Assessing Cybersecurity Awareness among Employees in Libyan Financial Institutions: An Empirical Study

Abstract

This study assessed cybersecurity awareness among employees in Libyan financial institutions as reliance on digital systems and electronic services continues to grow and exposure to cyber threats increases. Cybersecurity awareness was examined across six dimensions: knowledge of cyber threats, security-policy awareness, authentication and password awareness, phishing and social-engineering awareness, incident-reporting awareness, and secure cybersecurity practices. The study also examined whether cybersecurity training, organizational support, and perceived cyber threat were associated with differences in employee awareness. A quantitative approach was used, based on a structured questionnaire and a five-point Likert scale, with appropriate statistical methods applied to analyze the data and test the proposed relationships and hypotheses. The findings identified areas of strength and weakness in employee awareness. Group comparisons showed a significant difference according to previous cybersecurity training, whereas differences by gender, age, educational qualification, years of experience, and job function were not statistically significant. The results provide a practical basis for developing continuous, role-relevant awareness and training programs, strengthening security policies, and promoting secure practices within Libyan financial institutions.