A framework to enhance ict security through education, training & awareness (eta) programmes in south african small, medium and micro-sized enterprises (smmes): a scoping review

Abstract

ICT security has proven to be one of the fundamental needs of organizations across the world. There has been a lot of research that has been conducted on the subject of ICT security. There has also been a lot of initiatives that have been implemented to improve ICT security education, training and awareness in South Africa. With all these efforts in place, there is still an increase in ICT-related crime in the country. ICT-related crime occurs almost on a daily basis in small enterprises in South Africa. There is a need for the enhancement of ICT security in South African organizations. The South African Small, Medium and Micro-sized Enterprises (SMMEs) play a vital role in improving the economy. Literature has shown that SMMEs create a number of employment opportunities thereby contributing to the country’s economy. Therefore it is important that these institutions run effectively, are profitable and sustainable. Many small organizations (SMMEs) have been victims of ICT-related crime in South Africa. Most of these crimes happen in these institutions because they do not necessarily have the resources to protect themselves. In some cases, these crimes occur because, due to issues such as financial constraints and lack of skills, ICT security is not one of their priorities. This research aims to explore the literature review that has been conducted; in an effort to propose a framework that will use of Education, Training & Awareness (ETA) programmes to improve ICT security in South African small enterprises.