LCCI: A framework for least cybersecurity controls to be implemented for small and medium enterprises (SMEs)

Globally Small and Medium Enterprises (SMEs) are the biggest contributors to the economy by providing two-thirds of global employment opportunities and more than half the GDP of the developed economies. Regardless of many existing cybersecurity standards or frameworks, SMEs are most vulnerable to cyber threats. SMEs face serious impacts on their existence if undergo successful cyber-attacks by cybercriminals. There is a need to understand the challenges SMEs are facing especially in the implementation of cybersecurity controls. Through a research survey conducted by authors where one hundred and fifteen SMEs voluntarily participated, this research paper will throw light on the current cybersecurity controls implementation posture for different SMEs, along with the challenges they are facing which are stopping them to decide, plan and implement cybersecurity controls. Further, using an analysis of the inputs and the core concepts of cybersecurity, the authors are also going to propose a recommended solution for SMEs.