The Good, The Bad and The Missing: A Narrative Review of Cyber-security Implications for Australian Small Businesses
Tracy Tam, Asha Rao, Joanne Hall

TL;DR
This paper reviews the unique cyber-security challenges faced by Australian small businesses, highlighting gaps in research and policy, and suggests leveraging their characteristics for improved resilience.
Contribution
It identifies unaddressed challenges specific to small businesses and emphasizes the need for tailored research and policy solutions to enhance cyber-security.
Findings
Small businesses face resource and organizational challenges impacting cybersecurity.
Characteristics like agility and large size can be leveraged for better security.
Current research and policies do not adequately address small business needs.
Abstract
Small businesses (0-19 employees) are becoming attractive targets for cyber-criminals, but struggle to implement cyber-security measures that large businesses routinely deploy. There is an urgent need for effective and suitable cyber-security solutions for small businesses as they employ a significant proportion of the workforce. In this paper, we consider the small business cyber-security challenges not currently addressed by research or products, contextualised via an Australian lens. We also highlight some unique characteristics of small businesses conducive to cyber-security actions. Small business cyber-security discussions to date have been narrow in focus and lack re-usability beyond specific circumstances. Our study uses global evidence from industry, government and research communities across multiple disciplines. We explore the technical and non-technical factors…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
