The Need for Information Security Management for SMEs

Abstract

A major part of the global economic activity is now constituting small to medium sized enterprises (SMEs) and under the current business globalization scenario Information Security Management (ISM) is crucial. As the size of an organization grows along with it multiplies the amount of sensitive information the organization is storing in their databases. It has been reported that small and medium business accounts for 80-90% of the market share, but most of the ISM effort is concentrated towards large business, as they provide around 50% of the turnover. SMEs are now becoming dependent on technology to provide better and more efficient services; this is a cause of concern as not all SMEs are taking the necessary steps to ensure information security. This paper explores the limitations faced by SMEs regarding ISM and how they can overcome it.