Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises

Digitalisation has significantly increased cybersecurity risks in organisations, notably for small to medium-sized enterprises (SMEs), in which IT departments often have relatively small teams and limited resources. Cyber insurance enables SMEs to navigate cybersecurity risks more economically, prov...

Full description

Saved in:
Bibliographic Details
Main Authors: Nazim Taskin, Aslı Özkeleş Yıldırım, Handan Derya Ercan, Martin Wynn, Bilgin Metin
Format: Article
Language:English
Published: MDPI AG 2025-01-01
Series:Information
Subjects:
Online Access:https://www.mdpi.com/2078-2489/16/1/66
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832588331714609152
author Nazim Taskin
Aslı Özkeleş Yıldırım
Handan Derya Ercan
Martin Wynn
Bilgin Metin
author_facet Nazim Taskin
Aslı Özkeleş Yıldırım
Handan Derya Ercan
Martin Wynn
Bilgin Metin
author_sort Nazim Taskin
collection DOAJ
description Digitalisation has significantly increased cybersecurity risks in organisations, notably for small to medium-sized enterprises (SMEs), in which IT departments often have relatively small teams and limited resources. Cyber insurance enables SMEs to navigate cybersecurity risks more economically, providing an essential risk transfer alternative to costly reduction strategies. This article examines the antecedents, emergence, and application of cyber insurance as a solution to cybersecurity concerns against the backdrop of increasing digitalisation. The research adopts a quantitative deductive approach, with an analysis of relevant literature providing the basis for the development of 12 hypotheses, which are then tested via a survey of 168 SMEs in Turkey. Using the Technology–Organisation–Environment–Individual (TOE-I) model as a top-line conceptual framework, the article finds that cyber insurance policy adoption has facilitated a more rapid and secure digitalisation process and that the mitigation of financial risk associated with cyberattacks has allowed companies to invest more widely in information technologies and systems. The article clearly has its limitations, in that it is based on primary research in one European country, but the authors believe that it nevertheless provides some new insights into the potential benefits of cyber insurance, and the key issues SMEs must consider when considering adopting a cyber insurance policy. The findings will be of practical relevance to SMEs and other organisations reviewing their cybersecurity strategy and are also of relevance to the wider debate around the costs and benefits of digitalisation.
format Article
id doaj-art-2c845b7d312246fca40c139f590c5a45
institution Kabale University
issn 2078-2489
language English
publishDate 2025-01-01
publisher MDPI AG
record_format Article
series Information
spelling doaj-art-2c845b7d312246fca40c139f590c5a452025-01-24T13:35:20ZengMDPI AGInformation2078-24892025-01-011616610.3390/info16010066Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized EnterprisesNazim Taskin0Aslı Özkeleş Yıldırım1Handan Derya Ercan2Martin Wynn3Bilgin Metin4Department of Management Information Systems, Bogazici University, Istanbul 34342, TurkeyDepartment of Management Information Systems, Bogazici University, Istanbul 34342, TurkeyDepartment of Management, Bogazici University, Istanbul 33342, TurkeySchool of Business, Computing and Social Sciences, University of Gloucestershire, Cheltenham GL502RH, UKDepartment of Management Information Systems, Bogazici University, Istanbul 34342, TurkeyDigitalisation has significantly increased cybersecurity risks in organisations, notably for small to medium-sized enterprises (SMEs), in which IT departments often have relatively small teams and limited resources. Cyber insurance enables SMEs to navigate cybersecurity risks more economically, providing an essential risk transfer alternative to costly reduction strategies. This article examines the antecedents, emergence, and application of cyber insurance as a solution to cybersecurity concerns against the backdrop of increasing digitalisation. The research adopts a quantitative deductive approach, with an analysis of relevant literature providing the basis for the development of 12 hypotheses, which are then tested via a survey of 168 SMEs in Turkey. Using the Technology–Organisation–Environment–Individual (TOE-I) model as a top-line conceptual framework, the article finds that cyber insurance policy adoption has facilitated a more rapid and secure digitalisation process and that the mitigation of financial risk associated with cyberattacks has allowed companies to invest more widely in information technologies and systems. The article clearly has its limitations, in that it is based on primary research in one European country, but the authors believe that it nevertheless provides some new insights into the potential benefits of cyber insurance, and the key issues SMEs must consider when considering adopting a cyber insurance policy. The findings will be of practical relevance to SMEs and other organisations reviewing their cybersecurity strategy and are also of relevance to the wider debate around the costs and benefits of digitalisation.https://www.mdpi.com/2078-2489/16/1/66cybersecuritydigitalisationrisk managementcyber insuranceTOETechnology–Organisation–Environment–Individual model
spellingShingle Nazim Taskin
Aslı Özkeleş Yıldırım
Handan Derya Ercan
Martin Wynn
Bilgin Metin
Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises
Information
cybersecurity
digitalisation
risk management
cyber insurance
TOE
Technology–Organisation–Environment–Individual model
title Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises
title_full Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises
title_fullStr Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises
title_full_unstemmed Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises
title_short Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises
title_sort cyber insurance adoption and digitalisation in small and medium sized enterprises
topic cybersecurity
digitalisation
risk management
cyber insurance
TOE
Technology–Organisation–Environment–Individual model
url https://www.mdpi.com/2078-2489/16/1/66
work_keys_str_mv AT nazimtaskin cyberinsuranceadoptionanddigitalisationinsmallandmediumsizedenterprises
AT aslıozkelesyıldırım cyberinsuranceadoptionanddigitalisationinsmallandmediumsizedenterprises
AT handanderyaercan cyberinsuranceadoptionanddigitalisationinsmallandmediumsizedenterprises
AT martinwynn cyberinsuranceadoptionanddigitalisationinsmallandmediumsizedenterprises
AT bilginmetin cyberinsuranceadoptionanddigitalisationinsmallandmediumsizedenterprises