Cyber Security for SMEs - Clear, Consistent and Complete?

Cyber security is clearly an issue for organisations of all sizes and across all sectors. However, the ability to understand and deal with it can very much depend upon the size of organisation and the resources that it has available. Small and Medium-sized Enterprises, or SMEs, are frequently highlighted as facing a particular challenge, which is typically more acute towards the smaller and micro end of the scale. At the same time, they can face fundamental difficulties to even understand the issue and what they ought to be doing about it. Drawing upon an ongoing research project, this presentation examines the nature of information available to those SMEs that may seek to better understand and address their cyber security needs. It presents an assessment of various online sources that SMEs may identify and attempt to use for guidance, and considers the varied coverage, clarity, and completeness of the related resources. The resulting concern is that, rather than addressing their needs, SMEs could end up more confused, stuck, or even misdirected. The discussion also draws upon the views of SMEs themselves, and the specialists that they use for further advice, as well as looking ahead to a new support route that the wider project seeks to provide.