Impact of Information Technology Risks on Security Controls: A Field Study in Telecommunications Companies in Sana'a

Abstract

This study aimed to assess the impact of information technology risks on security controls in telecommunications companies operating in Sana'a, following an analytical method. The study population consisted of telecommunications companies in Sana'a, and a comprehensive census method was used to collect data from 356 participants using a questionnaire. However, only 218 questionnaires were valid for analysis. Data were analyzed using partial least squares structural equation modeling (PLS-SEM). The study findings revealed that information technology risks have a negative impact on security controls. The study recommends the necessity of implementing strong multi-factor authentication, devoting especial attention to access control, and regularly identifying vulnerabilities in security controls.