Why don't SMEs buy cyber-security?

It is estimated that in the UK nearly 60% of SMEs suffered a security breach in 2014, with each attack thought to cost between £65,000 and £115,000.

free SME image

Whilst the cyber security industry has form for producing harem scarem reports, Government is sufficiently concerned that it is offering to subsidise the uptake of cyber security products and services.

Qualifying SMEs can, until October 20th, receive vouchers worth £5,000. That could buy a week’s worth of cyber security consultancy (possibly two). Or an entry level vulnerability management service for a year. Or cover the cost of joining the Cyber Essentials scheme, including a penetration test. The list goes on.

This is the third such offer from Government. Despite this, our SMEs appear to be stubbornly resistant to adopting cyber security measures, so much so that Scottish Enterprise has commissioned research from the University of Glasgow to understand why.

I have my own theories – a lack of customer awareness and an aversion to consulting among SMEs being two of them – but if you’re an SME we’d love to hear from you:

  • Do you buy cyber security products and services?
  • If yes: what has worked for you and what hasn’t?
  • If not: why not? What do you need?
  • Are you aware that there is free support available?