Skip to content
J·BJon BishopIndependent growth marketer

Marketing strategy · Full-text qualitative empirical study

Investigating the experiences of providing cyber security support to small- and medium-sized enterprises

Computers & Security · 2025

Neeshe Khan, Steven Furnell, Maria Bada, Matthew Rand, Jason R. C. Nurse

Summary

Providers played an assistive role in education and implementation, but SME cyber hygiene and knowledge remained low; comprehension, capability, attitudes and resources constrained security; security-focused communities could improve support, collaboration and learning. For a founder, use this as a question to test in your own context, not a universal playbook.

For your marketing

Possible founder application

Treat this as evidence for the specific marketing capability and growth question studied. Compare the setting and sample to your company before changing a growth decision; use a local experiment where the paper does not match your context.

Reported result

What the study found

Providers played an assistive role in education and implementation, but SME cyber hygiene and knowledge remained low; comprehension, capability, attitudes and resources constrained security; security-focused communities could improve support, collaboration and learning.

Research question

What the authors investigated

What cybersecurity support do providers offer SMEs, what triggers requests, how effective is support, and how can it improve?

Design

Semi-structured interviews with support/advice providers; qualitative synthesis of provider experiences, each drawing on exposure to many SMEs.

Sample and setting

12 participants from organizations providing cybersecurity advice or solutions in the UK; participants had cumulative exposure to numerous SMEs.

Scope and transfer

Limitations to keep in view

Provider-side perspective rather than direct SME interviews; qualitative design and UK context; each participant’s experience is cumulative rather than a single-firm observation.

Research sources

Publisher DOI record and accessible article/abstract directly support the bibliographic record and the summary fields; editorial review remains appropriate for duplicate checking against the unseen 300-study library. Correction notices were not separately verified in this collection; consult the current publisher record before applying the findings.

Additional research source ↗

Prefer to write? Send Jon a message.