"It's Not Something We Have Talked to Our Team About": Results From a Preliminary Investigation of Cybersecurity Challenges in Denmark

TL;DR

This study explores cybersecurity challenges faced by Danish companies, revealing gaps in basic security practices and highlighting the need for guidance and tools to improve IT security awareness and implementation.

Contribution

It provides preliminary insights into cybersecurity issues in Denmark and proposes directions for developing a practical security framework for SMEs.

Findings

Companies lack fundamental security protections

There is a need for guidance and tools for basic security practices

Awareness of cyber threats is insufficient

Abstract

Although Denmark is reportedly one of the most digitised countries in Europe, IT security in Danish companies has not followed along. To shed light into the challenges that companies experience with implementing IT security, we conducted a preliminary study running semi-structured interviews with four employees from four different companies, asking about their IT security and what they need to reduce risks of cyber threats. Our results show that companies are lacking fundamental security protection and are in need of guidance and tools to help them implementing basic security practices, while raising awareness of cyber threats. Based on our findings and with the inspiration of the latest reports and international security standards, we discuss steps towards further investigation towards developing a framework targeting SMEs that want to adopt straightforward and actionable IT security guidance.