A Survey on the Cyber Security of Small-to-Medium Businesses: Challenges, Research Focus and Recommendations

Small-to-medium sized businesses (SMBs) constitute a large fraction of many countries’ economies but according to the literature SMBs are not adequately implementing cyber security which leaves them susceptible cyber-attacks. Furthermore, research in is rarely focused on SMBs, despite representing proportion businesses. In this paper we review recent with focus alignment popular NIST Cyber Security Framework (CSF). From also summarise key challenges face good and conclude recommendations how implement security. We find that SMB mainly qualitative analysis narrowly Identify Protect functions CSF very little work other existing functions. should have ability detect, respond recover from cyber-attacks, if lacks those areas, then may guidance act. Future be more balanced researchers adopt well-established powerful quantitative approaches refine test whilst governments academia urged invest incentivising expand their focus.