Developing a security behavioural assessment approach for cyber rating UK MSBs

Micro and small businesses account for over 99% of all businesses in the United Kingdom (UK). Still, a growing perception gap is how these businesses perceive the relevance and value of cyber security and the potential impacts from this. Recent studies by the UK government have shown a significant increase in the average cost to these smaller businesses after suffering a disruptive attack. Yet, their engagement with recognised standards and best practices is still relatively low. This paper aims to evaluate current behavioural models in the context of information security and develop a new influence-led approach to help ensure smaller businesses are both cyber ready and secure behaviours can be promoted. For this purpose, new engagement channels are identified and methods are developed to drive inferential and influencing factors for effective behaviour change.