Home / Current Issue / Paper 1713553
A Cybersecurity Risk Management and Regulatory Compliance Framework for Financial Institutions
Subject area: Science,Engineering and Technology · Area of research: Cybersecurity
Abstract
Financial institutions remain among the most attractive targets for cyberattacks due to their central role in economic stability, extensive digitalisation, and custody of highly sensitive financial and personal data. The increasing sophistication of cyber threats, combined with stringent regulatory expectations, has created a complex environment in which institutions must simultaneously manage cybersecurity risk and demonstrate compliance with evolving regulatory frameworks. Despite the existence of numerous cybersecurity standards, regulatory guidelines, and risk management models, financial institutions continue to face challenges in aligning technical security controls with governance, risk, and compliance (GRC) requirements in a coherent and auditable manner. Fragmentation between cybersecurity operations and regulatory compliance functions often results in duplicated effort, compliance-driven security implementations, and limited organisational resilience. This paper presents a comprehensive cybersecurity risk management and regulatory compliance framework tailored for financial institutions. The framework integrates established cybersecurity risk management principles with regulatory compliance requirements, providing a structured approach that aligns governance, risk assessment, control implementation, monitoring, and reporting. Drawing on a systematic review of previous literature, international standards, and financial-sector regulatory practices, the framework emphasises proportional risk-based decision-making, continuous monitoring, and accountability across organisational levels. The study synthesises insights from cybersecurity governance, enterprise risk management, financial regulation, and operational resilience literature to bridge the gap between technical security controls and regulatory obligations. The proposed framework contributes to academic and practitioner discourse by offering a unified structure that supports both cybersecurity risk reduction and regulatory assurance. It is particularly relevant for banks, insurance companies, payment service providers, and other regulated financial entities operating in highly digitised and interconnected environments. The paper concludes by highlighting practical implications, implementation challenges, and directions for future empirical validation.
Keywords
Cybersecurity Risk Management; Financial Institutions; Regulatory Compliance; Information Security Governance; Operational Resilience; Financial Regulation
References
[1] Abayomi, A. A., Odofin, O. T., Ogbuefi, E., Adekunle, B. I., & Agboola, O. A. (2020). Evaluating Legacy System Refactoring for Cloud-Native Infrastructure Transformation in African Markets.
[2] Abdulsalam, R., Farounbi, B. O., & Ibrahim, A. K. (2020). Financial Governance and Fraud Detection in Public Sector Payroll Systems: A Model for Global Application.
[3] Abdulsalam, R., Farounbi, B. O., & Ibrahim, A. K. (2021). Impact of Foreign Exchange Volatility on Corporate Financing Decisions: Evidence from Nigerian Capital Market.
[4] Abdulsalam, R., Farounbi, B. O., & Ibrahim, A. K. (2023). Healthcare Finance Analytics: Predictive Modeling for Operational Efficiency and Revenue Growth.
[5] Adanigbo, O. S., Kisina, D., Akpe, O. E., Owoade, S., Ubamadu, B. C., & Gbenle, T. P. (2022). A conceptual framework for implementing zero trust principles in cloud and hybrid IT environments. IRE Journals (Iconic Research and Engineering Journals), 5(8), 412–421.
[6] Adekunle, B. I., Owoade, S., Ogbuefi, E., Timothy, O., Odofin, O. A. A., & Adanigbo, O. S. (2021). Using Python and Microservice.
[7] Adeyoyin, O., Awanye, E. N., Morah, O. O., & Ekpedo, L. (2020). A Conceptual Framework Linking Financial Strategy and Operational Excellence in Manufacturing Firms.
[8] Aduloju, D., Okare, P., Ajayi, O. O., Onunka, O., & Azah, L. (2023). A Scheduled Serverless Ingestion Model for Energy-Efficient Processing in Lakehouse Architectures. Gyanshauryam International Scientific Refereed Research Journal, 6(1), 137–153.
[9] Aduloju, D., Okare, P., Babawale, T., Ajayi, O. O., Onunka, O., & Azah, L. A. (2023). KPI automation model for fitness enterprises using Jenkins-orchestrated data pipelines. International Journal of Scientific Research in Computer Science.
[10] Aduloju, D. T., Okare, P. B., Ajayi, O. O., & Onunka, O. (2022). A DevOps-Enabled Medallion Architecture Model for Anomaly Detection in Health Billing Systems. Gyanshauryam, International Scientific Refereed Research Journal, 5(1), 165.
[11] Aduloju, D. T., Okare, P. B., Ajayi, O. O., & Onunka, O. (2023). A Scheduled Serverless Ingestion Model for Energy-Efficient Processing in Lakehouse Architectures. Gyanshauryam, International Scientific Refereed Research Journal, 6(1), 137.
[12] Agballa, U. B., Odonwodo, C. U., Agida, J., Bature, R., Umar, K., & Onunka, O. (2022). COMPARATIVE ANALYSIS OF VARIOUS LOGICAL TOPOLOGIES IN MOBIL AD-HOC NETWORK (MANET).
[13] Ahmed, K. S., Odejobi, O. D., & Oshoba, T. O. (2021). Certifying Algorithm Model for Horn Constraint Systems in Distributed Databases. International Journal of Scientific Research in Computer Science.
[14] Aifuwa, S. E., Oshoba, T. O., Ogbuefi, E., Ike, P. N., & Nnabueze, S. B. (2020). Predictive Analytics Models Enhancing Supply Chain Demand Forecasting Accuracy and Reducing Inventory Management Inefficiencies. International Journal of Multidisciplinary Research and Growth Evaluation, 1.
[15] Aifuwa, S. E., Oshoba, T. O., Ogbuefi, E., Olatunde-Thorpe, J., & Akokodaripon, D. (2023). Robo-Advisors and Behavioral Bias Mitigation in Investment Decisions. International Journal of Multidisciplinary Research and Growth Evaluation, 4.
[16] Ajayi, J. O., Ayodeji, D. C., Erigha, E. D., Eboseremen, B. O., & Ogedengbe, A. O. (2023). Strategic analytics enablement: Scaling self-service BI through community-based training models. International Journal of Multidisciplinary Research and Growth Evaluation, 4.
[17] Ajayi, J. O., Etim, E. D., Essien, I. A., Cadet, E., Babatunde, L. A., & Erigha, E. D. (2023). AI-Driven Digital Forensics: Automating Evidence Gathering and Analysis.
[18] Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2021). Applied Statistics Models Optimizing Global Supply Chain Networks Under Uncertainty Conditions.
[19] Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2022). Data Visualization with Predictive Modeling Measuring Workplace Diversity Performance Metrics.
[20] Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2023a). AI-Integrated Procurement Frameworks Aligning Operational Efficiency with Organizational Strategic Goals.
[21] Akinlade, O. F., Filani, O. M., & Nwachukwu, P. S. (2023b). Statistical Approaches for Optimizing Order Promising Accuracy Within Supply Chain Networks.
[22] Akintayo, O. D., Ifeanyi, C. N., & Onunka, O. (2020). A Conceptual Lakehouse-DevOps Integration Model for Scalable Financial Analytics in MultiCloud Environments. International Journal of Multidisciplinary Research and Growth Evaluation, 1.
[23] Alao, O. B., Nwokocha, G. C., & Filani, O. M. (2021). Data-Driven Supplier Performance Evaluation Framework Integrating KPIs, Analytics, and Continuous Improvement for Operational Excellence.
[24] Alao, O. B., Nwokocha, G. C., & Filani, O. M. (2023). Digital Twin Technology Applications for Procurement And Inventory Optimization in Industrial Supply Chains and Manufacturing Operations.
[25] Amatare, S. A., & Ojo, A. K. (2020). Predicting customer churn in telecommunication industry using convolutional neural network model. IOSR Journal of Computer Engineering, 22(3), 54–59.
[26] Amini-Philips, A., Ibrahim, A. K., & Eyinade, W. (2020). Designing Data-Driven Revenue Assurance Systems for Enhanced Organizational Accountability. International Journal of Multidisciplinary Research and Growth Evaluation, 1.
[27] Amini-Philips, A., Ibrahim, A. K., & Eyinade, W. (2022). Financing the Energy Transition: Models for Linking Decarbonization Strategies with Corporate Performance.
[28] Amini-Philips, A., Ibrahim, A. K., & Eyinade, W. (2023). Supply Chain Risk Management in Global Operations: An Analytical Review of Emerging Approaches. International Journal of Advanced Multidisciplinary Research and Studies.
[29] Awanye, E. N., Morah, O. O., Ekpedo, L., & Adeyoyin, O. (2023). A Review of ESG Reporting and Sustainable Finance Practices in Emerging Markets.
[30] Ayodeji, D. C., Oladimeji, O., Ajayi, J. O., Akindemowo, A. O., & Eboseremen, B. O. (2022). Operationalizing analytics to improve strategic planning: A business intelligence case study in digital finance. Journal of Frontiers in Multidisciplinary Research, 3(1), 567–578.
[31] Cadet, E., Etim, E. D., Essien, I. A., Ajayi, J. O., & Erigha, E. D. (2021). The role of reinforcement learning in adaptive cyber defense mechanisms. International Journal of Multidisciplinary Research and Growth Evaluation, 2.
[32] Eboseremen, B. O., Ogedengbe, A. O., Obuse, E., Oladimeji, O., & Ajayi, J. O. (2022). Secure data integration in multi-tenant cloud environments: Architecture for financial services providers. Journal of Frontiers in Multidisciplinary Research, 3(1), 579–592.
[33] Eboseremen, B. O., Okare, B. P., Aduloju, T. D., Kamau, E. N., & Stephen, A. E. (2023a). Reviewing the role of IoT in smart city development in Africa. International Journal of Multidisciplinary Research and Growth Evaluation, 4.
[34] Eboseremen, B. O., Okare, B. P., Aduloju, T. D., Kamau, E. N., & Stephen, A. E. (2023b). Reviewing the role of IoT in smart city development in Africa. International Journal of Multidisciplinary Research and Growth Evaluation, 4.
[35] Eboseremen, B. O., Okare, B. P., Aduloju, T. D., Kamau, E. N., & Stephen, A. E. (2023c). The Future of Quantum Computing: A Review of Potential Impacts on IT Industry. International Journal of Multidisciplinary Research and Growth Evaluation, 4.
[36] Ejairu, E., Filani, O. M., Nwokocha, G. C., & Alao, O. B. (2022). Resilience in Global Supply Chains: Conceptual Frameworks for Operational Flexibility and Post-Pandemic Business Recovery Strategies.
[37] Ejairu, E., Filani, O. M., Nwokocha, G. C., & Alao, O. B. (2023). IoT and Digital Twins in Supply Chains: Real-Time Monitoring Models for Efficiency, Safety, and Competitive Edge.
[38] Erigha, E. D., Obuse, E., Okare, B. P., Uzoka, A. C., Owoade, S., & Ayanbode, N. (2021a). Optimizing GraphQL Server Performance with Intelligent Request Batching, Query Deduplication, and Caching Mechanisms.
[39] Erigha, E. D., Obuse, E., Okare, B. P., Uzoka, A. C., Owoade, S., & Ayanbode, N. (2021b). Optimizing GraphQL Server Performance with Intelligent Request Batching, Query Deduplication, and Caching Mechanisms.
[40] Essandoh, S., Sakyi, J. K., Ibrahim, A. K., Okafor, C. M., & Wedraogo, L. (2023). Analyzing the Effects of Leadership Styles on Team Dynamics and Project Outcomes.
[41] Essien, I. A., Cadet, E., Ajayi, J. O., Erigha, E. D., & Obuse, E. (2019). Integrated governance, risk, and compliance framework for multi-cloud security and global regulatory alignment. IRE Journals, 3(3), 215–221.
[42] Essien, I. A., Nwokocha, G. C., Erigha, E. D., Obuse, E., & Akindemowo, A. O. (2019). AI-Driven Credit Scoring Systems and Financial Inclusion in Emerging Markets.
[43] Etim, E. D., Essien, I. A., Ajayi, J. O., Erigha, E. D., & Obuse, E. (2019a). AI-augmented intrusion detection: Advancements in real-time cyber threat recognition. IRE Journals, 3(3), 225–230.
[44] Etim, E. D., Essien, I. A., Ajayi, J. O., Erigha, E. D., & Obuse, E. (2019b). AI-augmented intrusion detection: Advancements in real-time cyber threat recognition. IRE Journals, 3(3), 225–231.
[45] Eyinade, W., Amini-Philips, A., & Ibrahim, A. K. (2022). Fairness aware propensity modeling for mortgage acquisition addressing adverse selection biases simultaneously.
[46] Eyinade, W., Amini-Philips, A., & Ibrahim, A. K. (2023). The Global Venture Debt Concept: A Mechanism for Innovation and Sponsor-Backed Financing.
[47] Farounbi, B. O., Ibrahim, A. K., & Abdulsalam, R. (2020). Advanced Financial Modeling Techniques for Small and Medium-Scale Enterprises. International Journal of Multidisciplinary Research and Growth Evaluation, 1.
[48] Farounbi, B. O., Ibrahim, A. K., & Abdulsalam, R. (2022). Innovations in Corporate Bond Issuance: Oversubscription Dynamics and Implications for Emerging Market Capital Access.
[49] Farounbi, B. O., Ibrahim, A. K., & Oshomegie, M. J. (2020). Proposed evidence-based framework for tax administration reform to strengthen economic efficiency. Iconic Research and Engineering Journals, 3(11), 480–495.
[50] Filani, O. M., Nnabueze, S. B., Ike, P. N., & Wedraogo, L. (2022). Real-Time Risk Assessment Dashboards Using Machine Learning in Hospital Supply Chain Management Systems.
[51] Filani, O. M., Nnabueze, S. B., Sakyi, J. K., & Okojie, J. S. (2023). Scenario-Based Financial Modelling for Enhancing Strategic Decision-Making and Organizational Long-Term Planning.
[52] Filani, O. M., Nwokocha, G. C., & Alao, O. B. (2022). Vendor Performance Analytics Dashboard Enabling Real-Time Decision-Making Through Integrated Procurement, Quality, and Cost Metrics.
[53] Filani, O. M., Okpokwu, C. O., & Fasawe, O. (2020). Capacity Planning and KPI Dashboard Model for Enhancing Supply Chain Visibility and Efficiency.
[54] Hammed, N. I., Oshoba, T. O., & Ahmed, K. S. (2021). Secure Migration Model from On-Premises Active Directory to Entra ID. International Journal of Scientific Research in Computer Science.
[55] Hammed, N. I., Oshoba, T. O., & Ahmed, K. S. (2023). AI-Assisted Root Cause Analysis Model for Enterprise Cloud Infrastructure Failures. International Journal of Scientific Research in Computer Science.
[56] Ibrahim, A. K. (2023). A Conceptual Negotiation Model for Resolving Multi-Million Dollar Tax Disputes in Complex Regulatory Settings. International Journal of Scientific Research in Computer Science.
[57] Ibrahim, A. K., Amini-Philips, A., & Eyinade, W. (2023). An SME Loan Structuring Framework: Customized Credit Solutions in North American Commercial Banking. International Journal of Advanced Multidisciplinary Research and Studies, 3.
[58] Ibrahim, A. K., Farounbi, B. O., & Abdulsalam, R. (2023). Integrating Finance, Technology, and Sustainability: A Unified Model for Driving National Economic Resilience.
[59] Ibrahim, A. K., Ogunsola, O. E., & Oshomegie, M. J. (2021). Process Redesign Model for Revenue Agencies Seeking Fiscal Performance Improvements.
[60] Ibrahim, A. K., Oshomegie, M. J., & Farounbi, B. O. (2022). Comprehensive review of the socio-economic effects of public spending on regional employment. Journal of Public Economics, 28(1), 78–94.
[61] Ike, P. N., Aifuwa, S. E., Nnabueze, S. B., Olatunde-Thorpe, J., & Ogbuefi, E. (2020). Utilizing Nanomaterials in Healthcare Supply Chain Management for Improved Drug Delivery Systems. [Journal Not Specified].
[62] Ike, P. N., Ogbuefi, E., Nnabueze, S. B., Olatunde-Thorpe, J., & Aifuwa, S. E. (2021). Supplier Relationship Management Strategies Fostering Innovation, Collaboration, and Resilience in Global Supply Chain Ecosystems. International Journal of Multidisciplinary Evolutionary Research, 2(2), 52–62.
[63] Ike, P. N., Ogbuefi, E., Nnabueze, S. B., Olatunde-Thorpe, J., & Aifuwa, S. E. (2022). Lean Supply Chain Practices Improving Operational Efficiency, Reducing Waste, and Enhancing Organizational Competitiveness Globally. Journal of Frontiers in Multidisciplinary Research, 3(2), 182–192.
[64] Kaggwa, S., Onunka, T., Uwaoma, P. U., & Onunka, O. (2023). Evaluating the Efficacy of Technology Incubation Centres in Fostering Entrepreneurship: Case Studies From the Global South. International Journal of Management & Entrepreneurship Research, 10(Y), 1–24.
[65] Kamau, E., Myllynen, T., Collins, A., Babatunde, G. O., & Alabi, A. A. (2023). Advances in Full-Stack Development Frameworks: A Comprehensive Review of Security and Compliance Models.
[66] Kisina, D., Akpe, O. E., Owoade, S., Ubanadu, B. C., Gbenle, T. P., & Adanigbo, O. S. (2023). Advances in CI/CD pipeline resilience for airline reservation and customer experience systems. International Journal of Multidisciplinary Research and Growth Evaluation, 4.
[67] Kuponiyi, A., Akomolafe, O. O., & Omotayo, O. (2023). Assessing the Future of Virtual Reality Applications in Healthcare: A Comprehensive.
[68] Kuponiyi, A., Omotayo, O., & Akomolafe, O. O. (2023). Leveraging AI to Improve Clinical Decision Making in Healthcare Systems.
[69] Matter, D., & An, E. (2017). Stock returns sensitivity to interest rate changes. Journal of Finance and Economics, 12(4), 112–130.
[70] Nigeria, V. B., & Okare, B. P. (n.d.). A DevSecOps Policy-as-Code Model for Compliance Automation in Lakehouse Environments.
[71] Nnabueze, S. B., Ike, P. N., Olatunde-Thorpe, J., Aifuwa, S. E., & Oshoba, T. O. (2021). End-to-End Visibility Frameworks Improving Transparency, Compliance, and Traceability Across Complex Global Supply Chain Operations.
[72] Nwafor, M. I., Uduokhai, D. O., & Ajirotutu, R. O. (2020). Multi-Criteria Decision-Making Model for Evaluating Affordable and Sustainable Housing Alternatives. International Journal of Multidisciplinary Research and Growth Evaluation, 1.
[73] Nwafor, M. I., Uduokhai, D. O., Stephen, G., & Aransi, A. N. (2019). Developing an Analytical Framework for Enhancing Efficiency in Public Infrastructure Delivery Systems. Iconic Research and Engineering Journals, 2(11), 657–670.
[74] Nwokocha, G. C., Alao, O. B., & Filani, O. M. (n.d.). Supplier Risk Mitigation and Resilience Framework Incorporating Data Analytics, Multi-Sourcing, and Proactive Vendor Development Strategies.
[75] Nwokocha, G. C., Alao, O. B., & Filani, O. M. (2022). Multi-Criteria Decision-Making Approach for Sustainable Chemical Supply Chain Design Balancing Safety, Cost, and Environmental Impact.
[76] Nwokocha, G. C., Alao, O. B., & Filani, O. M. (2023a). Blockchain-Enabled Vendor Lifecycle Management System Ensuring Transparent Performance Tracking and Compliance in Procurement Networks.
[77] Nwokocha, G. C., Alao, O. B., & Filani, O. M. (2023b). Decision-Support System for Sustainable Procurement Combining Lifecycle Assessment, Spend Analysis, and Supplier ESG Performance Scoring.
[78] Obuse, E., Erigha, E. D., Okare, B. P., Uzoka, A. C., Owoade, S., & Ayanbode, N. (2020). Optimizing Microservice Communication with gRPC and Protocol Buffers in Distributed Low-Latency API-Driven Applications. Iconic Research and Engineering Journals, 4(3), 250–268.
[79] Obuse, E., Erigha, E. D., Okare, B. P., Uzoka, A. C., Owoade, S., & Ayanbode, N. (2023a). Building Loyalty-Based Engagement Systems with Dynamic Tier Management for Scalable User Acquisition and Retention.
[80] Obuse, E., Erigha, E. D., Okare, B. P., Uzoka, A. C., Owoade, S., & Ayanbode, N. (2023b). Building Loyalty-Based Engagement Systems with Dynamic Tier Management for Scalable User Acquisition and Retention.
[81] Obuse, E., Etim, E. D., Essien, I. A., Cadet, E., Ajayi, J. O., & Erigha, E. D. (2020). Explainable AI for cyber threat intelligence and risk assessment. Journal of Frontiers in Multidisciplinary Research, 1(2), 15–30.
[82] Ogayemi, C., Filani, O. M., & Osho, G. O. (2022). A Market Access Optimization Model for New Drug Indications in Emerging Pharmaceutical Markets.
[83] Ogayemi, C., Filani, O. M., & Osho, G. O. (2023). A Conceptual Model for ERP-Integrated Data Analytics in Pharmaceutical Supply Chain Forecasting.
[84] Ogbuefi, E., Odofin, O. T., Abayomi, A. A., Adekunle, B. I., & Agboola, O. A. (2021). A Review of System Monitoring Architectures Using Prometheus, ELK Stack, and Custom Dashboards.
[85] Ogbuefi, E., Olatunde-Thorpe, J., Aifuwa, S. E., Oshoba, T. O., & Akokodaripon, D. (2021). Neural Network Prediction of Pavement Roughness and Ride Quality Using In-Service Roadway Data. International Journal of Multidisciplinary Futuristic Development, 2(2), 34–49.
[86] Ogunsola, O. E., Oshomegie, M. J., & Ibrahim, A. K. (2019). Conceptual model for assessing political risks in cross-border investments. Iconic Research and Engineering Journals, 3(4), 482–493.
[87] Okafor, C. M., Wedraogo, L., Essandoh, S., Sakyi, J. K., Ibrahim, A. K., & Ogunwale, O. (2023). AI-Driven Decision-Making and Its Impact on Business Performance.
[88] Okare, B. P., Aduloju, T. D., Ajayi, O. O., Onunka, O., & Azah, L. (2023). A Role-Based Access Control Model for Multi-Cloud Data Pipelines: Governance and Compliance Perspective. International Journal of Scientific Research in Civil Engineering, 7(3), 163–179.
[89] Okare, P. B., Aduloju, D. T., Ajayi, O. O., & Onunka, O. (2021). A predictive infrastructure monitoring model for data lakes using quality metrics and DevOps automation. Journal of Advanced Education and Sciences, 1(2), 87–95.
[90] Okare, P. B., Aduloju, D. T., Ajayi, O. O., & Onunka, O. (2022). A CI/CD-Integrated Model for Machine Learning Deployment in Revenue Risk Prevention. International Journal of Scientific Research in Science and Technology, 9(1).
[91] Okesiji, A., Oyasiji, O., Elebe, O., Imediegwu, C. C., Filani, O. M., & Umana, A. U. (2020). Blockchain-Enabled E-Governance: A Model for Enhancing Transparency in Developing Economies.
[92] Okoje, J., Soneye, O., Essien, I., Adebayo, A., Afuwape, A., & Eboseremen, B. (2023). The Role of Artificial Intelligence in Sustainable Urban Planning: A Review of Global Trends. Journal of Frontiers in Multidisciplinary Research, 4(1), 539–544.
[93] Okojokwu-Idu, J. O., Ihwughwavwe, S. I., Abioye, R. F., Enow, O. F., & Okereke, M. (2022). Energy Transition and the Dynamics of Carbon Capture, Storage, and Usage Technology. International Journal of Multidisciplinary Research and Growth Evaluation, 3.
[94] Oladimeji, O., Ayodeji, D. C., Erigha, E. D., Eboseremen, B. O., & Umar, M. O. (2023). Governance models for scalable self-service analytics: Balancing flexibility and data integrity in large enterprises. International Journal of Advanced Multidisciplinary Research and Studies, 3(5).
[95] Olaogun, B. O., Amini-Philips, A., & Ibrahim, A. K. (2022). Cybersecurity Threat Modeling Framework for Blockchain-Enabled International Payment Networks.
[96] Olaogun, B. O., Amini-Philips, A., & Ibrahim, A. K. (2023). Blockchain Settlement Impact Model for Institutional Reconciliation and Risk Reduction.
[97] Olatunde-Thorpe, J., Aifuwa, S. E., Oshoba, T. O., Ogbuefi, E., & Akokodaripon, D. (2021). Framework for Aligning Organizational Risk Culture with Cybersecurity Governance Objectives. International Journal of Multidisciplinary Futuristic Development, 2(2), 61–71.
[98] Olatunde-Thorpe, J., Aifuwa, S. E., Oshoba, T. O., Ogbuefi, E., & Akokodaripon, D. (2022). UAV and Computer Vision Integration for Automated Pavement Distress Detection and Classification. International Journal of Multidisciplinary Evolutionary Research, 3(1), 90–109.
[99] Omolayo, O., Taiwo, A. E., Aduloju, T. D., & Okare, B. P. (2022). Secure federated learning architectures for AI-powered health insurance fraud detection systems. International Journal of Scientific Research in Science and Technology.
[100] Onunka, O., Alabi, A., Maxwell, Okafor, C., & Marius. (2023). Cybersecurity in U.S. and Nigeria Banking and Financial institutions: Review and Assessing Risks and Economic Impacts. Acts Informatica Malaysia (AIM), 7(1), 54–62.
[101] Oshoba, T. O., Ahmed, K. S., & Odejobi, O. D. (2023). Compliance-as-Code Model for Automated Governance Pipelines in Hybrid Cloud. International Journal of Scientific Research in Computer Science.
[102] Oshoba, T. O., Hammed, N. I., & Odejobi, O. D. (2021). Adoption Model for Multi-Factor Authentication in Enterprise Microsoft 365 Environments. International Journal of Scientific Research in Computer Science.
[103] Oshomegie, M. J., Ibrahim, A. K., & Farounbi, B. O. (2022). Economic Impact Assessment Model for State Infrastructure Projects to Guide Public Investment.
[104] Owoade, S., Agboola, O. A., & Emmanuel, O. (2022). Advances in Predictive Analytics and Automated Reporting for Performance Management in Cloud-Enabled Organizations. International Journal of Social Science Exceptional Research, 1(01), 291–296.
[105] Owoade, S., Odogwu, R., Ogeawuchi, J. C., & Abraham. (2023). Optimizing Business Process Automation with AI: A Framework for Maximizing Strategic ROI. International Journal of Management and Organizational Research, 2(03), 44–54.
[106] Owoade, S., Ogbuefi, E., Ubanadu, B. C., Daraojimba, A. I., & Akpe, O. E. (2020). Advances in Role-Based Access Control for Cloud-Enabled Operational Platforms. International Peer-Reviewed Journal, 4(2), 159–176.
[107] Popoola, A. D., & Ibrahim, A. K. (2023). Conceptual Model for Advancing Real-Time Analytics and Financial Transparency in Corporations. International Journal of Advanced Multidisciplinary Research and Studies, 3.
[108] Uduokhai, D. O., Stephen, G., Nwafor, M. I., & Adio, S. A. (2022). GIS-Based Analysis of Urban Infrastructure Performance and Spatial Planning Efficiency in Nigerian Cities. Gyanshauryam, International Scientific Refereed Research Journal, 5(5), 290–304.
[109] Wedraogo, L., Essandoh, S., Sakyi, J. K., Ibrahim, A. K., Okafor, C. M., & Ogunwale, O. (2023). Analyzing Risk Management Practices in International Business Expansion.
How to cite this paper
@article{1713553,
author = {Adepeju Deborah Bello, Oghenemaiga Elebe, Nafiu Ikeoluwa Hammed, Gbenga Olumide Omoegun, Oladapo Fadayomi},
title = {A Cybersecurity Risk Management and Regulatory Compliance Framework for Financial Institutions},
journal = {Iconic Research And Engineering Journals},
year = {2024},
volume = {8},
number = {2},
pages = {1180-1193},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1713553.pdf},
abstract = {Financial institutions remain among the most attractive targets for cyberattacks due to their central role in economic stability, extensive digitalisation, and custody of highly sensitive financial and personal data. The increasing sophistication of cyber threats, combined with stringent regulatory expectations, has created a complex environment in which institutions must simultaneously manage cybersecurity risk and demonstrate compliance with evolving regulatory frameworks. Despite the existence of numerous cybersecurity standards, regulatory guidelines, and risk management models, financial institutions continue to face challenges in aligning technical security controls with governance, risk, and compliance (GRC) requirements in a coherent and auditable manner. Fragmentation between cybersecurity operations and regulatory compliance functions often results in duplicated effort, compliance-driven security implementations, and limited organisational resilience. This paper presents a comprehensive cybersecurity risk management and regulatory compliance framework tailored for financial institutions. The framework integrates established cybersecurity risk management principles with regulatory compliance requirements, providing a structured approach that aligns governance, risk assessment, control implementation, monitoring, and reporting. Drawing on a systematic review of previous literature, international standards, and financial-sector regulatory practices, the framework emphasises proportional risk-based decision-making, continuous monitoring, and accountability across organisational levels. The study synthesises insights from cybersecurity governance, enterprise risk management, financial regulation, and operational resilience literature to bridge the gap between technical security controls and regulatory obligations. The proposed framework contributes to academic and practitioner discourse by offering a unified structure that supports both cybersecurity risk reduction and regulatory assurance. It is particularly relevant for banks, insurance companies, payment service providers, and other regulated financial entities operating in highly digitised and interconnected environments. The paper concludes by highlighting practical implications, implementation challenges, and directions for future empirical validation.},
keywords = {Cybersecurity Risk Management; Financial Institutions; Regulatory Compliance; Information Security Governance; Operational Resilience; Financial Regulation},
month = {August},
doi = {https://doi.org/10.64388/IREV8I2-1713553}
}