Ensuring information security is increasingly important as more online transactions are made. However, the budgets for information security allocated by financial institutions remain modest.