The Strategic Role of Cybersecurity in Islamic Financial Institutions: Empirical Evidence from Malaysia

As the global Islamic financial ecosystem undergoes rapid digital transformation, the convergence of Islamic Fintech, distributed ledger technology, and smart contract architectures introduces distinct operational opportunities alongside complex cyber vulnerabilities that threaten foundational Halal compliance and system-wide Toyyibah (wholesomeness and trust) integrity. Grounded in the Technology Acceptance Model (TAM) and Maqasid al-Shariah specifically the imperatives of Hifz al-Mal (protection of wealth) and Amanah (custodial stewardship), this study empirically examines four operational dimensions of cybersecurity: core technical security, Islamic asset digitalization, Shariah banking governance, and secure smart contract execution in predicting perceived economic and operational benefits within Malaysian Islamic Financial Institutions (IFIs). Utilizing a quantitative survey design, empirical data were gathered from 246 validated industry practitioners, compliance officers, and corporate stakeholders across Melaka, Malaysia. Statistical estimation via Multiple Linear Regression in SPSS (v26) established a robust, highly explanatory model (R² = 0.759, Adjusted R² = 0.755, F(4, 241) = 189.930, p < 0.001). Hypothesis testing confirmed that Islamic asset digitalization (H2) exerts the dominant influence on perceived institutional benefits (β = 0.633, t = 13.918, p < 0.001), followed by Shariah banking governance (H3: β = 0.170, t = 4.298, p < 0.001) and secure smart contract execution (H4: β = 0.155, t = 4.092, p < 0.001). Conversely, core technical security (H1) was not statistically significant (β = 0.014, t = 0.209, p = 0.835), highlighting its role as an indispensable hygiene factor; necessary for baseline Halal permissibility, yet insufficient on its own to drive Toyyibah operational excellence. These findings offer actionable strategic guidance for Bank Negara Malaysia (BNM) and financial executives to prioritize regulatory technology (RegTech), secure asset tokenization, and integrated Shariah cyber-governance, demonstrating that cybersecurity must evolve beyond passive technical defense into a strategic catalyst for faith-compliant digital growth, systemic resilience, and wealth protection.

Cybersecurity, Islamic Finance, Maqasid al-Shariah

1. Ahmed, H. (2014). Islamic banking and financial development: A review of theoretical and empirical evidence. Journal of Islamic Economics, Banking and Finance, 10(1), 11–28. [Google Scholar] [Crossref]

2. AlSakran, A. (2021). Smart contracts in Islamic banking: Shariah compliance and technical security frameworks. Journal of King Abdulaziz University: Islamic Economics, 34(2), 45–62. [Google Scholar] [Crossref]

3. Alhazmi, A. (2019). Cybersecurity governance in Islamic financial institutions: A regulatory review. International Journal of Financial Studies, 7(3), 32–48. [Google Scholar] [Crossref]

4. Alshater, M. M., M. K., & Khan, A. (2021). What do we know about Islamic fintech? A systematic review. Qualitative Research in Financial Markets, 13(5), 612–636. [Google Scholar] [Crossref]

5. Arshad, M., & Hassan, S. (2016). Cybersecurity risk management in Malaysian Islamic banks. Journal of Banking and Finance, 40(2), 112–128. [Google Scholar] [Crossref]

6. Baqutayan, S. M. S. (2018). Islamic ethics and corporate governance in digital banking. International Journal of Islamic Thought, 14, 22–31. [Google Scholar] [Crossref]

7. Cahayani, N., & Rosly, S. A. (2023). RegTech integration and Shariah governance in Islamic banking. Journal of Islamic Accounting and Business Research, 14(3), 412–428. [Google Scholar] [Crossref]

8. Caldarelli, A., Zardini, A., & Rossignoli, C. (2021). Blockchain technology in Islamic finance: Opportunities and risk challenges. Technological Forecasting and Social Change, 162, Article 120381. [Google Scholar] [Crossref]

9. Chong, F. H. L. (2021). Digitalization of Islamic assets and Sukuk tokenization: Shariah and cybersecurity perspectives. International Journal of Islamic and Middle Eastern Finance and Management, 14(4), 780–798. [Google Scholar] [Crossref]

10. Cull, R., & Demirgüç-Kunt, A. (2018). Financial inclusion and stability: The role of cybersecurity. World Bank Research Observer, 33(2), 169–198. [Google Scholar] [Crossref]

11. Davis, F. D. (1989). Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly, 13(3), 319–340. [Google Scholar] [Crossref]

12. Hair, J. F., Black, W. C., Babin, B. J., & Anderson, R. E. (2019). Multivariate data analysis (8th ed.). Cengage Learning. [Google Scholar] [Crossref]

13. Hussain, M., & Papastathopoulos, A. (2019). Organizational cybersecurity readiness in financial services. Computers & Security, 84, 210–224. [Google Scholar] [Crossref]

14. Ibrahim, A., & Al-Sultan, M. (2023). Maqasid al-Shariah and the protection of digital wealth (Hifz al-Mal) in Islamic banking. Journal of Islamic Law and Culture, 25(1), 88–104. [Google Scholar] [Crossref]

15. Islam, M. R., & Khan, S. (2022). Cyber threat mitigation in digital Islamic banking. Journal of Cybersecurity and Privacy, 2(1), 15–30. [Google Scholar] [Crossref]

16. Jayasheela, K., & Rai, S. (2021). Security risk management in cloud-based Islamic banking. Journal of Cloud Computing, 10(1), 45–58. [Google Scholar] [Crossref]

17. Kabuye, F. I., & Hassan, R. (2018). Internal controls and risk management in Islamic financial institutions. Humanomics, 34(3), 274–292. [Google Scholar] [Crossref]

18. Khalid, R., & Mansor, N. (2021). Smart contracts and Shariah law: Compatibility and security challenges. Arab Law Quarterly, 35(3), 280–302. [Google Scholar] [Crossref]

19. Khan, M. A., Rabbani, M. R., & Taufiq, M. (2023). Cybersecurity and data privacy in Islamic fintech: A Maqasid al-Shariah approach. Journal of Central Banking Law and Institutions, 2(3), 415–442. [Google Scholar] [Crossref]

20. Krejcie, R. V., & Morgan, D. W. (1970). Determining sample size for research activities. Educational and Psychological Measurement, 30(3), 607–610. [Google Scholar] [Crossref]

21. Laldin, M. A., & Djafri, F. (2019). Shariah governance in Islamic digital banking: Regulatory challenges and future outlook. ISRA International Journal of Islamic Finance, 11(2), 215–230. [Google Scholar] [Crossref]

22. Mihajat, M. I. (2016). Shariah audit and risk management in Islamic banks. Journal of Islamic Banking and Finance, 33(4), 55–68. [Google Scholar] [Crossref]

23. Mohsin, M. I. A. (2013). Risk management in Islamic financial institutions. Journal of Financial Crime, 20(3), 310–324. [Google Scholar] [Crossref]

24. Natarajan, S., & Subramanian, K. (2017). Distributed ledger security and cryptographic hashing in digital assets. IEEE Transactions on Information Forensics and Security, 12(4), 890–903. [Google Scholar] [Crossref]

25. Nazim, M., & Ahmad, N. (2021). Cybersecurity awareness and consumer adoption of Islamic digital banking. International Journal of Bank Marketing, 39(6), 1020–1040. [Google Scholar] [Crossref]

26. Nunnally, J. C., & Bernstein, I. H. (1994). Psychometric theory (3rd ed.). McGraw-Hill. [Google Scholar] [Crossref]

27. Osman, Z., Rashid, M., & Said, R. (2020). Evaluating cybersecurity roles in maximizing perceived benefits in Islamic banking. Journal of Islamic Accounting and Business Research, 11(8), 1540–1558. [Google Scholar] [Crossref]

28. Radwan, A., & Farag, M. (2020). RegTech and automated Shariah compliance in Islamic fintech. Journal of Financial Regulation and Compliance, 28(2), 210–228. [Google Scholar] [Crossref]

29. Rahman, A. A., & Kassim, S. (2020). Security perception and adoption of Islamic digital banking in Malaysia. Journal of Islamic Marketing, 11(5), 1180–1198. [Google Scholar] [Crossref]

30. Sarker, M. N. I., & Wu, M. (2020). Cyber risk management in digital financial inclusion. Telecommunications Policy, 44(8), Article 101980. [Google Scholar] [Crossref]

31. Shahzad, F., & Baig, S. (2019). Information security management in banking: A systematic literature review. Total Quality Management & Business Excellence, 30(11), 1250–1270. [Google Scholar] [Crossref]

32. Stephen, J., & Thomas, P. (2018). Vulnerabilities in smart contract architectures. ACM Computing Surveys, 51(3), 1–36. [Google Scholar] [Crossref]

33. Uddin, M. A., & Chowdhury, M. A. F. (2022). Maqasid al-Shariah framework for cybersecurity risk governance in Islamic banks. Journal of King Abdulaziz University: Islamic Economics, 35(1), 75–92. [Google Scholar] [Crossref]

34. Utami, P., & Laksana, B. (2020). Shariah governance and IT adoption in Islamic microfinance. Journal of Asian Finance, Economics and Business, 7(9), 450–462. [Google Scholar] [Crossref]

35. Yasini, M., & Shafiee, M. (2019). Automated execution of Islamic contracts using smart technology. Journal of Emerging Technologies in Web Intelligence, 11(2), 112–125. [Google Scholar] [Crossref]

• Late Payment Charges in Islamic Banking: A Critical Shariah and Legal Analysis with Reference to Malaysia and Comparative Jurisdictions
• Beyond Interest-Free Financing: A Comparative Shariah and Consumer Protection Analysis of Atome and Spaylater in Malaysia’s Buy Now, Pay Later Industry