Enhancing Cybersecurity Readiness in SMEs: Addressing Resource Constraints and Policy Gaps through Scalable Solutions and IT Investments

This study investigates cybersecurity readiness in Small and Medium Enterprises (SMEs), an important yet understudied concern in light of rising cyber threats. Utilising survey responses from 63 SMEs from various industries, the research discovers significant challenges such as financial constraints, limited expertise, and insufficient employee awareness. The findings reveal substantial gaps in policy adoption and risk assessment practices with larger SMEs typically more prepared. Regression analysis identifies IT infrastructure investment as the most significant variable impacting readiness, while crosstabulation reveals differences in policy adoption across organisational sizes. This study emphasises the critical necessity for SMEs to implement customised, cost-effective cybersecurity measures to reduce risks and maintain continuous operations. By addressing these gaps, SMEs can enhance their resilience, safeguard their digital assets, and contribute to the stability of broader economic systems. Recommendations focus on scalable solutions, policy integration, and external support to bridge existing vulnerabilities