“…The manifestation of cyber threats and the resulting damages to both financial and reputational themes have been recognized and highlighted (Eling & Schnell, 2016). Regional studies on cyber risks and SMEs Kent et al, 2016;Nycz et al, 2015;Asgary et al, 2020 Social engineering and SMEs Osei & Yeboah-boateng, 2013;Onwubiko & Lenaghan, 2007 Evaluation tools Benz & Chatterjee, 2020;Javaid & Iqbal, 2017;Burggraf et al, 2018 Business continuity Mallinder & Drabwell, 2013;Sadok & Bednar, 2016 Information security and SMEs Ključnikov et al, 2019;Yigit Ozkan et al, 2020;Brunner et al, 2018 In general, the topic of cybersecurity has been researched extensively, for example, the nature of cyber threats and their mitigation (Azmi et al, 2018;Kshetri, 2018;Nieto et al, 2019), human-computer interactions and resulting threats (Gupta et al, 2017;Heartfield et al, 2016;Krombholz et al, 2015), social engineering attacks (Gupta et al, 2017), technical aspects of cybersecurity (Stallings, 2019), standards, policies, andprocedures (Bozkus Kahyaoglu &Caliyurt, 2018), identity fraud management (Shah et al, 2019), and MCDA approach to cyber risk assessment (Ganin et al, 2020). These works though addressing different aspects of cybersecurity have been developed either in the context of larger firms or hypothetical examples.…”