¿Cómo evaluar del riesgo cibernético de las PYMEs? Una estrategia de la Academia para crear ventajas competitivas

Cyber risk refers to those risks generated using information and communication technologies (ICT), whether by individuals or organizations. The literature shows a gap between exposure, perception, and preparedness of small and medium-sized enterprises (SMEs) to mitigate cyber risk. The lack of qualified personnel in cybersecurity exacerbates this situation, placing SMEs in a vulnerable position against cyber attacks. However, developing an active and resilient stance allows them to manage these risks adequately, enhancing growth and fostering innovation, leading to more valuable organizations. This research aims to develop a methodology that enables an assessment tool for evaluating SMEs' cyber risk and to design a strategy for Academia to transfer knowledge to SMEs for mitigating cyber attack risks, thereby enabling them to gain a competitive advantage. The topic is relevant since through a comprehensive methodology, risks could be identified, and recommendations could be made so that SMEs can create a plan to prioritize and implement the most appropriate improvements for each case.