金融部门银行卡安全的有效性:以PCI-DSS安全标准为视角
目的本研究旨在评估埃塞俄比亚选定金融机构的信息安全管理实践,重点关注银行卡安全,使用国际信息安全标准作为基准。它的目的是识别漏洞并推荐最佳安全实践,以帮助金融机构满足所需的安全遵从性。设计/方法/方法有目的地选择了两个金融部门。共有25名受访者(IT主管和IT员工)参与了这项研究。采用PCI-DSS(支付卡行业数据安全标准)安全标准问卷收集定量数据。此外,还进行了观察和文献分析。结果表明,金融部门的基本安全管理活动大多不符合国际安全标准。类似地,大多数必需的安全需求的级别被发现低于可接受的级别。该研究还揭示了阻碍金融部门遵守PCI-DSS安全标准的主要安全因素。原创性/价值本研究以银行卡安全为重点评估了信息安全管理实践,并试图根据所采用的标准找出被调查组织安全实践的局限性。这一主题尚未得到很好的探讨,特别是在埃塞俄比亚的背景下。因此,其结果可以对安全政策产生积极影响,特别是在银行业。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 去求助
来源期刊
自引率
0.00%
发文量
0
期刊最新文献
Exploring lean manufacturing drivers for enhancing circular economy performance in the pharmaceutical industry: a Bayesian best–worst approach Assessing the barriers to lean manufacturing adoption in the furniture industry of Bangladesh: a fuzzy-DEMATEL study Managing project intangible risk: socio-technical implications in a “projectified” world “Recover together, recover stronger”: an exploratory literature review on the recovery challenges of creative SMEs following the COVID-19 pandemic and proposed future recommendations Improvement of tensile strength of fused deposition modelling (FDM) part using artificial neural network and genetic algorithm techniques
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
已复制链接
已复制链接
快去分享给好友吧!
我知道了
×
扫码分享
扫码分享
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1