Comparative Analysis and Application of Cybersecurity Framework to Philippine Small and Medium Enterprises (SMEs)
Eric Blancaflor, James Andrei T. Pasco, Jerome B. Tamargo, Justine Amiel T. Jonson, John Darryl A. Doydoy · 2024
This paper compares the NIST and ISO cybersecurity frameworks and their application to Philippine Small and Medium Enterprises (SMEs). The study aims to empower SMEs with an understanding of cybersecurity frameworks and provide insights for risk mitigation. Through a survey-based approach, the research examines the alignment of SMEs with the selected frameworks, their effectiveness in addressing cyber threats, and the benefits and challenges faced during implementation. The findings reveal that SMEs effectively implement cybersecurity frameworks, improving incident response, data protection, and stakeholder trust. The paper recommends exploring more affordable cybersecurity frameworks suitable for SMEs in the Philippines and promoting a balanced approach to managing standards. By adopting the right strategies and frameworks, SMEs can fortify their digital assets and create a safer business environment for sustained growth.