How Large Companies Can Help Small and Medium-Sized Enterprise (SME) Suppliers Strengthen Cybersecurity

Abstract

Large companies increasingly expect small and medium-sized enterprise (SME) suppliers to meet the same cybersecurity standards that large companies follow. However, these expectations often create insurmountable burdens for SMEs, which already struggle to meet minimum levels of cybersecurity. Drawing on interviews with managers and cybersecurity executives, this article identifies four barriers that SMEs frequently encounter when implementing cybersecurity. The article also proposes five actions that large companies can take to assist their suppliers in strengthening cyber resilience.