Assessing Information Security Governance in Public Sector Banks of India

Abstract

Purpose of the study: This study aims to investigate and analyze the Information Security governance practices within banks. Design/methodology/approach: This is a Survey-based study. Employees of State Bank of India in Delhi region were the participants of the study. Findings: The findings of the study will contribute to the existing body of knowledge on information security governance in the banking sector. Research limitations: Small sample size and lack of funds for performing comprehensive quantitative study are the limitations of the study. Practical implications: Regulatory compliance, incident response, and data recovery are all a part of this process, as well as risk assessment and management, policy and procedure creation, security awareness and training, security controls and technology, and more. Public sector organizations may improve their security posture and better secure their information assets by adopting a systematic approach to information security governance. Social implications: Data protection, service protection, privacy, fighting cybercrime, public trust, and economic impact are only few of the societal effects of researching information security governance in public sector organizations. Organizations in the public sector can reduce the risk of financial and reputational damage as well as secure sensitive information by employing best practices in information security. Originality/value: The research outcomes will help identify areas of improvement, highlight effective practices, and provide recommendations for enhancing information security governance within banks. Ultimately, this study contributes to the development of robust Information Security governance frameworks that can protect sensitive data, mitigate risks, ensure regulatory compliance, and maintain the trust and confidence of customers and stakeholders in the banking industry.