Building Cyber Resilience: Evaluating the Need for Cybersecurity Awareness Programs in Saudi Arabia's Financial Sector

Abstract

The rapid digital transformation of the financial sector in Saudi Arabia has increased exposure to cyber threats, making cybersecurity awareness among employees a critical component of organisational resilience. This study evaluates the level of cybersecurity awareness among employees in Saudi financial institutions, identifies key knowledge gaps that contribute to vulnerability, and examines how awareness programs can enhance cyber resilience. A quantitative research approach was adopted using a structured questionnaire distributed to 100 respondents across the financial sector. The collected data were analysed using Microsoft Excel to identify patterns in awareness, behaviour, and perceptions. The findings indicate that cybersecurity awareness among employees is moderate, with a strong understanding of common threats such as phishing and of the consequences. However, significant gaps exist in practical application, particularly in password practices, familiarity with policies, and consistent security behaviour. The study also reveals a mismatch between awareness and behaviour, which increases vulnerability to cyber threats. At the same time, there is strong support for cybersecurity awareness programs, especially those that are continuous, practical, and simulation-based. The study concludes that awareness alone is insufficient to ensure cybersecurity, and organisations must adopt behaviour-focused, continuous training strategies to strengthen resilience. These findings provide valuable insights for improving cybersecurity practices within the Saudi financial sector.