Cyber Security Canvas for SMEs

In an increasingly digitalized and networked world, information security and cyber security pose ever greater challenges to organizations. Cyber-attacks cause high economic damage and can bring organizations to ruin. Many small and medium-sized enterprises (SME) are under the illusion that only the large companies are the victims of an attack; they protect their valuable data against this background only poorly. But even in research, the focus is generally not on SMEs. In the context of this work, an easy-to-use Cyber Security Canvas is therefore being modelled to close this gap and to allow SMEs pragmatic access to the topic. The model framework is supplemented with modular building blocks. The building blocks can be put together individually according to the requirements and needs of the SMEs using them, with the model dividing them up according to priority. The newly designed Cyber Security Canvas was put through an application test with a European-based SME in order to gain first insights into its practical suitability in the European context. The model proved to be successful, and was well received by the participant. Nevertheless, it has potential for improvement.