Designing User-Centric Information Security Management Systems in Financial Services Organisations

This paper summarises a research and engagement project on the design of user-centric information security management systems (ISMS) in financial services organisations (bank and FinTech companies; FinServ). The study responded to a desire to explore the complex dynamics that characterize the relationship between information security and productivity for employees in FinServ organisations and their clients. Collected data allowed the researcher to conclude that the concept of information security/cybersecurity as an experience/journey for both employees and customers is a promising approach to build user-centric ISMS; design-led methods help with identifying the basic elements of user-centric ISMS; and language barriers may arise that require the construction of a shared information security lexicon with Fin Serv employees.