Information security management in SMEs: factors of success

Abstract

While the consecutive metamorphoses in the world economy changes the paradigm of doing business, the sources of success of almost every type of business transfer from tangible to intangible assets, and the information and its value becomes more and more significant, especially in the segment of small and medium sized enterprises. The aim of this paper was to identify the factors of success of information security management in segment of SMEs in Slovakia. Based on the literature research we identified 4 main factors of success of information security management, including the Compliance of information security management with the company's business activities, Support of top management, Security controls and Organizational awareness. To identify the importance and interconnections of the specified factors we have addressed senior IT security experts from SMEs in Slovakia. The experts evaluated the significance and relationships the factors of success of information security management and the results of the expert evaluation were processed using the DEMATEL technique. The results of the research show that the Security Controls and Supportive top management are the most important factors in general, while the factor of organizational awareness is the most obvious and important in the short-term period. Our results imply that SMEs should promote organizational awareness in information security management in line with implementation of the security controls at the first line of the defense.

Assessment of Economic Security of Enterprises: Theoretical and Methodological Aspects

“…Sitdikova and Starodumova (2019) in the context of assessing economic security, examined the main corporate problems that may arise in ensuring security. Kljucnikov, Mura, and Sklenar (2019) examined information support for security and how to protect information related to the economic activity of an enterprise. Jankelova et al (2018) made a good contribution to the development of security assurance and assessment in business organizations in the context of preventing an economic crisis.…”

The Approach of SMEs to Using the Customer Databases and CRM: Empirical Study in the Slovak Republic

“…Small-and medium-sized enterprises are considered key economic drivers in the world, and they account for the vast majority of world economic output (over 60%) in country economies worldwide, generating overall social growth [36][37][38][39][40][41]. According to the Jeck study [42], emerging SMEs in addition to job creation are often bearers of the commercialization of new technology or innovative ideas as well as positive structural changes in the economy and its productivity.…”

Cyber Threat Intelligence

“…Tietoturvallisuus tarkoittaa tiedon suojaamista sen luomisen, prosessin, tallentamisen, transformaation ja poistamisen aikana. Käyttämällä apuna loogisia, teknillisiä, fyysisiä ja organisaatiollisia toimenpiteitä, jotka estävät tiedon luotettavuuden, eheyden ja saatavuuden vähenemistä (Ključnikov, Mura & Sklenár, 2019). Tietoturvallisuuden on siis tarkoitus estää ja/tai minimoida hyökkäyksestä aiheutunut vahingot koko tiedon elinkaaren aikana.…”