A recent study conducted in the UK has highlighted a crucial issue facing Small and Medium-sized Enterprises (SMEs) in the country. The study revealed that around 50% of businesses have a basic skills gap when it comes to technical cyber security. This gap is estimated to equate to approximately 739,000 businesses, emphasizing the need for urgent action.
The lack of basic cyber security skills is particularly prevalent among smaller organizations, leaving them vulnerable to cyber threats. Many SMEs outsource their security measures, hoping that someone else will manage it effectively. However, even outsourcing requires some knowledge of where to look and what to look for. On the other hand, some SMEs rely on limited in-house knowledge, which may not be sufficient to protect them from potential cyber attacks.
The study also revealed a concerning decline in attention towards basic cyber hygiene activities among SMEs. Activities such as the use of password policies, network firewalls, and timely application of security-related software updates have all declined by around 10% in the last two years. This decline is primarily seen in micro businesses, which may be attributed to factors such as post-pandemic challenges and financial pressures during an economic downturn. However, the consequence of this decline is that organizations are now less protected and at a higher risk of cyber incidents and attacks, with potentially serious consequences and costs for the affected businesses.
In response to these challenges, the University of Nottingham, in collaboration with Queen Mary University of London and the University of Kent, has initiated a 2.5-year research project. The project aims to better understand the specific cyber security support needs of SMEs, particularly smaller businesses, and develop a new approach to address these needs.
The initial phase of the research will focus on assessing the current understanding and confidence levels of SMEs regarding cyber security. The researchers will also examine the awareness and perceptions of available support among SMEs and determine the situations in which they seek advice and assistance. Additionally, the research will evaluate the existing routes for support, considering the coverage, consistency, and capacity of those offering guidance.
Based on the findings from the initial phase, the research project will then track and analyze individual “support journeys” of participating SMEs. By examining these case studies, the researchers hope to identify the factors that contribute to successful or unsuccessful outcomes in seeking support. Ultimately, the project aims to design and implement Cyber Security Communities of Support (CyCOS). These communities will facilitate local collaboration and cooperation between SMEs and advisory sources, providing SMEs with the opportunity to identify and share their support needs and connect with relevant advisory sources, including peer support from other SMEs.
The research project will include three pilots to test and evaluate the effectiveness of the CyCOS approach. The goal is to establish a repeatable model that can be adopted on a wider scale, ensuring that SMEs receive the necessary support to enhance their cyber security.
SMEs that are interested in keeping updated or contributing to the research project are encouraged to contact the research team via email at [[email protected]]. Furthermore, Professor Steven Furnell will address these issues and discuss how the cyber security community can better support SMEs in his session at the Global Cyber Summit during the International Cyber Expo in London on September 26th, 2023.
The research project and the upcoming session aim to address the pressing need to protect SMEs from cyber threats. By understanding their support needs and establishing collaborative communities, SMEs can gain valuable knowledge and resources to enhance their cyber security measures. It is crucial for the government, industry experts, and the cyber security community to work together to ensure the protection of SMEs, which are a vital element of the UK economy.