An investigation of cybersecurity implementation challenges among South African SMEs

Abstract

In today's technologically driven world, cybersecurity implementation among Small and Medium Enterprises (SMEs) is of paramount importance, particularly in developing nations like South Africa, where cybercrime is prevalent. Due to inadequate cybersecurity practices, weak policy execution, and low public awareness, cybercriminals are targeting South Africa. Furthermore, local SMEs have limited budget, skills and resources dedicated to cybersecurity, which enhances the problem in the current South African context. Drawing upon a literature review encompassing global perspectives on cybersecurity and SMEs, this study focuses on the South African context to provide insights tailored to the local SME landscape. This research investigates the cybersecurity implementation challenges faced by SMEs, by exploring the influence that subjective norms, attitude, perceived behavioural control, perceived ease of use, and perceived usefulness has on the intention to implement cybersecurity among South African SMEs. This quantitative study employed a survey which was distributed on social media to SMEs across the country to answer the research objectives. Key findings highlight the significant gaps in cybersecurity awareness and resources among South African SMEs, underscoring the urgent need for enhanced cybersecurity education and support. The investigation indicates that subjective norms, attitude, perceived behavioural control, perceived ease of use, and perceived usefulness contribute significantly to influencing cybersecurity implementation among South African SMEs. The identified factors provide a foundation for addressing the research objectives by emphasising the importance of subjective norms, attitudes, control perceptions, ease of use, and usefulness perceptions in the context of cybersecurity implementation. Ultimately, this research underscores the imperative for collaborative efforts between government, academia, and industry to address cybersecurity challenges faced by South African SMEs and foster a more resilient digital ecosystem.