The importance of protecting information in banks and mitigating security breach is becoming more important than ever. Human factors represent essential issues in information systems security in organizations, since human factors determine the behavior of employees toward information systems security. Extant literature revealed that the human factor aspect is one of the emerging research areas in information security. Thus, this research tries to explore information systems security countermeasures that are used to reduce internal threat and how employees perceive them and create a human factors model to address human factor gaps in information systems security in commercial banks in Ethiopia. Accordingly, a conceptual human factor model is developed from literature. A qualitative case study research design is employed to validate the proposed conceptual framework in selected banks in Ethiopia. Purposive sampling is employed to select the sampled banks. The samples are selected based on eligibility criteria that the respondents should have experience and expertise in information systems security and the banking activities. The research contributes to the current knowledge of information security by demonstrating the importance and critical role of human factors in the development of an information systems security model. The main contribution would be the advancement of the theoretical and practical basis for information systems security in proposing a model framework for developing, assessing and modeling a human factor model. Furthermore, it improves the understanding of risks in the security incident stages in relation to human factors.