I just want to help: SMEs engaging with cybersecurity technology

The cybersecurity landscape is particularly challenging for SMEs. On the one hand, they must comply with regulation or face legal sanction. But on the other, they may not have the resource or expertise to ensure regulatory compliance, especially since this is not their core business. At the same time, it is also well-attested in the literature that individuals (human actors in the ecosystem) are often targeted for cyber attacks. So, SMEs must also consider their employees but also their clients as potential risks regarding cybersecurity. Finally, it is also known that SMEs working together as part of a single supply chain are reluctant to share cybersecurity status and information. Given all of these challenges, assuming SMEs recognise their responsibility for security, they may be overwhelmed in trying to meet all the associated requirements.There are tools to help support them, of course, assuming they are motivatedto engage with such tooling. This paper looks at the followingaspects of this overall situation. In a set of four studies, we assess privatecitizen understanding of cybersecurity and who they believe to beresponsible. On that basis, we then consider their attitude to sharing datawith service providers. Moving to SMEs, we provide a general overviewof their response to the cybersecurity landscape. Finally, we ask fourSMEs across different sectors how they respond to cybersecurity tooling.As well as providing an increased understanding of private citizen AQ1and SME attitudes to cybersecurity, we conclude that SMEs need notbe overwhelmed by their responsibilities. On the contrary, they can takethe opportunity to innovate based on their experience with cybersecuritytools.

10.1007/978-3-031-35822-7_23

338-352

Springer, Cham

Pickering, Brian

225088d0-729e-4f17-afe2-1ad1193ccae6

Phillips, Stephen

47610c30-a543-4bac-a96a-bc1fce564a59

Erdogan, Gencer

8f23f573-90f0-4c1c-b762-49a551acd987

Moallem, A.