Assessing SMEs’ cybersecurity organizational readiness: Findings from an Italian survey

Martina Neri; Federico Niccolini; Rosario Pugliese

doi:https://doi.org/10.36965/OJAKM.2022.10(2)1-22

Volume 10, 2022: Issue 2

PDF Download the article (Free)

Author(s):

Martina Neri, University of Pisa, Italy

Federico Niccolini, University of Pisa, Italy

Rosario Pugliese, University of Florence, Italy

Abstract:

The Small and Medium-sized Enterprises’ (SMEs) level of organizational cybersecurity readiness has been poorly investigated to date. Currently, all SMEs need to maintain an adequate level of cybersecurity to run their businesses, not only those wishing to fully exploit digitalization’s benefits. Unfortunately, due to their lack of resources, skills, and their low level of cyber awareness, SMEs often seem unprepared. It is essential that they address the digital threats that they face by using technology and complementary (and not alternative) factors, such as guidelines, formal policies, and training. All these elements trigger development processes regarding skills, awareness, the organizational cybersecurity culture, and the organizational resilience. This paper describes Italy’s first multidisciplinary attempt to assess its SMEs’ overall cybersecurity readiness level. We used a survey as its initial quantitative assessment approach, although SMEs can also use it as a cyber self-assessment tool, which prepares them better to navigate the digital ecosystem. Thereafter, we held semi-structured interviews to explore the critical points that had emerged from the study’s first phase. The overall results show that SMEs have not yet achieved high levels of organizational readiness. SMEs are currently starting to set the stage for their organizational cyber readiness and will, therefore, have to take many more proactive steps to address their cyber challenges.

Keywords:

Cybersecurity; Small and Medium Enterprises (SMEs); Cybersecurity organizational readiness, Italian organizational cybersecurity.

DOI:

https://doi.org/10.36965/OJAKM.2022.10(2)1-22

Type:

Research paper

Journal:

The Online Journal of Applied Knowledge Management (OJAKM), ISSN: 2325-4688

Publisher:

International Institute for Applied Knowledge Management (IIAKM)

Received:

28 February 2022

Revised:

16 May 2022; 9 August 2022; 11 September 2022

Accepted:

15 September 2022

Accepting Editor:

Meir Russ

Pages:

1-22

OJAKM Menu

OJAKM Articles

OJAKM is Indexed in

Volume 10, 2022: Issue 2
		Download the article (Free)
Title:	Assessing SMEs’ cybersecurity organizational readiness: Findings from an Italian survey
Author(s):	Martina Neri, University of Pisa, Italy Federico Niccolini, University of Pisa, Italy Rosario Pugliese, University of Florence, Italy
Abstract:	The Small and Medium-sized Enterprises’ (SMEs) level of organizational cybersecurity readiness has been poorly investigated to date. Currently, all SMEs need to maintain an adequate level of cybersecurity to run their businesses, not only those wishing to fully exploit digitalization’s benefits. Unfortunately, due to their lack of resources, skills, and their low level of cyber awareness, SMEs often seem unprepared. It is essential that they address the digital threats that they face by using technology and complementary (and not alternative) factors, such as guidelines, formal policies, and training. All these elements trigger development processes regarding skills, awareness, the organizational cybersecurity culture, and the organizational resilience. This paper describes Italy’s first multidisciplinary attempt to assess its SMEs’ overall cybersecurity readiness level. We used a survey as its initial quantitative assessment approach, although SMEs can also use it as a cyber self-assessment tool, which prepares them better to navigate the digital ecosystem. Thereafter, we held semi-structured interviews to explore the critical points that had emerged from the study’s first phase. The overall results show that SMEs have not yet achieved high levels of organizational readiness. SMEs are currently starting to set the stage for their organizational cyber readiness and will, therefore, have to take many more proactive steps to address their cyber challenges.
Keywords:	Cybersecurity; Small and Medium Enterprises (SMEs); Cybersecurity organizational readiness, Italian organizational cybersecurity.
DOI:	https://doi.org/10.36965/OJAKM.2022.10(2)1-22
Type:	Research paper
Journal:	The Online Journal of Applied Knowledge Management (OJAKM), ISSN: 2325-4688
Publisher:	International Institute for Applied Knowledge Management (IIAKM)
Received:	28 February 2022
Revised:	16 May 2022; 9 August 2022; 11 September 2022
Accepted:	15 September 2022
Accepting Editor:	Meir Russ
Pages:	1-22