{"id":"https://openalex.org/W4387294207","doi":"https://doi.org/10.1093/cybsec/tyag030","title":"Unaware, unfunded, untrained, and unsupported: a systematic review of cybersecurity in small and medium enterprises","display_name":"Unaware, unfunded, untrained, and unsupported: a systematic review of cybersecurity in small and medium enterprises","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W4387294207","doi":"https://doi.org/10.1093/cybsec/tyag030"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyag030","doi":"https://doi.org/10.1093/cybsec/tyag030","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyag030","pdf_url":null,"source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"volume":null,"type":"review","is_traditional":true,"indexed_in":["arxiv","crossref","datacite","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1093/cybsec/tyag030","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Carlos Rombaldo Junior","orcid":"https://orcid.org/0009-0004-0491-3146","observed_orcids":["https://orcid.org/0009-0004-0491-3146"]},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Carlos Rombaldo Junior","raw_affiliation_strings":["Department of Security & Crime Science, University College of London , Gower Street, WC1E 6BT London ,"],"raw_orcid":"https://orcid.org/0009-0004-0491-3146","affiliations":[{"raw_affiliation_string":"Department of Security & Crime Science, University College of London , Gower Street, WC1E 6BT London ,","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036272832","display_name":"Ingolf Becker","orcid":"https://orcid.org/0000-0002-3963-4743","observed_orcids":["https://orcid.org/0000-0002-3963-4743"]},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ingolf Becker","raw_affiliation_strings":["Department of Security & Crime Science, University College of London , Gower Street, WC1E 6BT London ,"],"raw_orcid":"https://orcid.org/0000-0002-3963-4743","affiliations":[{"raw_affiliation_string":"Department of Security & Crime Science, University College of London , Gower Street, WC1E 6BT London ,","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085424492","display_name":"Shane D. Johnson","orcid":"https://orcid.org/0000-0002-0184-9896","observed_orcids":["https://orcid.org/0000-0002-0184-9896"]},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Shane D Johnson","raw_affiliation_strings":["Department of Security & Crime Science, University College of London , Gower Street, WC1E 6BT London ,"],"raw_orcid":"https://orcid.org/0000-0002-0184-9896","affiliations":[{"raw_affiliation_string":"Department of Security & Crime Science, University College of London , Gower Street, WC1E 6BT London ,","institution_ids":["https://openalex.org/I45129253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I45129253"],"apc_list":{"value":2094,"currency":"USD","value_usd":2094},"apc_paid":{"value":2094,"currency":"USD","value_usd":2094},"fwci":38.9514,"has_fulltext":true,"cited_by_count":71,"citation_normalized_percentile":{"value":0.9981685,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":"12","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.0,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/small-and-medium-sized-enterprises","display_name":"small and medium-sized enterprises","score":0.9049999713897705},{"id":"https://openalex.org/keywords/cybersecurity","display_name":"cybersecurity","score":0.7459999918937683},{"id":"https://openalex.org/keywords/cyber-resilience","display_name":"cyber resilience","score":0.9300000071525574},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"cyber threats","score":0.7839999794960022},{"id":"https://openalex.org/keywords/cybersecurity-literacy","display_name":"cybersecurity literacy","score":0.9980000257492065},{"id":"https://openalex.org/keywords/financial-constraints","display_name":"financial constraints","score":0.652999997138977},{"id":"https://openalex.org/keywords/cybersecurity-controls","display_name":"cybersecurity controls","score":0.6179999709129333},{"id":"https://openalex.org/keywords/resource-availability","display_name":"resource availability","score":0.6340000033378601},{"id":"https://openalex.org/keywords/developing-countries","display_name":"developing countries","score":0.75}],"concepts":[{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.7906570434570312},{"id":"https://openalex.org/C2777941463","wikidata":"https://www.wikidata.org/wiki/Q1416374","display_name":"Financial literacy","level":2,"score":0.5691203474998474},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5561928749084473},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5436981320381165},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.44180259108543396},{"id":"https://openalex.org/C547764534","wikidata":"https://www.wikidata.org/wiki/Q8236","display_name":"Literacy","level":2,"score":0.4394548535346985},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3610309362411499},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.3287423849105835},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.24659159779548645},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.1987226903438568},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.17120513319969177},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.16134989261627197},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.14069566130638123},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.11369812488555908},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1093/cybsec/tyag030","doi":"https://doi.org/10.1093/cybsec/tyag030","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyag030","pdf_url":null,"source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2309.17186","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2309.17186","pdf_url":"https://arxiv.org/pdf/2309.17186","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:10231935","doi":null,"is_oa":true,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/10231935/","pdf_url":"https://discovery.ucl.ac.uk/id/eprint/10231935/1/junior_unaware_2026.pdf","source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity , 12 (1) , Article tyag030. (2026)","raw_type":"Article"},{"id":"doi:10.48550/arxiv.2309.17186","doi":"https://doi.org/10.48550/arxiv.2309.17186","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2309.17186","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyag030","doi":"https://doi.org/10.1093/cybsec/tyag030","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyag030","pdf_url":null,"source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","score":0.4000000059604645,"display_name":"Decent work and economic growth"}],"study_designs":[{"id":"https://openalex.org/study-designs/systematic-review","display_name":"Systematic Review"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4387294207.pdf","grobid_xml":"https://content.openalex.org/works/W4387294207.grobid-xml"},"referenced_works_count":133,"referenced_works":["https://openalex.org/W1572319397","https://openalex.org/W1598602811","https://openalex.org/W1979290264","https://openalex.org/W1982267196","https://openalex.org/W2070285512","https://openalex.org/W2110770770","https://openalex.org/W2148657628","https://openalex.org/W2149604183","https://openalex.org/W2161374186","https://openalex.org/W2493032623","https://openalex.org/W2517769515","https://openalex.org/W2525353023","https://openalex.org/W2534656414","https://openalex.org/W2560438049","https://openalex.org/W2567362164","https://openalex.org/W2609595447","https://openalex.org/W2735522525","https://openalex.org/W2735611215","https://openalex.org/W2754938188","https://openalex.org/W2769580135","https://openalex.org/W2792435356","https://openalex.org/W2887498301","https://openalex.org/W2889870589","https://openalex.org/W2891164157","https://openalex.org/W2902557775","https://openalex.org/W2907560499","https://openalex.org/W2921648219","https://openalex.org/W2941273594","https://openalex.org/W2943049594","https://openalex.org/W2947644262","https://openalex.org/W2949584734","https://openalex.org/W2951675045","https://openalex.org/W2955283430","https://openalex.org/W2956160931","https://openalex.org/W2964219354","https://openalex.org/W2966281863","https://openalex.org/W2975506339","https://openalex.org/W2979862979","https://openalex.org/W2980318030","https://openalex.org/W2980370088","https://openalex.org/W2985776815","https://openalex.org/W2989837596","https://openalex.org/W2995347967","https://openalex.org/W2995518182","https://openalex.org/W2997403366","https://openalex.org/W2998159685","https://openalex.org/W3004029179","https://openalex.org/W3009552788","https://openalex.org/W3013352274","https://openalex.org/W3016335084","https://openalex.org/W3017724701","https://openalex.org/W3021133504","https://openalex.org/W3022829101","https://openalex.org/W3030321395","https://openalex.org/W3035746185","https://openalex.org/W3041877436","https://openalex.org/W3042317367","https://openalex.org/W3042472809","https://openalex.org/W3042970060","https://openalex.org/W3047758356","https://openalex.org/W3048560297","https://openalex.org/W3080962331","https://openalex.org/W3084144340","https://openalex.org/W3088753493","https://openalex.org/W3089172401","https://openalex.org/W3091268337","https://openalex.org/W3107568738","https://openalex.org/W3110802091","https://openalex.org/W3114554745","https://openalex.org/W3122418668","https://openalex.org/W3129424963","https://openalex.org/W3136583767","https://openalex.org/W3141163522","https://openalex.org/W3145117320","https://openalex.org/W3153582100","https://openalex.org/W3164577312","https://openalex.org/W3169914440","https://openalex.org/W3170198944","https://openalex.org/W3173276376","https://openalex.org/W3175145616","https://openalex.org/W3176568868","https://openalex.org/W3184791374","https://openalex.org/W3185939950","https://openalex.org/W3186390924","https://openalex.org/W3191090354","https://openalex.org/W3191794949","https://openalex.org/W3193717110","https://openalex.org/W3206240855","https://openalex.org/W3217150391","https://openalex.org/W4210406407","https://openalex.org/W4214919957","https://openalex.org/W4220820329","https://openalex.org/W4225310758","https://openalex.org/W4226281451","https://openalex.org/W4231895580","https://openalex.org/W4238301607","https://openalex.org/W4238347293","https://openalex.org/W4285609060","https://openalex.org/W4293152942","https://openalex.org/W4297517569","https://openalex.org/W4297786865","https://openalex.org/W4308588852","https://openalex.org/W4312994992","https://openalex.org/W4322622714","https://openalex.org/W4323240527","https://openalex.org/W4324368815","https://openalex.org/W4327795783","https://openalex.org/W4366004241","https://openalex.org/W4366825280","https://openalex.org/W4367042241","https://openalex.org/W4368232268","https://openalex.org/W4376142757","https://openalex.org/W4376881301","https://openalex.org/W4378530822","https://openalex.org/W4378696314","https://openalex.org/W4379875116","https://openalex.org/W4381734347","https://openalex.org/W4383649102","https://openalex.org/W4384697762","https://openalex.org/W4385254258","https://openalex.org/W4385713444","https://openalex.org/W4385812519","https://openalex.org/W4386223920","https://openalex.org/W4386662251","https://openalex.org/W4388943579","https://openalex.org/W4389276165","https://openalex.org/W4391095111","https://openalex.org/W4391904025","https://openalex.org/W4391904113","https://openalex.org/W4392163865","https://openalex.org/W4394812907","https://openalex.org/W4394985015","https://openalex.org/W4401274520"],"related_works":["https://openalex.org/W4410477787","https://openalex.org/W4386643004","https://openalex.org/W4413213860","https://openalex.org/W7152343457","https://openalex.org/W4417198605","https://openalex.org/W4407416213","https://openalex.org/W7161383062","https://openalex.org/W4388937242","https://openalex.org/W4402982742","https://openalex.org/W7147709704"],"abstract_inverted_index":{"Abstract":[0],"Small":[1],"and":[2,18,43,58,70,95,113,123,160,169,190],"medium":[3],"enterprises":[4],"(SMEs)":[5],"are":[6,27,149],"pivotal":[7],"in":[8,30,74,118],"the":[9,39,50,140,185],"global":[10],"economy,":[11],"accounting":[12],"for":[13],"over":[14],"90%":[15],"of":[16,20,45,147,152,154,188],"businesses":[17],"60%":[19],"employment":[21],"worldwide.":[22],"Despite":[23],"their":[24],"significance,":[25],"SMEs":[26,54,72,110,148],"often":[28,126],"disregarded":[29],"cybersecurity":[31,51,76,145,155,158],"initiatives,":[32],"rendering":[33],"them":[34,97],"ill-equipped":[35],"to":[36,86,143],"deal":[37],"with":[38],"growing":[40],"frequency,":[41],"sophistication,":[42],"destructiveness":[44],"cyberattacks.":[46],"We":[47,60,90],"systematically":[48],"reviewed":[49],"literature":[52],"on":[53,62,109],"published":[55],"between":[56,167],"2017":[57],"2024.":[59],"focused":[61],"research":[63,108,137],"discussing":[64],"cyber":[65],"threats,":[66,122],"adopted":[67],"controls,":[68],"challenges,":[69],"constraints":[71],"face":[73],"pursuing":[75],"resilience.":[77],"Our":[78,172],"search":[79],"yielded":[80],"1090":[81],"studies":[82],"that":[83,107,139,181],"we":[84],"narrowed":[85],"132":[87],"relevant":[88],"papers.":[89],"identified":[91],"44":[92],"unique":[93],"themes":[94],"categorized":[96],"as":[98],"novel":[99],"findings":[100],"or":[101,132],"established":[102],"knowledge.":[103],"This":[104],"distinction":[105],"revealed":[106],"is":[111,184],"underdeveloped":[112],"has":[114],"made":[115],"little":[116],"progress":[117],"understanding":[119],"SMEs\u2019":[120],"roles,":[121],"needs.":[124],"Studies":[125],"repeated":[127],"early":[128],"discoveries":[129],"without":[130],"replicating":[131],"offering":[133],"new":[134],"insights.":[135],"Existing":[136],"indicates":[138],"main":[141],"challenges":[142],"attaining":[144],"resilience":[146],"a":[150,175],"lack":[151],"awareness":[153,189],"risks,":[156],"limited":[157,182],"literacy,":[159],"constrained":[161],"financial":[162],"resources.":[163],"Resource":[164],"availability":[165],"varied":[166],"developed":[168],"developing":[170],"countries.":[171],"analysis":[173],"indicated":[174],"relationship":[176],"among":[177],"these":[178],"themes,":[179],"suggesting":[180],"literacy":[183],"root":[186],"cause":[187],"resource":[191],"constraint":[192],"issues.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":33},{"year":2025,"cited_by_count":35},{"year":2024,"cited_by_count":3}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2023-10-03T00:00:00"}