The Strategic Role of Cybersecurity in Islamic Financial Institutions: Empirical Evidence from Malaysia
Abstract
As the global Islamic financial ecosystem undergoes rapid digital transformation, the convergence of Islamic Fintech, distributed ledger technology, and smart contract architectures introduces distinct operational opportunities alongside complex cyber vulnerabilities that threaten foundational Halal compliance and system-wide Toyyibah (wholesomeness and trust) integrity. Grounded in the Technology Acceptance Model (TAM) and Maqasid al-Shariah specifically the imperatives of Hifz al-Mal (protection of wealth) and Amanah (custodial stewardship), this study empirically examines four operational dimensions of cybersecurity: core technical security, Islamic asset digitalization, Shariah banking governance, and secure smart contract execution in predicting perceived economic and operational benefits within Malaysian Islamic Financial Institutions (IFIs). Utilizing a quantitative survey design, empirical data were gathered from 246 validated industry practitioners, compliance officers, and corporate stakeholders across Melaka, Malaysia. Statistical estimation via Multiple Linear Regression in SPSS (v26) established a robust, highly explanatory model (R² = 0.759, Adjusted R² = 0.755, F(4, 241) = 189.930, p < 0.001). Hypothesis testing confirmed that Islamic asset digitalization (H2) exerts the dominant influence on perceived institutional benefits (β = 0.633, t = 13.918, p < 0.001), followed by Shariah banking governance (H3: β = 0.170, t = 4.298, p < 0.001) and secure smart contract execution (H4: β = 0.155, t = 4.092, p < 0.001). Conversely, core technical security (H1) was not statistically significant (β = 0.014, t = 0.209, p = 0.835), highlighting its role as an indispensable hygiene factor; necessary for baseline Halal permissibility, yet insufficient on its own to drive Toyyibah operational excellence. These findings offer actionable strategic guidance for Bank Negara Malaysia (BNM) and financial executives to prioritize regulatory technology (RegTech), secure asset tokenization, and integrated Shariah cyber-governance, demonstrating that cybersecurity must evolve beyond passive technical defense into a strategic catalyst for faith-compliant digital growth, systemic resilience, and wealth protection.