## 1 Introduction and Research Gap  
Cyberattacks are acts executed by a knowledgeable technologist whereby information is illegally accessed and stolen [1]. Moreover, a cyberattack destroys and corrupts the data files, which will impact the financial health of both the individual and the organization [2]. Many countries are affected by the dilemma of cybercrime or cyberattacks [3]. The rapid growth of the financial sector is an essential economic indicator of a country; however, it has made the UAE vulnerable to the threat of cyberattack [4]. The foundation of cyberattacks is linked to illegal activities by accessing private and sensitive data to threaten individuals or organizations or to gain profit by selling stolen information on the black market [5]. Moreover, the UAE has become a main target of cybercrime as a result of its booming economy and tourism [6]. Thus, its integral characteristics of technological development rate the UAE's digitalization and technological adoption level of awareness and knowledge of how to defend against identity theft and phishing [7]. Identity theft occurs due to individuals and organizations accessing digital technology on sharing information globally, which made the information susceptible to cyberattack activity [8]. Identity theft has arisen since the development of digital technology in its scope and breadth, attacking information stored online [9]. The identity theft phenomenon occurred rapidly in the UAE because the UAE is moving towards a digital hub for innovation and bringing innovative future technologies that focus on online access globally [6]. Identity theft usually occurs in the banking sector of the UAE, where fraudulent transactions occur through stealing money from an existing account and using personal information to initiate transactions. In addition, phishing is a cyberattack that uses disguised email as a weapon to trick the email recipients into believing that the message is something they want or requested from their bank or their company [10]. According to Check Point Research, cyberattacks on organizations increased by 32% globally compared to the second quarter of 2021, while the UAE detected an average of 970 weekly attacks per organization in the second quarter of 2022, a massive 178% increase year-over-year [11]. Kaspersky's information revealed that phishing attacks and social engineering targeting individuals had increased by an alarming 230% in the UAE in the second quarter of 2022 [12]. The information is then used to access important accounts and can result in identity theft and financial loss. Globally, the UAE was ranked 9 th after a higher number of phishing attacks on a bank [7]. Moreover, the UAE Banks Federation has rolled out warnings against fraud schemes, fake callers, and anonymous entities that resort to tricks to extort money from account users. Therefore, developing the conceptual framework of cyberattack prevention factors and cybersecurity awareness will reduce the damage to banking reputation, which leads to a reduction in profits, and affects relationships between parties vested in the business. Hence, cyberattack prevention is still lacking in terms of deterrence for banking institutions that become victims of financial loss due to the identity theft of corporate information and financial information that generally incur associated costs [6]. Therefore, the efforts to develop a conceptual framework of cyberattack prevention and organizational cybersecurity culture are still in demand and can be used as guidance to prevent cyberattacks within the banking context and other similar financial organizations. Furthermore, many organizations have implemented technical and physical cybersecurity measures as their source of preventing cyberattacks, where cyberattacks require a comprehensive approach that consists of improved security and risk management in the digital world on protocols, schemes, and standards [13; 14].