Investigating Business Cybersecurity Vulnerability and Development of an Application for Security Awareness Training Platform for Small and Medium-sized Enterprises

Small and medium-sized enterprises (SMEs) are increasingly becoming prime targets for cybercriminals due to their limited IT expertise, inadequate cybersecurity investment, and insufficient security awareness training. The increasing sophistication of social engineering attacks are rendering traditional security awareness programs obsolete, as they fail to effectively promote behavior change. The proposed solution develops a software-based security awareness training program that integrates interactive activities, realistic scenarios, and gamified learning methods to engage employees and facilitate long-term behavioral change towards security awareness. Future research should focus on evaluating the effectiveness of the proposed training program in real-world scenarios to measure its impact on security behaviors within SMEs.