Starting Point

Although supporting material on IT security for SMEs already exist on the market, many SMEs are poorly positioned. The research project empirically investigated why this situation exists and how it can best be addressed. A survey by Aalen University among SMEs in East Württemberg and Heilbronn-Franken found:

  • Many SMEs lack awareness of cyber security. They have little motivation to look into it in more detail and are concerned about the financial and time expenditure involved.
  • Information is obtained by many SMEs via online media (forums and associations) and personal contacts to service companies.
  • Many SMEs require a short (one-hour) analysis of the current situation using questionnaires and checklists.
  • Among SMEs, the Chamber of Industry and Commerce and the other chambers and guilds are considered particularly trustworthy.
  • Existing information material is not used due to a lack of time and incomprehensibility.
  • Many SMEs want an analysis of the current situation using questionnaires and checklists.

The empirical study of the initial situation confirmed the need for initial cybersecurity advice, especially for micro and small companies. The advice should be as low-threshold as possible in terms of content and time. The development goal was to provide advice of one hour. The providers of the advice should, if possible, be chambers and guilds, as they are considered particularly trustworthy by the target group when it comes to cybersecurity advice.