THE INFLUENCE OF CYBERSECURITY KNOWLEDGE AND ATTITUDES ON ONLINE RISKY BEHAVIORS AMONG BANK EMPLOYEES IN SAUDI ARABIA

Abstract

The rapid digitization of banking services in Saudi Arabia has intensified cybersecurity challenges, particularly those influenced by human factors. This study examined how cybersecurity knowledge and attitudes shape risky online behaviors among bank employees, addressing the persistent vulnerability posed by human behavior despite technological safeguards. Grounded in the Health Belief Model and Social Cognitive Theory, the research explored how cognitive elements, such as knowledge, perceived susceptibility, perceived severity, and self-efficacy, together with attitudinal factors, including perceived benefits of compliance, affect employees’ cybersecurity practices. Using a quantitative design, survey data from 133 banking employees were analyzed through descriptive statistics, principal component analysis (PCA), and multiple regression. The PCA identified three main dimensions influencing behavior: perceived susceptibility and benefits of compliance, cybersecurity knowledge and perceived severity, and cybersecurity attitudes and self-efficacy. Regression analyses showed that these factors significantly predicted several risky behaviors, particularly those involving rationalization and convenience-based decisions. Attitudes and self-efficacy were the strongest deterrents to behavior motivated by perceived inconvenience, while knowledge and perceived severity reduced the tendency to justify insecure practices. Demographic variables had minimal influence, indicating that psychological and cognitive factors are stronger determinants of cybersecurity behavior within the Saudi banking sector.

Keywords— Cybersecurity knowledge, Cybersecurity attitude, Risky online behavior.