دور إدارة المخاطر الرقمية في تعزيز الأمن السيبراني " دراسة ميدانية في المصارف الخاصة في محافظة حماه"

حسين قصيري; جودي علوش

doi:10.5281/zenodo.20963106

Authors

Dr. Husain Kousayri Al Wataniya Private University
Judy Alloush Al Wataniya Private University

DOI:

https://doi.org/10.5281/zenodo.20963106

Keywords:

Digital Risk Management, Cybersecurity, Private Banks, Risk Assessment, Information Security Governance

Abstract

This research aimed to study the role of digital risk management, with its various dimensions (risk identification, assessment and analysis, mitigation, monitoring and review, and communication), in enhancing cybersecurity. To achieve this objective, a field study was conducted on a group of private banks operating in Hama Governorate (Bank of Syria and Overseas, Al Baraka Bank, and Syria International Islamic Bank). The research employed a descriptive analytical approach, and a questionnaire was designed as the primary data collection tool.

The research population consisted of all employees (managers and staff) within the departments related to risk management and cybersecurity at Bank of Syria and Overseas, Al Baraka Bank, and Syria International Islamic Bank in Hama Governorate. Sixty questionnaires were distributed, fully returned, and deemed valid for analysis.

Among the most important findings of the research was the strong and positive impact of implementing risk management in its combined dimensions on enhancing cybersecurity in the studied banks. Furthermore, the study revealed a statistically significant and moderate positive impact of each individual dimension of risk management on enhancing cybersecurity

Downloads

Download data is not yet available.

References

[1] N. I. El-Bardony, “The role of cybersecurity governance in activating the disclosure of cybersecurity risk management and its impact on improving financial performance,” Journal of Accounting and Financial Studies (JAFS), vol. 18, no. 1, pp. 45–70, 2025.

[2] Y. Younis, “Impact of external auditor assurance regarding cybersecurity risks on investor decisions: An experimental study,” Modern Review Journal, vol. 12, no. 1, pp. 112–135, 2025.

[3] M. Q. M. Alorabi and A. Abuanzeh, “The role of risk management in enhancing cybersecurity for small and medium enterprises (SMEs) in Saudi Arabia: Applied study,” International Journal of Financial, Administrative, and Economic Sciences (IJFAES), vol. 3, no. 10, 2024, doi: 10.59992/IJFAES.2024.v3n10p7.

[4] P. S. Martens and F. Teuteberg, “Risk management and cybersecurity: A structured literature review,” Journal of Cybersecurity and Risk Management, vol. 10, no. 3, pp. 245–268, 2020.

[5] T. Aven and E. Zion, “Cybersecurity risk management frameworks: Current practices and future directions,” International Journal of Information Security and Privacy, vol. 12, no. 4, pp. 1–18, 2018.

[6] A. Holzinger, B. Schmidt, and C. Fischer, “Risk-based cybersecurity strategies in modern organizations,” Computers & Security, vol. 68, pp. 105–120, 2017.

[7] N. Y. M. Al-Aroud, “Risk management and its role in enhancing the performance of municipal departments in Jordan,” Humanities & Natural Sciences Journal, vol. 4, no. 4, 2023, doi: 10.53796/hnsj4428.

[8] International Organization for Standardization, ISO/IEC 27005:2018, Information Technology—Security Techniques—Information Security Risk Management. Geneva, Switzerland: ISO, 2018.

[9] A. M. Al-Badaywi Al-Rahahleh, “The role of artificial intelligence in enhancing compliance with cybersecurity risk management,” Humanities & Natural Sciences Journal, vol. 6, no. 10, pp. 350–376, 2025, doi: 10.53796/hnsj610/23.

[10] M. Brunner, C. Sauerwein, M. Felderer, and R. Breu, “Risk management practices in information security: Exploring the status quo in the DACH region,” Computers & Security, vol. 92, Art. no. 101776, 2020, doi: 10.1016/j.cose.2020.101776.

[11] J. Fraser, B. Simkins, and K. Narvaez, Implementing Enterprise Risk Management: Case Studies and Best Practices. Hoboken, NJ, USA: Wiley, 2014.

[12] R. von Solms and J. van Niekerk, “From information security to cyber security,” Computers & Security, vol. 38, pp. 97–102, 2013, doi: 10.1016/j.cose.2013.04.004.

[13] European Union Agency for Cybersecurity (ENISA), ENISA Threat Landscape 2023. Heraklion, Greece: ENISA, 2023.

[14] Cisco, Annual Cybersecurity Report. Cisco, 2022.

[15] A. O. M. Q. Al-Azmi, “The reality of cybersecurity in education and its relationship to psychological security from the point of view of female teachers in the State of Kuwait,” International Journal of Research and Studies Publishing, vol. 5, no. 59, pp. 18–40, 2024.

[16] M. N. M. Al-Maayta, “Cybersecurity strategies and their role in enhancing the protection of electronic networks in municipalities,” Humanities & Natural Sciences Journal, vol. 5, no. 4, 2024, doi: 10.53796/hnsj54/24.

[17] H. M. Kousayri, “The role of strategic flexibility in improving performance: A field study at the Al-Wataniya Private University (WPU),” Journal of Al-Wataniya Private University, vol. 2, no. 1, pp. 12–39, Jun. 2024, doi: 10.5281/zenodo.20251870.