The Architecture of Vulnerability: How Organizational Dynamics Drive Cyber Risk

HRMARS - The accelerating reliance on digital infrastructure has escalated the urgency for robust cyber risk management within public sector entities, particularly local authorities. These organizations face systemic vulnerabilities, including fragmented security policies, outdated frameworks, inadequate employee training, and a lack of executive commitment. The absence of globally recognized standards, such as ISO/IEC 27001, further compromises their ability to safeguard critical information assets. As digital threats grow in frequency and sophistication, a systematic, comprehensive approach to enterprise risk management is imperative. This study investigates how core organizational factors—specifically cybersecurity policies, continuous training, and leadership commitment—influence cyber risk occurrence and mitigation within Malaysian local authorities. Utilizing a quantitative research design, data was gathered via a structured online questionnaire from 149 respondents, selected through stratified random sampling to ensure balanced representation from operational staff and senior management. The empirical findings reveal that all three organizational factors are significantly correlated with cyber risk mitigation. Crucially, regression analysis identified cybersecurity training as the single most powerful predictor of risk reduction, highlighting human capital development as the cornerstone of digital resilience. Ultimately, this research underscores the necessity of a proactive, holistic cybersecurity strategy, offering vital insights for policymakers and practitioners to fortify public sector governance.