Title: An initial assessment of small business risk management approaches for cyber security threats

Authors: Christine T. Berry; Ronald L. Berry

Addresses: College of Business and Social Sciences, University of Louisiana at Monroe, 700 University Avenue, Monroe LA 71209, USA ' College of Business and Social Sciences, University of Louisiana at Monroe, 700 University Avenue, Monroe LA 71209, USA

Abstract: While larger companies have resources to address cyber security issues, small companies often do not. Usually, a business owner or his immediate family members handle many different roles within the small business. Because of a lack of information technology knowledge and resources to hire that knowledge, many small businesses are at a great risk of having their systems compromised. The purpose of this paper is to report the findings of a field study that included over 370 interviews with small business owners about their approach to risk management, including those related to cyber security threats. Results indicate that small business owners are often likely to have the basic tools related to technology risk management in place, but lack the policies, procedures and training to secure their information resources. Additionally, responses indicated a majority of respondents do not use strong passwords to protect their information assets.

Keywords: small business risk management; cyber security; internet security; cyber crime.

DOI: 10.1504/IJBCRM.2018.090580

International Journal of Business Continuity and Risk Management, 2018 Vol.8 No.1, pp.1 - 10

Received: 01 Jul 2017
Accepted: 19 Sep 2017

Published online: 22 Mar 2018 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article