V3I2P49

Cybersecurity in Small and Medium-Sized Enterprises: A Literature Review with a Focus on Slovakia and the European Union

Leoš Šafár¹, Jakub Sopko², Michal Mešťan^3*

Abstract

Small and medium-sized enterprises (SMEs) play a central role in the European and Slovak economies, yet they remain disproportionately exposed to cyber threats amid rapid digitalisation and increasing integration into cross-border value chains. This article presents a structured literature review of cybersecurity in SMEs with a specific focus on Slovakia and a comparative perspective across European Union Member States. The review synthesises peer-reviewed research, EU policy documents, and international threat intelligence reports to examine four interrelated dimensions: i) cybersecurity awareness and organisational preparedness of SMEs, ii) incident reporting practices and the economic impacts of cyber incidents, iii) dominant attack vectors and risk mitigation practices, and iv) governance mechanisms, including NIS2-related supply-chain pressures. The findings identify a persistent awareness–implementation gap, systematic underreporting of cyber incidents (particularly in Central and Eastern Europe), and substantial cross-country heterogeneity in SME cyber resilience. SMEs in digitally advanced EU economies exhibit higher adoption of baseline security controls and faster recovery from incidents than SMEs in less digitally mature ecosystems. The review further highlights emerging intersections between cybersecurity, artificial intelligence, and financial misconduct risks, suggesting that cyber resilience in SMEs should be viewed as part of broader economic governance. The paper concludes with policy implications for targeted capacity-building, improved access to financial support, harmonised reporting mechanisms, and directions for future research.

Keywords:

cybersecurity; small and medium-sized enterprises (SMEs); literature review; cyber resilience