Izvorni znanstveni članak
https://doi.org/10.54820/entrenova-2025-0089
Research Framework for Investigating Determinants of Cybersecurity Adoption in SMEs
Damir Zidar
; EXOSPHERE ING d.o.o.
*
* Dopisni autor.
Sažetak
This paper develops and empirically illustrates a research framework for investigating the determinants of cybersecurity adoption in small and medium-sized enterprises (SMEs). It examines adoption beyond the initial decision to deploy security tools, operationalising institutionalisation through cybersecurity maturity. The framework combines the Technology–Organisation–Environment (TOE) perspective with a multidimensional, ISO/IEC 27002:2022-aligned maturity construct. Seven contextual determinants are measured with 35 survey items, while four security-control domains are represented by 42 indicators. An illustrative application uses cross-sectional survey responses from 207 Croatian SMEs and a sequential analytical procedure comprising expert-based instrument refinement, confirmatory factor analysis, reliability and validity assessment, and covariance-based structural equation modelling. The maturity measurement model displays acceptable approximate fit, whereas the TOE model reveals weaker incremental fit and overlapping organisational constructs. Context-specific structural models identify significant relationships but do not establish causality. The contribution is a transparent, transferable protocol for specifying, measuring, testing, and critically interpreting the contextual determinants of institutionalised cybersecurity adoption in resource-constrained enterprises.
Ključne riječi
cybersecurity adoption; cybersecurity maturity; SMEs; TOE framework; ISO/IEC 27002; covariance-based SEM
Hrčak ID:
352767
URI
Datum izdavanja:
1.12.2025.
Posjeta: 0 *