Unaware, Unfunded and Uneducated: A Systematic Review of SME Cybersecurity
A systematic review catalogues how SMEs — over 90% of businesses globally — remain dangerously under-resourced in cybersecurity, a finding with direct implications for NIS2 supply-chain requirements.
Summary written by editorial AI · Source link below
arXiv:2309.17186v3 Announce Type: replace Abstract: Small and medium enterprises (SMEs) are pivotal in the global economy, accounting for over 90% of businesses and 60% of employment worldwide. Despite their significance, SMEs are often disregarded in cybersecurity initiatives, rendering them ill-equipped to deal with the growing frequency, sophistication, and destructiveness of cyberattacks. We systematically reviewed the cybersecurity literature on SMEs published between 2017 and 2024. We foc
Editorial Analysis
European enterprises depend on SME suppliers whose cybersecurity gaps, now thoroughly documented, represent a systemic weak link that NIS2 supply-chain provisions specifically target.
Strengthen third-party risk management programmes with SME-tailored security baselines and contractual requirements aligned to NIS2 expectations.
Academic evidence confirms that SME cyber readiness is substantially weaker than enterprise standards, posing material supply-chain risk under NIS2.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at arXiv Crypto & Security in a new tab.
More from the Research Desk
- Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication3d
- Not Where You Think: Protecting Location Privacy Against Reasoning-Based Geolocation4d
- Social-HUMINT: An LLM-Augmented Unified Framework for Measuring Social Media Exposure4d
- Practical Auditing of Differentially Private Graph Release Mechanisms: Methodology, Toolkit, and Case Study4d
- SecLog-Bench: A Scalable Benchmark for Cybersecurity Log Reasoning with Scaffolded Evidence4d