Authors:
Bjarne Lill
1
;
Clemens Sauerwein
1
;
Alexander Zeisler
2
;
Carina Hochstrasser
3
and
Nico Mexis
4
Affiliations:
1
Department of Computer Science, University of Innsbruck, ICT Building, Technikerstraße 21a, Austria
;
2
Salzburg University of Applied Sciences, Urstein S¨ ud 1, 5412 Puch/Salzburg, Austria
;
3
University of Applied Sciences Upper Austria, Campus Steyr, Logistikum
;
4
Faculty of Computer Science and Mathematics, University of Passau, 94032 Passau, Germany
Keyword(s):
Information Security, Cybersecurity, Small and Medium-Sized Enterprise, SME, Workshop.
Abstract:
Information security is a critical issue for small and medium-sized enterprises (SMEs) around the world. These organisations face an increasing number of security incidents and the sophistication of attacks. In order to remain competitive and protect their and their customers’ critical information, it is essential that SMEs can manage their cybersecurity risks appropriately. Accordingly, it is important that these SMEs can rely on tailored information security assessments and frameworks. However, there is a scarcity of knowledge regarding their specific needs and the practical implementation of cybersecurity within these organisations. To address this knowledge gap, an exploratory study was conducted on the SME cybersecurity situation, with a particular focus on the implementation level of cybersecurity controls within SMEs in Austria and Germany. We surveyed 30 SMEs regarding their cybersecurity implementation situation in 2023. Our findings show, among other things, a very heteroge
neous picture regarding the implementation level of cybersecurity controls and outline areas for action.
(More)