Marketing capability and growth · Full-text qualitative empirical study
Investigating the experiences of providing cyber security support to small- and medium-sized enterprises
Neeshe Khan, Steven Furnell, Maria Bada, Matthew Rand, Jason R. C. Nurse (2025). Computers & Security.
Plain-English take
Providers played an assistive role in education and implementation, but SME cyber hygiene and knowledge remained low; comprehension, capability, attitudes and resources constrained security; security-focused communities could improve support, collaboration and learning. For a founder, use this as a question to test in your own context, not a universal playbook.
How much weight to give this
3.5/5 Useful evidence with meaningful caveats
The 1–5 evidence-check score is a practical reading aid, not a formal peer review or a probability that a conclusion is true. It combines design strength (2 points), sample reporting (1), comparison/control clarity (1), and how much of the paper could be checked (1). Access affects how confidently this directory can assess a study, not the study's underlying quality. Blinding is reported separately because it is not relevant to every design.
The described design supports the question, but it does not establish causal effects beyond the reported setting.
The reviewed source reports a sample or corpus size (12); size alone does not establish representativeness.
The comparison structure is limited or depends on the paper's model/context.
Firecrawl retrieved a full paper or full-text publisher page for this annotation.
Double-blind? Blinding was not established from the captured source; it may not apply to this study design.
Research question
What the authors investigated
What cybersecurity support do providers offer SMEs, what triggers requests, how effective is support, and how can it improve?
Design
Semi-structured interviews with support/advice providers; qualitative synthesis of provider experiences, each drawing on exposure to many SMEs.
Sample and setting
12 participants from organizations providing cybersecurity advice or solutions in the UK; participants had cumulative exposure to numerous SMEs.
Reported result
What the study found
Providers played an assistive role in education and implementation, but SME cyber hygiene and knowledge remained low; comprehension, capability, attitudes and resources constrained security; security-focused communities could improve support, collaboration and learning.
This is a paraphrase of the source. Check the original paper for definitions, estimates, statistical uncertainty and analysis details.
Scope and transfer
Limitations to keep in view
Provider-side perspective rather than direct SME interviews; qualitative design and UK context; each participant’s experience is cumulative rather than a single-firm observation.
Possible founder application
Treat this as evidence for the specific marketing capability and growth question studied. Compare the setting and sample to your company before changing a growth decision; use a local experiment where the paper does not match your context.
Evidence access
Full text retrieved from publisher or linked open repository
Publisher DOI record and accessible article/abstract directly support the bibliographic record and the summary fields; editorial review remains appropriate for duplicate checking against the unseen 300-study library. Correction notices were not separately verified in this collection; consult the current publisher record before applying the findings.
If only an abstract or metadata was available, the profile is limited to claims supported there. A paper's paywall does not change its evidentiary status, but it limits what we can substantiate from accessible text.