Towards adequate cybersecurity risk management in SMEs
by Christopher A. Moturi; Nabihah R. Abdulrahim; Daniel O. Orwa
International Journal of Business Continuity and Risk Management (IJBCRM), Vol. 11, No. 4, 2021

Abstract: Small and medium-sized enterprises (SMEs) are core to the growth of the African economy. Their continued dependency on technology is driving them deeper into risks. SMEs that are developing technology-based solutions need an effective way to manage cyber risks. This study sought to determine the key cybersecurity risks faced by SMEs in Kenya that develop technology-based solutions. Using a case study approach and based on the National Institute of Standards and Technology (NIST) cybersecurity framework, an in-depth evaluation of the cybersecurity risk management practices within a selected SME was undertaken. The paper reports on the components identified as critical in the management of cyber risks within SMEs. An implementation strategy has been developed to provide a roadmap to assist in the management of cyber risks as part of their business risks. Insights provided will assist the government and regulatory bodies assess the adequacy of current cybersecurity legislations and guidelines. This study has practical implications for SME managers in fostering a cybersecurity culture in this growing sector.

Online publication date: Tue, 04-Jan-2022

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Business Continuity and Risk Management (IJBCRM):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com