Information Security in Small and Medium-Sized Companies

David Kral ()
Additional contact information
David Kral: Akademie STING, Brno

ACTA VSFS, 2011, vol. 5, issue 1, 61-73

Abstract: Information security doesn’t involve only large organizations. Small and medium-sized companies must closely examine this issue too, because they are increasingly threatened by cyber attacks. Many of them mistakenly believe, that security of their valuable data is sufficient, or that the attackers are not interested in them. Existing standards and methodologies for implementation and management of information security are often hard to transfer to the environment of small and medium-sized businesses, because these companies do not want, or are not able to observe a large bounty of prescribed procedures and regulations related to certification standards. The article offers a methodology of balanced information security for small and medium-sized businesses. It describes important areas of information security and defines the basic criteria for assessing the security quality of each of the key areas.

Keywords: information security; small and medium-sized businesses; risk management; key assets; security of processes; human resources; security incidents. (search for similar items in EconPapers)
Date: 2011
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.vsfs.cz/periodika/acta-2011-1-03.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:prf:journl:v:5:y:2011:i:3:p:61-73

Access Statistics for this article

More articles in ACTA VSFS from University of Finance and Administration Contact information at EDIRC.
Bibliographic data for series maintained by Magdalena Šebková ().