Belay A.M., Reardon S., Lerario M., Tuiskula H.
Smart Innovation Norway, NO
Keywords: compliance, cybersecurity system, framework, innovation, mitigation, research, risk, SMES
The paper investigates the cybersecurity management systems of SMEs and research institutes. It identified the key aspects of cyber security management and explored the sources and types of cybersecurity challenges with their associated risks and mitigation methods. Smart Innovation Norway (research organization) was considered as a case and the authors analyzed user data collected from its five different departments during six months. For the analysis purpose, various statistical methods and visualization dashboards were used. In the analysis, the authors extracted usage data from the organization’s Microsoft tenant using the dedicated tools for compliance and security. The result from the analysis showed a total compliance score for Smart Innovation Norway (SIN) of 85%. This score is based on ISO 27001 controls. We also investigated the main reasons for improvement to achieve the required compliance level. The research analyzed the impact of IT awareness before and after training and compared the compliance score of SIN with similar-sized organizations using Microsoft 365 portals. The result comprises a business impact assessment and the bow tie method which includes mitigation actions and preventive measures. Furthermore, the paper lays a foundation and has implications for managing cyber security not only for the SME and research organization but also for startups that have limited resources.
Journal: TechConnect Briefs
Volume: TechConnect Briefs 2022
Published: June 13, 2022
Pages: 163 - 166
Industry sector: Energy & Sustainability
Topic: Energy Storage
ISBN: 979-8-218-00238-1