2027

Rasmus, Kai; Kokkonen, Tero; Mikkonen, Tommi

The cyber-resilience of small businesses is important to the economy of every nation. This is because small businesses form the majority of all businesses and because they can function as subcontractors to larger businesses and governments. The security scene of small businesses in Finland was studied by looking at what instructions and guides national security agencies have published for small businesses and what security products are available from the biggest internet service providers. The assumption being that a small business will most probably procure their cybersecurity solutions from the same instance that they get their internet subscription from. A list of the most relevant threats was then compared to the information publicly available on the web pages of these organisations to find the level of security that a small business will obtain. The results show that most technical threats are controlled against but the importance of a good security policy and training is also highlighted. No security certifications are required in Finland, except when sensitive or confidential information is being generated, stored or handled.