THE THREAT OF CYBERATTACKS IN BUSINESS
THE THREAT OF CYBERATTACKS IN BUSINESS

Summary/Abstract: This article examines the exposure of private businesses, particularly small and medium-sized enterprises (SMEs) to cyberattacks and the organizational measures that mitigate risk. A cross-sector survey of Georgian SMEs was conducted to assess awareness of cyber hygiene and the adoption of preventive controls during ongoing digital transformation. Results indicate strong recognition of the importance of cyber hygiene (100%) but limited competence in the field (66.7% report insufficient expertise) and low incident-reporting intent among employees. Managers (83.3%) view training as a decisive factor, yet twothirds (66.7%) lack dedicated cybersecurity officers. Situating these findings within Georgia’s National Cybersecurity Strategy (Resolution No. 482) and international indices such as the NCSI, the study argues for integrated programs that combine technical controls - access management, phishing simulations, and secure off-boarding with cultural initiatives focused on awareness and incentives. The paper concludes with policy and managerial recommendations tailored to SMEs. Global statistics further reveal that most cybercrimes target private businesses, which, on average, allocate less than $500 annually for cybersecurity measures, making them highly profitable targets for cybercriminals.

• Details
• Contents