Advertisement
Browse Subject Areas
?

Click through the PLOS taxonomy to find articles in your field.

For more information about PLOS Subject Areas, click here.

  • Loading metrics

Open Access

Peer-reviewed

Research Article

Evaluating factors contributing to the failure of information system in the banking industry

Abstract

The increasing use of Information Technology (IT) has led to many security and other related failures in the banks and other financial institutions in Bangladesh. In this paper, we investigated the factors contributing to the failurein the IT system of the banking industry in Bangladesh. Based on the experts’ opinions and weight on the specified evaluating criteria, an empirical test was conducted using a rough set theory to produce a framework for the IT system failure factors. In this study, an extended approach involving the integration of rough set theory based flexible Failure Mode and Effect Analysis (FMEA) and the Technique for Order of Preference by Similarity to Ideal Solution (TOPSIS) has beenapplied to help the managers of the corresponding field to identify the factors responsible for the failure of the IT system in the banking industries and then prioritize them accordingly, for the ease of decision-making.In this research, eleven such failure factors were identified, which were then quantitatively analyzed to facilitate managers in crucial decision-making. It was observed that cyber-attack, database hack risks, server failure, network interruption, broadcast data error, and virus effect were the most significant factors for the failure of the IT system. The framework developed in this research can be utilized to assist in efficient decision-makingin other serviceindustries where IT systems play a key role. To the best of the knowledge, this is the first study thatempirically tested key failure factors of the IT system for the banking sector using an integrated method.

Citation: Ali SM, Hoq SMN, Bari ABMM, Kabir G, Paul SK (2022) Evaluating factors contributing to the failure of information system in the banking industry. PLoS ONE 17(3): e0265674. https://doi.org/10.1371/journal.pone.0265674

Editor: Fausto Cavallaro, Universita degli Studi del Molise, ITALY

Received: September 23, 2021; Accepted: March 5, 2022; Published: March 17, 2022

Copyright: © 2022 Ali et al. This is an open access article distributed under the terms of the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are credited.

Data Availability: All relevant data are within the paper and supporting information.

Funding: We declare that the authors received no specific funding for this work.

Competing interests: NO authors have competing interests

1 Introduction

The economy is the driving force of the modern world, whereinformation technology (IT) or information system (IS) plays a vital role [1]. The incorporation of technology to formulate business is no longer a new concept [2]. As a matter of fact, in this modern age, the financial market and the banking industry largely depend on IT. Research shows that cost-effective banking transactions can be conducted through e-channel only [3]. With the growth of modern IT systems and their proper utilization, the traditional banking system has experienced radical changes. For instance, banks and other Non-Bank Financial Institutions (NBFI) have gone through a paradigm shift over the past few years. IT systems have significantly improved the banking business, and have gradually made the business dependent on itself [4]. Moreover, IT plays the lead role in the digitalization of the banking systems, meeting market demands, and maintaining healthy competition with the competitors [5]. As per the World Bank report (released in August 2020), the global economy is positively being transformed by the rise in the adoption of digital business models [6] and the usage of digital financial services.

In recent times, the banks and other financial industries are adopting more and more new technologies in their businesses, to streamline their operations and to gain significant advantages in the increasingly competitive market [7,8]. Consequently, there has been a drastic shift in the way that modern customers now access their financial services. An increasing number of customers are now using digital or IT financial services via computers or mobile devices. As customers come to rely more heavily on these IT channels, the resilience and availability of these channels have become an important issue, since it is likely that even any brief disruption in these channels can cause significant concern among consumers [9].

Dependencyon systems without proper knowledge of execution can pose a great threat to this sector. For instance, minor security breaches may often lead toimmense financial losses. For better performance and output optimization, adequate training, and counseling for information literacy are grievous necessities for the banking system which requires the knowledge of Service Supply Chain Management (SCM). Service SCM system assists service enterprises by optimizing the core businesses, minimizing expenses, improving service quality, and so on [10]. With the help of modern technology, service SCM has successfully strengthened the banking business throughout the world. Countries around the globe are taking technology-based fiscal measures and adoptingan extensive monetary policy to evade possible economic contraction.

The banking service sector interacts with several other sectors for the growth of the economy. Banks and other NBFIs hold a major share in Bangladesh’s economy. Including a total of 50 national banks with 9 international banks and 34 NBFI, the sector shows exquisite growth promises in the country’s economy. In the era of IT, banking in Bangladesh is not merely confined to the banks; along with the development of information management and communication technology, financial institutions are executing transactions via deploying agents as well as smartphone-based applications for their customers. In recent years, as a major part of the service supply chain (SSC), IT-based banking has spread all around the country by means of various products like online banking, mobile banking, agent-based banking, etc. Now, people have embraced internet banking more than ever and the coverage of these services is spreading more and more, considering their extensive demands. The authorities of the financial organizations are also encouraging fund transfer through internet banking to uplift those various IT-based banking servicesand improve the quality of those services [11]. Extended transaction limit, ceiling per transaction, and transactions per day are some of the steps taken by the banks to promote IT-based banking services.

However, it has been observed that, even though the rest of the world is well aware of the safety and security of IT-based banking,the banking sector,especially in Bangladesh, is still struggling with it. Although technology being a propelling factor of the economy, there exist threats and failures to safeguard the business from various existing loopholes [12].Clementina and Isu [13] evaluate the insecure situation, bank fraud, and their impact on bank performance fromthe perspective of the commercial banks of Nigeria. The study used a multiple regression analysis to determine if there is any significant relationship between the indicators of bank insecurity and fraud. Ula et al. [14] explores the relationship between information assets and potential threats tothe banking system. The study also examines and compares the elements from the commonly used information security governance frameworks, standards, and best practices. Edge et al. [15] tried to help the banks and other financial institutions to identify how attackers compromise accounts and develop methods to protect them. They used an ‘attack trees and protection trees’ method to do this.

Various MCDM techniques have been used in the area of failure and risk analysis in recent time. For example, Bathrinath et al. [16] analyzed the risks in the textile industry using an Analytic Hierarchy Process (AHP)- Technique for Order of Preference by Similarity to Ideal Solution (TOPSIS) hybrid method. Şenel et al. [17] analyzed the risks in the maritime industries of Turkey using FMEA based intuitionistic Fuzzy TOPSIS Approach. Pamučar et al. [18] used a multi-criteria Full Consistency Method (FUCOM)- Multi-Attributive Ideal-Real Comparative Analysis (MAIRCA) model for the evaluation of level crossings in the Republic of Serbia. Stević and Brković [19] utilized a hybrid FUCOM- Measurement of alternatives and ranking according to compromise solution (MARCOS) model for evaluation of human resources in a transport company. Jokić et al. [20] used a Level Based Weight Assessment (LBWA)-Fuzzy Multi-Attributive Border Approximation area Comparison (MABAC) method for the selection of appropriate firing positions for the mortars used by the military artillery unit. Liu et al. [21] used an integrated Stepwise Weight Assessment Ratio Analysis (SWARA)- MABAC method to assess occupational health and safety risk. Hou et al. [22] analyzed the safety risks in the metro construction under epistemic uncertainty, using credal networks and the Evaluation Based on Distance from Average Solution (EDAS) method. Bakhat and Rajaa [23] analyzed the risks in a wind turbine operation in Morocco using a Gray AHP-MABAC approach. Xu [24] performed a performance evaluation in the investment environment of blockchain industry using a Fuzzy Combinative Distance based Assesment (CODAS) method. However, there has not been any significant research using any MCDM technique on the identification and analysis of the factors contributing to the IT failures in the in financial institution so far, which presents a clear research gap.

Hence, this research, at first, intends toidentify the factors that contribute to the failure of the banking IT systems from expert feedbacks and previous relevant literatures. After that, it proposes a rough-TOPSIS (Technique for Order of Preference by Similarity to Ideal Solution) based flexible Failure Mode and Effect Analysis (FMEA) approach to evaluate the identified factors.

This research was motivated by therecent banking security failure incidents that took place in Bangladesh. The 2016 cyber heist, or the recent automated teller machine (ATM) theft of 2019, corroborates that the financial sector of Bangladesh is on the verge of security abuse. In June 2019, nine ATM booths of a bank have encountered a scam that incurred a loss of Tk 1.4 million [25]. Experts are still not sure whether the hacker syndicate exploited the server issue or if it is the fault of the bank’s ATM software, which in some way proves the lack of literacy in the bank management.

Moreover, unscrupulous officials and business personnel collaborated to exploit the Letter of Credit (LC) system with forged documents in the name of bogus companies. The LC scam of Tk 36.48 billion between 2010 and 2012 is one of such notable incidents [26]. In 2016, another setback hit the financial sector of Bangladesh, which eventually resulted in the transfer of USD $101 million to two countries by infecting the system with a malware. Although $38 million has been fully recovered from two different countries later, the remaining $63 million is yet to be recovered [25]. In the case of local transactions,the Society for Worldwide Interbank Financial Telecommunication (SWIFT) network is connected with the Real Time Gross Settlement (RTGS) system. Hackers exploited the vulnerability of the SWIFT-RTGS connection illegally for the cyber theft incident. That incident is still well known as the biggest-ever cyber heist in Asia. Unlike traditional hacking of the account holders’ login credentials, this attack targeted the Bank’s credentials by infecting their systems with malware. Incidents like this have shaken up the trust of the customers in the IT-based banking system security as a whole.

Automation and upgradation of the management information systems were some of the critical suggestions from the security expertsto resolve these alarming security issues of Banks and NBFIs. Addressing technical issues and business confidentiality is not enough and a continuous effort to keep an updated security system is essential. Improving preventive measures can minimize the collateral damages, instead of regular troubleshooting.

Several studies have suggested that in many case customers demonstrates aversion in accepting IT-based business activities, largely because of security concerns and other related trust issues [27]. Because of the security issues in the financial industries of Bangladesh, there is an escalated demand for technical security and information management system [28]. In this regard, a managerial survey and sector-wise analysis under the concept of SSC are required to be performed [29]. However, the selection of an appropriate mathematical model for the evaluation of SSC properties is challenging due to the qualitative nature of these failures [30]. Meanwhile, monetary, reputational, as well as information loss [31], can occur if any of the failure factors remains unchecked. Therefore, experts have suggested that identifying and ranking the failure factors can help them to prioritize the issues that need to be addressed to prevent these security failures from happening again in the future [32].

Previous literature, however, hardly provides any concrete insights that recognize and rank various failure factors of this SSCespecially in terms of IT systems of the banking sectorof Bangladesh. Despite the groundbreaking growth of this industry, there have been many voids in previous studies in the establishment of an effective model to address these problems in the context of Bangladesh. Therefore, this work aims to cover the research gap that targets the financial sector when it is vulnerable to IT-related security abuse. The main purpose of this research is to recognize as well as analyze the failure issues of the IT systems in the field of the SSC in the Banking sector of Bangladesh.

In this study, a rough TOPSIS based FMEA approach has been used for effective identification and prioritization of the most significant failures. FMEA and TOPSIS variants have been used together before in several recent studies involving failure and risk analysis. For example, Vahdani et al. [33] utilized this approach to assess the failure causes of the steel production process; and Selim et al. [34] developed a dynamic maintenance planning framework for an international food company. Recently, Başhan et al. [35] used these for maritime risk evaluation and ship navigation safety.

A rough TOPSIS method has been used here, which combines rough set theory with the traditional TOPSIS method [36]. The Rough Set theory addresses the uncertainty of human judgments, where performance rating and weights cannot be assigned accurately [37]. Hence, in this study, the framework integrates the strength of rough set theory to tackle vagueness and the merit of the TOPSIS assessment structure. It is used in most cases where the study involves dealing with imprecise or incomplete information [38]. For instance, this method has been used successfully for supplier selection [39], career path selection for students [40], parametric analysis for the machining process [41] and so on. The reason rough TOPSIS is often preferred in much recent research is that it not only improves the reliability of the TOPSIS calculation program but also expresses more potential information considering the uncertainties [36,42],.The proposed rough TOPSIS based on flexible FMEA evaluates the failure modes except for prior information and made the execution of the FMEA process very effective [43].

To implement the proposed rough-TOPSIS framework, a case study on several state-owned as well as private commercial banks and NBFIs in Bangladesh has been carried out. This study collected information from several banks and software firms of Bangladesh intending to formulate a framework to prioritize the predetermined failure issues. Experts of various disciplines have shared their experiences focusing on the main essence of this study. The goal is to gather and share valuable experiences and knowledge for the development of the Banking IT systems that can assist in minimizing the security risks in this sector. The rest of the paper is organized as follows. Section 2 discusses the related materials and methods. Section 3 presnts the results and discusses them. Section 4 concludes this paper.

2 Materials and methods

2.1 Conceptualization of IT failure factors

This research conceptualizes the factors contributing to the failure of the IT system in the banking industry. Based on extant literature and expert inputs, several factors were identified. The role of each factor is discussed below.

Database hack.

For any service, the supply chain database comprises comprehensive links, which can be used to analyze organization based risks [44]. Renowned companies around the world, heavily rely on their centralized database servers. For IBM, to serve the business points simultaneously with negligible slack, their database is considered as part and parcel of the company [45]. Any hindrance to the process can compromise the whole information system. Loss of login credentials, unauthorized changes in settings, and other vital information may pose threats to IT-based businesses. Hereby, routine backup of the database can mitigate the impact of database hack [46].

Server failure.

The server is one of the vital parts as potential hackers sneak into it or infect to serve their heinous purposes. In 2002, an international financial services company of the United States lost its 10 billion files that eventually affected more than 1300 companies’ servers [47]. One failure of such kind may often lead to many other failures of various types like the ripple effect. Prompt preventive measures, timely backups, and proper recovery maneuvers can minimize the impact of these losses [48]. Hence, failure of the server may result in loss of information and thus pose a vital threat to the business.

Virus effect.

Now-a-days organizations related to IT as well as financial sectors are susceptible to virus attacks. Malware can be divided into two broad categories: network-based and non-network based. In fact, the 2016 cyber heist was initiated through malware. Cloud-based supply chain management systems are getting more popular day by day, even though there are still chances of data damage through viruses [49]. In order to minimize the impact of viruses, a wide range of steps like surveillance on IT systems, mechanisms similar to proxy server code repositories, regular scanning of the system, etc. should be implemented [50].

Cipher to plaintext malfunction.

Improper interpretation of cipher-text may lead to wrong decryption of a message. Though cryptography protects sensitive data by encryption [51], if deciphering is not executed according to the key, plaintext remains undiscovered. This way, the main purpose of encryption hardly serves.

Character misspelled.

The misspelling character of a message can often create great confusion. For example, if a bank’s IT official misspells a decimal, it may result in enormous financial loss. Hence, people working in the Banking IT system have to be extremely careful about it.

Wrong message transcription.

Unlike other significant failures, message transcription may seem trivial, yet has a significant impact on proper communication among various business and banking entities. Especially, in the IT-based financial industries, message transcription is highly sophisticated. Miscommunication, thereby, can cause huge financial losses.

Peripheral error.

It involves the unintentional errors that occur due to erroneous use of input and output devices, which can create failure of the IT system of the Banking or Financial industry. It has been observed that unskilled and inept users in the bank (bank officials and staff), often being unaware of the proper usage technique of IT system devices, use the input and output devices of the system in an improper way, which is usually a major reason for peripheral errors.

Broadcast data missing (up/down) link failure.

Larger the network, the higher the chances of link failure. Accidental disconnections and electromagnetic interferences negatively impact the network’s reliability. Up/down link failure, thereby, impairs overall network performance [52].

Cyber attack.

IT-based businesses like banking industries, IT companies, and other financial institutions put utmost importance on cybersecurity. Once the malware infects the system, it can be used to trigger secretly and anonymously for unauthorized action [53]. Cybercriminals with ill intentions are a grave risk to SSC security all over the world.

Third party intervention.

An analysis of information system risk identifies deliberate external database attacks as the vital risks [54]. Human failure is the prime reason for third party intervention, which can be categorized as security abuses. IT companies or software organizations are dependent on vendors, and some other third parties to some extent. A security breach can occur from the end of the third parties if the financial institutions are not very careful.

Network interruption.

Although a survey on the US-based bank implied return on asset (ROA) and network system variables to be mutually independent [5], banking activities nowadays are predominantly dependent on IT, including all the online transactions largely. Hence, even a slight failure in the IT/IS network can trigger doubts about a large number of transactions [55]. Table 1 summarizes the literature reviewed for identifying the failure factors considered in this study.

thumbnail
Download:
Table 1. Failure factors of IT System in the Banking Industry.

https://doi.org/10.1371/journal.pone.0265674.t001

2.2 Research steps

This research work focuses on identifying the failure factors and prioritizing them in the context of the banking industry of Bangladesh. Fig 1 illustrates the steps followed in this research.

thumbnail
Download:
Fig 1. Research steps.

https://doi.org/10.1371/journal.pone.0265674.g001

The proposed research consists of five steps, as mentioned below.

Step 1:Identification of failure factors

The objective of this step is to generate a comprehensive list of failure factors of the Banking IT system, based on the events that might hurt the banking industry. In this step, 3 relevant SSC failure factors are identified from experts’ input and 8 factors have been identified from the previous relevant studies. Thus, a total of 11 failure factors of the IT system in the banking industry have been identified from surveying the experts and analyzing the literature in the corresponding field (see Table 1). After that, the crisp weights of failure factors have been determined.

Step 2: Conversion of the rough interval by using the rough TOPSIS method

In this step, the crisp importance of failure factors is converted into a rough interval form. Then rough TOPSIS based flexible FMEA approach has been implemented by converting constructed group decision matrix into the rough interval. Afterward, a weighted rough interval decision matrix has been determined. The decision matrix uses the weighted normalization process to formulate a corresponding rough number.

Step 3: Determination of closeness coefficient

In this stage, the identification of positive ideal solution (PIS) and negative ideal solution (NIS) is executed. Then separation from PIS and NIS for failure modes is calculated. After that, a closeness coefficient is defined. It is determined with respect to the criteria like Severity (S), Occurrence (O), Detection Difficulty (D), Time (T), and Cost (C).

Step 4: Ranking of failure modes

Failure factors are ranked according to their importance. The closeness coefficient (CC) is the basis of this ranking.The managers will address the issues according to the risk ranking.

Step 5: Conclusions, managerial implications, and recommendations

Implementation of this model is mainly applicable when banking managers use it for solving problems that have been generated from IT failures. The future scope and limitations of this work have also been discussed in this section.

2.3 Rough set theory

Rough set theory has applications in many areas of research. One of the most important applications of rough set theory is that it’s incorporation eliminatesthe impact of vagueness in decision making [37]. For example, in the area of decision analysis, the decision-makers are required to evaluate the criteria for a particular problem and provide feedback on them using some particular scaled values. Since it is not always possible to make sure that all the decision-makers are experts in all fields, an inexperienced decision-maker can decide on a particular area and the judgment made by that expert might contain uncertainty. In order to find and eliminate these uncertainties, rough set theory plays an important role [43]. Basic equations of rough set theory and rough number are presented in the Appendix.

2.4 Background of rough TOPSIS method based on flexible FMEA

To prioritize the failure modes of IT systems in the banking sector, a flexible FMEA approach has been presented in this research. In conventional FMEA,possible indirect relationships between the factors are not considered and the failure factors are weighted equally; whereas, if risk analysis cases differ, their weights should also vary [42].The scale used by conventional FMEA depends on absolute values. Experts often face difficulties due to the lack of historical data [33]. Flexible FMEA has been used in this research,since it can overcome the above-mentioned issues of conventional FMEA. Flexible FMEA is a relatively new approach where the risks that are identified in multiple FMEAs or studies are combined to provide a complete picture or information. This technology includes the extraction of risk information envisioned at the beginning of the study as the result of unpredicted incidents in a process. To deplete process diversity, flexible FMEA has been proven to be useful in recognizing opportunities.

In this research, the rough TOPSIS method based on flexible FMEA follows the following steps.

Step 1: Formation of the expert panel

Experts with various range of experiences were selected from diversified but related fields, which includes professionals from the bank and other NBFI, IT specialists and engineers.

Step 2: Determining rough interval weight of failure factors S, O, D, T, and C

(1) After determining the failure modes, the experts are required to choose the crisp importance of each criterion (S, O, D, T, and C) using a scale of scores from 1 to 10. A score of 1 indicatesthat the criterion is of the least significance, while a score of 10 demonstrates extremelyrelevance. Therefore, a crisp evaluation value can be achieved for failure factor’s weight.

1

Where represents the kth expert assessment on the significance of the criterion of j. lrepresents the number of experts in the decision matrix.

(2) The rough number form is then derived from crisp importance with the formula in Appendix A in S1 File. The rough interval form of can berepresented as 2

Where L and U represent the lower limit and upper limit of rough number

The following equations are used to determine the rough weight of criterionj .

34

j = S, O, D, T, and C; and are lower limit and upper limit of rough weight respectively.

Step 3: Rough TOPSIS framework based on flexible FMEA approach

(1) Construction of crisp failure modes evaluation matrix: At first, it is assumed that there are m failure modes FMi (i = 1,2, …, m) which is to be evaluated against assigned criteria Cj (j = S, O, D, T and C). Failure mode ratings with respect to criteria are then evaluated from multidisciplinary experts’ input on conventional scores, in this case from 1 to 10; where 10 indicates the most important and 1 indicates the least important. Assuming thatl experts of an FMEA team are making decisions, the failure modes ranking in FMEA can be expressed in the form of evaluation matrix D, which can be written as follows: 5

Where k = 1,2,…,land (i = 1,2,…,m) is the rating of the kth expert for the ith failure mode with respect to the criterion j.

(2) Obtaining Rough group decision matrix: To obtain rough group decision matrixR, the crisp element in the group decision matrix D can be converted into rough number form. Rough number form of can be executed with the help of equations listed in appendix A in S1 File.

6

Where and represent the lower limit and upper limit of rough number respectively. Hence, a rough number formcan be achieved as follows.

7

Using rough computation principles, the average rough interval can be acquired.

8910

Thus, the rough group decision matrix R can be obtained as follows: 11

(3) Determination of weighted normalized decision matrix in the form of rough number: Following equations show how the normalization method is used to transform different criteria scales into a comparable scale: 12 13

The method mentioned earlier regarding the normalization is designed to preserve the property of normalized interval numbers’ ranging between [0, 1]. Afterward, the weighted normalized rough matrix can be calculated as follows: 14 15

(4) Now, Positive Ideal Solution (PIS) and Negative Ideal Solution (NIS) can be obtained as follows 16 17

Where V+(j) and V−(j) are PIS and NIS values with respect to criterion j. B and C are associated with the benefit criterion and cost criterion,respectively.

(5) Using the n-dimensional Euclidean distance equation, the separation of individual failure mode from the PIS can be calculated as follows.

18

Likewise, the separation from the NIS can be calculated as 19

Once the and of individual failure modes FMi have been calculated, a closeness coefficient is defined for determining the ranking order of identified failure modes. The closeness coefficient CCi of the failure modes FMi with respect to selected criterion (S, O, D, T, and C) is defined as 20

As CCi approaches to 1, failure modes FMi gets closer to the and farther from . The smaller the CCi is, the severe risk of failure mode becomes. After that,the risk priority of identified failure modes can be determined in consistence with the closeness coefficient.

2.5 Data

Data were collected from the banking industry of Bangladesh. Experts in the IT and software industry with years of experience in the banking industry have been selected as usual candidates for the survey. Existing literature, as well as 32 experts of versatile fields, have identified major failure factors. Eventually, they participated in ranking them as per the proposed methodology of the previous section. Experts spontaneously participated in the non-disclosure survey.

In this study, two steps have been followed for collecting the necessary data and information. In Step 1, based on the literature review and managers’ opinion, factors contributing to failure modes of IT systems in the banking industrywere identified, and in Step 2, the analysis of the identified failure factors with the help of experts’ input was performed.

Before the data collection phase, a specialist panel from the pertinent industrieswho have multidisciplinary professional experience was formed. Afterward, the required data have been collected from the experts. The survey was initially conducted, using a questionnaire, both online and offline as per the professionals’ convenience. Their feedback was documented to develop and clarify the questionnaire. All the experts who took part in this study are either bank officials/personnel or IT professional, who hold at least a Masters degree in their relevant area of expertise. The majority of the participating IT professionals have degree in computer engineering. However, the experts were not comfortable to share and publish their exact academic background. Therefore, this information is not included in this study. Abrief summary of the experts based on their experience is listed in Table 2.

thumbnail
Download:
Table 2. The domain of experts.

https://doi.org/10.1371/journal.pone.0265674.t002

The two-step data collection process is explained as below:

  1. Step 1: Recognizing factors responsible for IT system failure in banks and NBFI

At first, from the previous history and reports from the related organizations, factors responsible for IT system failure in banks and NBFI have been identified. During the primary phase, the experts’ panel was requested to make necessary modifications or inclusion of any risk relevant to the failure of the IT system in the financial sector of Bangladesh. Subsequently, the responses were gathered from the experts in order to finalize the list. This way, eleven possible factors were identified (Table 1) that are responsible for the IT system failure of the financial sector in Bangladesh

  1. Step 2: Analysis of identified failure modes with the help of experts’ opinions for ranking

The identified failure factors were ranked by implementing rough set theory and TOPSIS. For the analysis, a meeting with the expert panel was arranged at the very beginning to generate a basic idea. With the help of their feedback, crisp importance criteria and failure modes were listed in a table for the survey. After that,using the experts’ input, the ranking of failure modeswas performed.

Once the major potential failure modes are determined, subjective assessments of 32 experts in crisp variables are utilized to obtain the importance of failure factors (S, O, D, T, and C), which are determined according to the basic formula of rough set theory and rough number. The experts’ perspectives on crisp ratings about failure modes regarding each failure factor are then determined.

3 Results and discussion

3.1 Results

3.1.1 Rough interval and normalized weight.

At first, the evaluating criteria are rated based on expert opinions. Ratings were scaled from 1 to 10.Score 1 means the least importance, while a score of 10 indicatesthe highest importance. Failure modes are then rated based on different criteria and expert opinions.

Using the formula of the lower limit and upper limit listed in the Table A1 of Appendix A in S1 File, a rough number form of the crisp importance rating is calculated. A sample calculation, for better comprehension, is presented below. Let the crisp ratings for failure factor ‘Severity’ according to 4 experts are [2, 4, 7, 7].

thumbnail
Download:

https://doi.org/10.1371/journal.pone.0265674.t003

As per equations of appendix A in S1 File and Eqs 3 and 4, the average rough intervals are determined. Likewise, for different failure factors, rough number forms, and average rough intervals can also be acquired, as shown in Table 3.

thumbnail
Download:
Table 3. The rough interval and normalized weights for S, O, D, T, and C.

https://doi.org/10.1371/journal.pone.0265674.t004

3.1.2 Rough TOPSIS-based flexible FMEA ranking of the failure modes.

The failure modes’ crisp decision matrix is converted as a rough group decision-making matrix; hence the failure modes’ rough interval evaluation is determined as shown in Table 4.

thumbnail
Download:
Table 4. The evaluation matrix of rough failure modes.

https://doi.org/10.1371/journal.pone.0265674.t005

Afterward, the rough form of a weighted normalized decision matrix is obtained. The evaluation matrix of rough failure modes is normalized in Table 5, and the weighted normalized rough matrix is then determined. In Table 5, eleven failure modes’ rough weighted normalized matrix is depicted.

thumbnail
Download:
Table 5. The rough weighted normalized matrix of failure modes.

https://doi.org/10.1371/journal.pone.0265674.t006

PIS and NIS are identified using Eqs 16 and 17. The failure factors S, O, D, T, and Care all related to cost criterion according to the framework that the flexible FMEA approach proposed. In Table 6, the PIS and NIS are demonstrated.

Then the segregation of each failure mode from the PIS and NISwas calculated.

thumbnail
Download:
Table 6. The PIS and NIS of the rough weighted normalized matrix.

https://doi.org/10.1371/journal.pone.0265674.t007

According to the assumptions of the risk priority number method, based on the flexible FMEA, the weights of the five failure factors are considered to be of equal crisp value. In the process of determining the weights of failure factors, the crisp value-form of weights lacks the subjectivity and ambiguity inherent in it. Table 7 highlights the closeness coefficient and rank of the failure modes.

thumbnail
Download:
Table 7. , closeness coefficient and rank of each failure mode.

https://doi.org/10.1371/journal.pone.0265674.t008

3.2 Model comparison

Fig 2 presents the graphical representation of a comparison of weights of severity, occurrence, detection, time, and cost obtained by the rough method to the conventional crisp method. It is noteworthy to mention that the order of ranking of weights of all the factors by the rough method is almost the same as the rank order of the crisp method. Occurrence > Detection > Severity > Time > Cost is the rank order obtained by rough method while the sequence of rank by crisp method is Occurrence > Severity > Detection > Time > Cost.

thumbnail
Download:
Fig 2. Comparison of weights using the rough and crisp value.

https://doi.org/10.1371/journal.pone.0265674.g002

However, the rough method is effective to represent the uncertainties as it fits the values of decision-makers in the form of upper and lower limits. According to Fig 2, the spread of judgment by the experts is represented in the form of the bar for the rough method process as opposed to a line by the crisp method. The less the length of the bar indicates, the less the uncertainties of decisions by the decision-makers. The more the length of the spread represents, the lower the accuracy of the decisions. When it comes to the weights by the traditional crisp method or other MCDM methods like Analytic Hierarchy Process (AHP), Best-Worst Method (BWM), they are represented by a single crisp value or in the form of lines shown in Fig 2, although multiple decision-makers were involved in this decision making. All these methods consider only the mean decision value by the experts and the vagueness and uncertainties of the judgment values cannot be represented properly by these methods.

The rank of the failure modes found by the rough TOPSIS method is also compared with the rank of failure modes by the crisp TOPSIS method and presented in Fig 3. It can be seen from the graph that cyber attack is the most critical failure factor based on both methods. The ranking of database hack, server failure, and network interruption are most similar for both methods. There exists slight ranking variation for the cipher to plain text malfunction and broadcast data error factors. However, peripheral error and character misspelled factors show the most significant difference. It ranked fifth based on the crisp TOPSIS method while eleventh based on the rough TOPSIS method. Similarly, character misspelled ranked sixth and tenth based on the crisp TOPSIS method and rough TOPSIS method, respectively. According to the crisp TOPSIS method, wrong message transcription is the least critical factor whereas the rough TOPSIS method indicates the peripheral error. The results provided by the rough TOPSIS method are more reliable and effective because of its capacity to consider the vagueness and uncertainties of the decision-makers.

thumbnail
Download:
Fig 3. Ranking of failure mode using rough TOPSIS and crisp TOPSIS methods.

https://doi.org/10.1371/journal.pone.0265674.g003

3.3 Discussions

From Table 7 of section 3.1, it is evident that cyber-attack, database hack risks, server failures, network interruptions, broadcast data errors, and virus effects possess the top six positions among the eleven failure factors of the IT system in the financial sector of Bangladesh.

Cyber-attacks pose a threat to the multidimensional sector, while most of the financial activities are largely dependent on the internet. Though efficient business management and automation of processes may induce operational virtue [57], cloud computing is likely to secure credentials, although makes it vulnerable to some extent. To detect and mitigate banking Trojan, a Cyber Kill Chain (CKC) based taxonomy can be implemented [58]. The software and other IT industries of Bangladesh are susceptible to such attacks as well. To protect both financial institutions from such attacks, enhanced online monitoring, usage of improved and updated firewalls, usage of stronger malware and virus protection software, etc. steps can be taken.

The database of a financial institution is considered an important asset to the organization. Human intervention and ill motives are often responsible for the security failure that jeopardizes this important asset. Although different organizations maintain their company database in their own ways, the risk of security and data loss by database hack still remains.Improved multilayer security protocol, enhanced encryption, stricter access control, etc. can be adopted to ensure database security [59,60]. Moreover, the involvement of third parties in database management can be a weak link for many financial institutions. Appointing in-house skilled IT personnel can assist to reduce this threat to a great extent.

Server failure can create a major impedance in banking operations. Such risks must be addressed tactfully to minimize SSC failure. Server failure holds the third position with a closeness coefficient value near to the value of database hack.A recent study shows an upward trend in online banking in Bangladesh, including transactions through the internet, mobile phones, ATMs, and nominated agents [61]. All these services can be severely affected if any server failure occurs. By keeping multiple backup servers, such service disruptions can be avoided.

Network interruption or link failure can also cause significant service interruption. After an evident network failure, detection and repairing strategies can often be quite time-consuming. However, with the early detection of link failure, the network failure problem can be diagnosed easily. For conspicuous improvement in reliability, modern data centers implement various proactive measures against broadcast data error. Some such notable measures include regular network maintenance, checking remote management systems, updating the operating system and control panel, checking for node redundancy, etc. These measure needs to be taken seriously to avoid future network failure.

Attacks from various viruses on the financial sector have become quite frequent these days. There is no alternative to collaborative measures on using up-to-date technology and IT audits. Cloud-based data storage is also susceptible to attacks from viruses and hacking. Suspicious e-mail, unauthorized USB usage, malicious site access, pirated software usage, etc. have been identified as prime sources of viral attacks and cybersecurity breaches. The recent investigations conducted by the Computer Incident Response Team (CIRT) of Bangladesh Bank found the presence of multiple viruses and malware in three of the Internet Service Providers (ISPs) that provide network support to multiple banks, especially when there is an alarming rate rise in the ransomware virus attacks in the Bangladeshi financial institutions [62]. The exact sources of cyber-attacks are often hard to identify as they can happen from multiple sources simultaneously [63]. Staying vigilant and adhering to all the standardized protocols, updating virus signatures, updating firewall, cleaning endpoints regularly are some of the most effective ways to thwart such attacks.

3.4 Managerial implications

Managers of financial institutions can be immensely benefitted from this research. Especially in developing or underdeveloped countries, where resources are constrained, it is often not possible for managers to take on multiple issues at the same time. Since this research presents and ranks the factors that contribute to the failure of information systems in the banks and other financial institutions, managers will get a clear idea about which area they should prioritize, if the resource is inadequate.

This research also highlights the preventive measures that banks can take to avoid information system failure. This is expected to make managers more aware of important issues like cybersecurity, access control, data encryption, etc. as preventive measures and help them in identification, assessment, and forecasting of future security threats. Managers of other similar multidisciplinary sectors in the developing counties can also utilize this research for evaluation and comparison of failure factors in their respective areas.

4 Conclusions

The financial market is growing faster than ever all around the globe. This business is no longer confined by the borders. With the development of technology, the threats took over new dimensions. Reducing various failures in the SSC is a crucial task for achieving the company’s success. Managers need to recognize the failures and take proactive measures to minimize the impact of the failures. However, there hasn’t been much research in this area that can assist the managers in this regard. In this research, a rough-TOPSIS based flexible FMEA model has been proposed to evaluate the SSC failures in the context of multidisciplinary sectors like banking and other similar financial industries. Existing literature review and experts’ feedback helped us to identify eleven relevant SSC failure factors in this area. Subsequently, a rough-TOPSIS method was used to rank these failures. The results show that cyber-attack, database hacks, and server failures are the top three failures among the eleven failure factors.

The primary contribution of this study is the identification and evaluation of SSC failure factors of the IT system in the financial sector. This study will assist the managers in identifying the crucial factors contributing to the failures of the IT system in the banking industry and thereby, will guide the managers to minimize the effects of the failures. It will be easier for the managers to take proactive policies to reduce the number and impact of the failures in the financial sector once failure factors are properly identified and prioritized.Moreover, managers in developing countries can also utilize this research to decide, on which area they should focus first to minimize information system failure in their institutions, given that they often work with constrained resources.

The research has some limitations as well, on which future researchers can focus to overcome them. For example, maintainability is one of the risk factors that has not been considered in this study while analyzing the impacts of SSC failures. Therefore, there is a scope for further research on the impact of maintainability risks on the overall supply chain of the financial industries. Again, this study is limited by the literature review and the factors pointed out by the expert. Morediverse and multidisciplinary failure factors like changing management, failure in capacity management, etc. can also be considered in future research, without confining it to using only the feedbacks from the expert panel. Considered factors are mostly reactive types, but proactive factors could also be taken into account to improve failure response and to reduce the impact of failures. This study can also be carried out with different other MCDM methods like BWM, FUCOM, LBWA, MABAC, MAIRCA, CODAS, EDAS, etc.and the obtained results can be compared with the results of the current studyin future, to check whether the ranking or the weights of the factors change if a different approach is used. Moreover, design flaws and impact analyses have not been carried out in the study. Lack of literature in the corresponding field of Bangladesh leaves evident gaps in this research as well.

References

  1. 1. Rampersad G, Plewa C, Troshani I. Investigating the use of information technology in managing innovation: A case study from a university technology transfer office. Journal of Engineering and Technology Management. 2012 Jan 1;29(1):3–21.
  2. 2. Berger AN, Goulding W, Rice T. Do small businesses still prefer community banks?. Journal of Banking & Finance. 2014 Jul 1;44:264–78. https://doi.org/10.1016/j.jbankfin.2014.03.016.
  3. 3. Nishath AT, Selvarani DA. A Study on E–Channels Service Quality in Private Bank Tiruchirappalli. Journal Impact Factor. 2015 Feb;6(2):19–30.
  4. 4. Magklaras GB, Furnell SM. Insider threat prediction tool: Evaluating the probability of IT misuse. Computers & security. 2001 Jan 1;21(1):62–73. https://doi.org/10.1016/S0167-4048(02)00109-8.
  5. 5. Zhu Z, Scheuermann L, Babineaux BJ. Information network technology in the banking industry. Industrial Management & Data Systems. 2004 Jun 1. https://doi.org/10.1108/02635570410537499.
  6. 6. Habibi A, Yaakob MF, Mukminin A, Muhaimin M, Prasojo LD, Yusop FD, et al. Teachers’ digital technology access to motivation, skills and use: a structural equation modeling study. Aslib Journal of Information Management. 2021 Jun 7. https://doi.org/10.1108/AJIM-11-2020-0382.
  7. 7. Gupta MC, Czernik A, Sharma RD. Operations strategies of banks—using new technologies for competitive advantage. Technovation. 2001 Dec 1;21(12):775–82. https://doi.org/10.1016/S0166-4972(01)00017-7.
  8. 8. Valls Martínez MD, Cruz Rambaud S, Parra Oller IM. Sustainable and conventional banking in Europe. PloS one. 2020 Feb 20;15(2):e0229420. pmid:32078647
  9. 9. House of Commons Treasury Committee report on IT failures in the Financial Services Sector, 2019, October 22. Retrieved from https://publications.parliament.uk/pa/cm201919/cmselect/cmtreasy/224/224.pdf.
    • 10. Sun C, Xiang Y, Jiang S, Che Q. A supply chain risk evaluation method based on fuzzy TOPSIS. International Journal of Safety and Security Engineering. 2015 Jun 30;5(2):150–61. https://doi.org/10.2495/SAFE-V5-N2-150-161.
    • 11. Singh AM. Trends in South African internet banking. InAslib Proceedings 2004 Jun 1. Emerald Group Publishing Limited. 2004; Vol. 56 No. 3, pp. 187–196. https://doi.org/10.1108/00012530410539368.
    • 12. Smerlak M, Stoll B, Gupta A, Magdanz JS. Mapping systemic risk: critical degree and failures distribution in financial networks. PloS one. 2015 Jul 24;10(7):e0130948. pmid:26207631
    • 13. Clementina K, Isu IG. Security Challenge, Bank Fraud and Commercial Bank Performance in Nigeria: Journal of Business and Management Security Challenge, Bank Fraud and Commercial Bank Performance in Nigeria: An Evaluation. 2017;(July).
    • 14. Ula M, Ismail Z, Sidek ZM. A Framework for the Governance of Information Security in Banking System. Journal of Information Assurance & Cyber Security. 2011 Jan 1; 2011:1–12.
    • 15. Edge K, Raines R, Grimaila M, Baldwin R, Afb WP, Bennington R. The Use of Attack and Protection Trees to Analyze Security for an Online Banking System. 2007;1–8.
    • 16. Bathrinath S, Bhalaji RKA, Saravanasankar S. Materials Today: Proceedings Risk analysis in textile industries using AHP-TOPSIS. Mater Today Proc [Internet]. 2020;(xxxx). Available from: https://doi.org/10.1016/j.matpr.2020.04.722.
    • 17. Şenel M, Şenel B, Havle CA. Risk Analysis of Ports in Maritime Industry in Turkey using FMEA Based Intuitionistic Fuzzy TOPSIS Approach. 2018;01018:1–10.
    • 18. Pamučar D, Lukovac V, Božanić D, Komazec N. Multi-Criteria FUCOM-MAIRCA Model for the Evaluation of Level Crossings: Case Study in the Republic of Serbia. 2018;1(1):108–29.
    • 19. Stević Ž, Brković N. A Novel Integrated FUCOM-MARCOS Model for Evaluation of Human Resources in a Transport Company. Logistics. 2020;4(1):4.
    • 20. Jokić Ž, Božanić D, Pamučar D. Selection of fire position of mortar units using LBWA and Fuzzy MABAC model. 2021; March 28;4(1):115–35.
    • 21. Liu R, Liu LHH, Lin W. Occupational health and safety risk assessment using an integrated SWARA-MABAC model under bipolar fuzzy environment. Comput Appl Math [Internet]. 2020;123(3). Available from: https://doi.org/10.1007/s40314-020-01311-7.
    • 22. Hou W, Wang X, Zhang H, Wang J, Li L. Safety risk assessment of metro construction under epistemic uncertainty: An integrated framework using credal networks and the EDAS method. Appl Soft Comput [Internet]. 2021;108:107436. Available from: https://doi.org/10.1016/j.asoc.2021.107436.
    • 23. Bakhat R, Rajaa M. Risk Assessment of a Wind Turbine Using an AHP-MABAC Approach with Grey System Theory: A Case Study of Morocco. 2020 Aug 13;2020.
    • 24. Xu Y. Research on Investment Environment Performance Evaluation of Blockchain Industry with Intuitionistic Fuzzy CODAS Method. 2021;2021(2).
    • 25. Joveda N, Khan MT, Pathak A, Chattogram B. Cyber laundering: a threat to banking industries in bangladesh: in quest of effective legal framework and cyber security of financial information. International Journal of Economics and Finance. 2019;11(10):54–65. https://doi.org/10.5539/ijef.v11n10p54.
    • 26. Mahmood R, Islam MM. Practices of corporate governance in the banking sector of Bangladesh. International Journal of Managing Value and Supply Chains. 2015;6(3):17–29. https://doi.org/10.5121/ijmvsc.2015.6302.
    • 27. Yousafzai SY, Pallister JG, Foxall GR. A proposed model of e-trust for electronic banking. Technovation. 2003 Nov 1;23(11):847–60. https://doi.org/10.1016/S0166-4972(03)00130-5.
    • 28. Xiong J, Yu G, Zhang X. Research on Governance Structure of Big Data of Civil Aviation. Journal of Computer and Communications. 2017 Mar 14;5(5):112–8.
    • 29. Choudhury TT, Paul SK, Rahman HF, Jia Z, Shukla N. A systematic literature review on the service supply chain: research agenda and future research directions. Production Planning & Control. 2020 Dec 9;31(16):1363–84. https://doi.org/10.1080/09537287.2019.1709132.
    • 30. Nouri FA, Nikabadi MS, Olfat L. Developing the framework of sustainable service supply chain balanced scorecard (SSSC BSC). International Journal of Productivity and Performance Management. 2018 Dec 20. Vol. 68 No. 1, pp. 148–170. https://doi.org/10.1108/IJPPM-04-2018-0149.
    • 31. Mohammed AM, Idris B, Saridakis G, Benson V. Information and communication technologies: a curse or blessing for SMEs?.InEmerging Cyber threats and cognitive vulnerabilities 2020 Jan 1; pp.163–174. Academic Press. https://doi.org/10.1016/b978-0-12-816203-3.00008-3.
    • 32. Yu TK, Lin ML, Liao YK. Understanding factors influencing information communication technology adoption behavior: The moderators of information literacy and digital skills. Computers in Human Behavior. 2017 Jun 1;71:196–208. https://doi.org/10.1016/j.chb.2017.02.005.
    • 33. Vahdani B, Salimi M, Charkhchian M. A new FMEA method by integrating fuzzy belief structure and TOPSIS to improve risk evaluation process. 2015;c:357–68.
    • 34. Selim H, Yunusoglu MG, Balaman ŞYI. Based on Fuzzy TOPSIS and FMEA: Application in an International Food Company. 2016;(April 2015).
    • 35. Başhan V, Demirel H, Gul M. An FMEA-based TOPSIS approach under single valued neutrosophic sets for maritime risk evaluation: the case of ship navigation safety. Soft Computing. 2020 Dec;24(24):18749–64.
    • 36. Yang Q, Du PA, Wang Y, Liang B. A rough set approach for determining weights of decision makers in group decision making. PloS one. 2017 Feb 24;12(2):e0172679. pmid:28234974
    • 37. He YH, Wang LB, He ZZ, Xie M. A fuzzy TOPSIS and rough set based approach for mechanism analysis of product infant failure. Engineering Applications of Artificial Intelligence. 2016 Jan 1;47:25–37. https://doi.org/10.1016/j.engappai.2015.06.002.
    • 38. Božanić D, Ranđelović A, Radovanović M, Tešić D. A hybrid LBWA-IR-MAIRCA multi-criteria decision-making model for determination of constructive elements of weapons. 2020;18:399–418. https://doi.org/10.22190/FUME200528033B.
    • 39. Đalić I, Stević Ž, Karamasa C, Puška A. A Novel Integrated Fuzzy PIPRECIA–Interval Rough Saw Model: Green Supplier Selection. 2020;3(1):126–45.
    • 40. Sahu R, Dash SR, Das S. Career selection of students using hybridized distance measure based on picture fuzzy set and rough set theory. Decision Making: Applications in Management and Engineering. 2021;4(1):104–26.
    • 41. Agarwal S, Dandge SS, Chakraborty S. Parametric analysis of a grinding process using the rough sets theory. Facta Universitatis, Series: Mechanical Engineering. 2020 Mar 27;18(1):091–106.
    • 42. Lo HW, Liou JJ, Huang CN, Chuang YC. A novel failure mode and effect analysis model for machine tool risk analysis. Reliability Engineering & System Safety. 2019 Mar 1;183:173–83. https://doi.org/10.1016/j.ress.2018.11.018.
    • 43. Song W, Ming X, Wu Z, Zhu B. A rough TOPSIS approach for failure mode and effects analysis in uncertain environments. Quality and Reliability Engineering International. 2014 Jun;30(4):473–86. https://doi.org/10.1002/qre.1500.
    • 44. Nakatani J, Tahara K, Nakajima K, Daigo I, Kurishima H, Kudoh Y, et al. A graph theory-based methodology for vulnerability assessment of supply chains using the life cycle inventory database. Omega. 2018 Mar 1;75:165–81. https://doi.org/10.1016/j.omega.2017.03.003.
    • 45. Mukherjee S, Sengupta S. The Role of Information Technology in Managing Global Supply Chain of 21 st Century- CASE AMWAY. 2016;46–53.
    • 46. Lu HC, Huang YH. An Optimal Method for Developing Global Supply Chain Management System. Journal of Optimization. 2013;2013. https://doi.org/10.1155/2013/197370.
    • 47. Randazzo M. R., Keeney M., Kowalski E., Cappelli D., & Moore A. Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector. Networked Systems Survivability. 2005; 38(7):3–14. https://doi.org/10.1080/07321870590933292.
    • 48. Kanizo Y, Rottenstreich O, Segall I, Yallouz J. Optimizing virtual backup allocation for middleboxes. IEEE/ACM Transactions on Networking. 2017 Jun 5;25(5):2759–72. https://doi.org/10.1109/TNET.2017.2703080.
    • 49. Lin C, Lin M. The determinants of using cloud supply chain adoption. Industrial Management & Data Systems. 2019 Mar 11. https://doi.org/10.1108/IMDS-12-2017-0589.
    • 50. Boyson S. Cyber supply chain risk management: Revolutionizing the strategic control of critical IT systems. Technovation. 2014 Jul 1;34(7):342–53.https://doi.org/10.1016/j.technovation.2014.02.001.
    • 51. Khanna VK. Implantable medical electronics. Springer International Publishing; 2016. https://doi.org/10.1007/978-3-319-25448-7.
      • 52. Samuels CI, Syambas NR, Edward IJ, Shalannanda W. Service level measurement based on Uptime data monitoring for rural internet access services in Indonesia. In 2017 11th International Conference on Telecommunication Systems Services and Applications (TSSA) 2017 Oct 26 (pp. 1–5). IEEE. https://doi.org/10.1109/TSSA.2017.8272951.
        • 53. Lai C, Jacobs N, Hossain-McKenzie S, Carter C, Cordeiro P, Onunkwo I, et al. Cyber security primer for DER vendors, aggregators, and grid operators. Tech. Rep.. 2017 Dec;12.
        • 54. de Gusmão AP, e Silva LC, Silva MM, Poleto T, Costa AP. Information security risk analysis model using fuzzy decision theory. International Journal of Information Management. 2016 Feb 1;36(1):25–34. https://doi.org/10.1016/j.ijinfomgt.2015.09.003.
        • 55. Shiri D, Akbari V. Online Failure Diagnosis in Interdependent Networks. In Operations Research Forum 2021 Mar (Vol. 2, No. 1, pp. 1–14). Springer International Publishing. https://doi.org/10.1007/s43069-021-00055-2.
          • 56. Molero X, Silla F, Santonja V, Duato J. On the effect of link failures in fibre channel storage area networks. InProceedings International Symposium on Parallel Architectures, Algorithms and Networks. I-SPAN 2000 2000 Dec 7 (pp. 102–111). IEEE. https://doi.org/10.1109/ispan.2000.900269.
          • 57. Subramani M. How do suppliers benefit from information technology use in supply chain relationships?. MIS quarterly. 2004 Mar 1:45–73.
          • 58. Kiwia D, Dehghantanha A, Choo KK, Slaughter J. A cyber kill chain based taxonomy of banking Trojans for evolutionary computational intelligence. Journal of computational science. 2018 Jul 1;27:394–409. https://doi.org/10.1016/j.jocs.2017.10.020.
          • 59. Kamaraj N. Database Security Improvement in Cloud Computing. DE [internet]. 2021 Aug 31; 10417–10430.
          • 60. Mousa A, Karabatak M, Mustafa T. Database Security Threats and Challenges. 2020 8th International Symposium on Digital Forensics and Security (ISDFS). 2020.
          • 61. Islam S, Kabir MR, Dovash RH, Saha S. Impact of Online Banking Adoption on Bank ‘ s Profitability: Evidence from Bangladesh. 2019;4(3):1–4.
          • 62. Haque S, Bhuiyan T. Rise of Ransomware and the Readiness of Bangladesh. International Conference on Latest Trends in Engineering and Technology. 2017 https://doi.org/10.15242/ijccie.e0217002.
            • 63. Li X, Liu Y, Ji H, Zhang H, Leung VC. Optimizing resources allocation for fog computing-based internet of things networks. IEEE Access. 2019 May 17;7:64907–22. https://doi.org/10.1109/ACCESS.2019.2917557.