Investigating involvement of leaders in technology discussions as mitigating factors of cyber risk in SMEs

Abstract

Problem: The lack of involvement and participation by primary decision-makers increases the risk to the business. Objective: This study investigates the significance of the relationship between leadership involvement in technology discussion and the perceived technology risks to the business. Methods: This quasi-experimental study utilised a closed-ended, structured questionnaire with a 7-point Likert scale to obtain primary data before and after information sessions (manipulation) to determine the change in the level of involvement (independent variable) and the risk perception (dependent variable). Findings: The results indicate significant correlations in the relationship between leadership and the leader's perceived risk to the business, which is consistent with the study's primary objective. Discussion: Increased awareness of the importance of information technology and its implication on the business will likely also increase the risk perception of respondents, at least increasing the demand for cybersecurity training and preventative and mitigation options like obtaining insurance against cybercrime. Being involved and thus more aware of the impact of information technology in the business will help leaders make better-informed decisions to help businesses succeed and understand the risks to the business.