Mapping Cybersecurity Practices and Mental Models in Danish Small and Medium Enterprises (SMEs): A Comprehensive Study using Focus Groups⇤

In response to high cyber threats, this paper evaluates the cybersecurity landscape in Danish Small and Medium-sized Enterprises (SMEs) within the defense and IT sectors, mapping<br/>perspectives from policymakers, business associations, and<br/>SMEs. By integrating quantitative surveys, qualitative focus<br/>groups, interviews, and scenario-based simulations, we aim<br/>to understand and address the vulnerabilities in these critical<br/>sectors. The objective is to evaluate the cybersecurity policies<br/>and practices in Denmark, proposing actionable strategies<br/>to Danish SMEs making them resilient and contributing significantly to national security. The findings from this study<br/>are intended to contribute to the discourse on usable security<br/>practices and their implications for business continuity and<br/>policy formulation within the SME context.