Cyber Security in Small and Medium Enterprises (SMEs): What’s Good or Bad?

Muslimin Wallang; Mohd Dino Khairri  Shariffuddin; Mokhtafizam  Mokhtar

doi:10.32890/jgd2022.18.1.5

Authors

Muslimin Wallang Universiti Utara Malaysia, Malaysia
Mohd Dino Khairri Shariffuddin Universiti Utara Malaysia, Malaysia
Mokhtafizam Mokhtar Universiti Utara Malaysia, Malaysia

DOI:

https://doi.org/10.32890/jgd2022.18.1.5

Keywords:

Cyber Security, Small and Medium Enterprises, Fourth Industrial Revolution

Abstract

The Fourth Industrial Revolution (IR4.0) has provided immense benefits for the sustainability of businesses, with many businesses
utilising websites to sell their products and services internationally. Cybersecurity has nonetheless emerged as one of the most significant global challenges posed by this new digitization trend. Currently, more than sixty percent of commercial transactions are conducted online or via digital wallets, necessitating exceptional security for transparent and secure transactions. Individuals are unable to maintain the security of their private data because of these evolving technologies, and cybercrime is on the rise. Information security is one of the most complex issues currently. Cybercrimes, which are increasing at an alarming rate, are the first thing that comes to mind when we think about cyber security. Consequently, numerous governments and corporations are enhancing their cybersecurity tools to combat cybercrime. Despite numerous precautions, cyber threats remain a major concern not only for government and large businesses, but also for Small and Medium-Sized Businesses (SMEs) companies. This paper examines the challenges and solutions faced by small and medium-sized enterprises (SMEs) in relation to cyber security issues. In addition, it also examines the Malaysian context that may hinder the cybersecurity adoption gap for risk mitigation and high security in operational and development business environments.

References

Adlakha, R., Sharma, S., Rawat, A., & Sharma, K. (2019). Cyber Security Goal’s, Issue’s, Categorization & Data Breaches. 2019 International Conference on Machine Learning, Big Data, Cloud and Parallel Computing (COMITCon), 397–402.

Alahmari, A., & Duncan, B. (2020). Cybersecurity risk management in small and medium-sized enterprises: A systematic review of recent evidence. 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA), 1–5.

Bada, M., & Nurse, J. R. C. (2019). Developing cybersecurity education and awareness programmes for small-and medium-sized enterprises (SMEs). Information & Computer Security.

Benz, M., & Chatterjee, D. (2020). Calculated risk? A cybersecurity evaluation tool for SMEs. Business Horizons, 63(4), 531–540.

Bilodeau, H., Lari, M., & Uhrb, M. (2019). Cyber security and cybercrime challenges of Canadian businesses, 2017. Juristat: Canadian Centre for Justice Statistics, 1–18.

Boletsis, C., Halvorsrud, R., Pickering, J. B., Phillips, S. C., & Surridge, M. (2021). Cybersecurity for SMEs: Introducing the Human Element into Socio-technical Cybersecurity Risk Assessment. VISIGRAPP (3: IVAPP), 266–274.

Creswell, J. W. (2013). Research design: Qualitative, quantitative, and mixed methods approaches. SAGE Publications Ltd.

Heidt, M., Gerlach, J. P., & Buxmann, P. (2019). Investigating the security divide between SME and large companies: How SME characteristics influence organizational IT security investments. Information Systems Frontiers, 21(6), 1285–1305.

Jayashree, S., Hassan Reza, M. N., Malarvizhi, C. A. N., Maheswari, H., Hosseini, Z., & Kasim, A. (2021). The Impact of Technological Innovation on Industry 4.0 Implementation and Sustainability: An Empirical Study on Malaysian Small and Medium Sized Enterprises. Sustainability, 13(18), 10115.

Kim, H.-K., So, W.-H., & Je, S.-M. (2019). A big data framework for network security of small and medium enterprises for future computing. The Journal of Supercomputing, 75(6), 3334–3367. Journal of Governance and Development, 18, No. 1 (Jan) 2022, pp: 75-

Lanz, J., & Sussman, B. I. (2020). Information security program management in a COVID-19 world. The CPA Journal, 90(6), 28–35.

Markus, M. L., & Lee, A. S. (1999). Special issue on intensive research in information systems: Using qualitative, interpretive, and case methods to study information technology. MIS Quarterly, 23(1), 35–38.

Martinez-Uribe, L. (2008). Findings of the scoping study interviews and the research data management workshop. In University of Oxford, UK.

Myers, M., & Avison, D. (2002). Qualitative research in information systems: An introduction to qualitative research in information systems. SAGE Publications, Ltd. https://doi.org/10.4135/9781849209687

Nobles, C., & Burrell, D. (2018). Using Cybersecurity Communities of Practice (CoP) to Support Small and Medium Businesses. ICIE 2018 6th International Conference on Innovation and Entrepreneurship: ICIE 2018, 333.

Pérez-González, D., Preciado, S. T., & Solana-Gonzalez, P. (2019). Organizational practices as antecedents of the information security management performance: An empirical investigation. Information Technology & People.

Ponsard, C., Grandclaudon, J., & Dallons, G. (2018). Towards a Cyber Security Label for SMEs: A European Perspective-. ICISSP, 4, 426–431.

Razak, D. A., Abdullah, M. A., & Ersoy, A. (2018). Small medium enterprises (SMEs) in Turkey and Malaysia a comparative discussion on issues and challenges. International Journal of Business, Economics and Law, 10(49), 2–591.

Shaharuddin, A. B., Aminudin, E., Zakaria, R., Abidin, N. I., & Lau, S. E. N. (2021). Adoption of construction industry 4.0 among small and medium sized contractor in Malaysia. AIP Conference Proceedings, 2428(1), 060001.

Soong, K.-K., Ahmed, E. M., & Tan, K. S. (2020). Factors influencing Malaysian small and medium enterprises adoption of electronic government procurement. Journal of Public Procurement, 20(1), 38–61.

Tam, T., Rao, A., & Hall, J. (2021). The good, the bad and the missing: a narrative review of cyber-security implications for Australian small businesses. Computers & Security, 109, 102385.

Tamyez, P. F. (2022). The Challenges and Solutions of Cybersecurity Among Malaysian Companies. In Research Anthology on Business Aspects of Cybersecurity (pp. 676–693). IGI Global. Journal of Governance and Development, 18, No. 1 (Jan) 2022, pp: 75-

Vakakis, N., Nikolis, O., Ioannidis, D., Votis, K., & Tzovaras, D. (2019). Cybersecurity in SMEs: The smart-home/office use case. 2019 IEEE 24th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), 1–7.

van Haastrecht, M., Golpur, G., Tzismadia, G., Kab, R., Priboi, C., David, D., Răcătăian, A., Baumgartner, L., Fricker, S., & Ruiz, J. F. (2021). A shared cyber threat intelligence solution for smes. Electronics, 10(23), 2913.