NECESSITY OR CHALLENGE - INFORMATION SECURITY FOR SMALL AND MEDIUM ENTERPRISES

Due to the inadequate mamagement of information securityexpectations and various unexpected information technology incidents, small and mediumenterprises that lose data or have to cope with a lack of data over a certain period of time maylose business commissions or customers. A solution to this problem may be the regulatedadministration of information security, which may lower the amount of risks. Enterprises in thissector generally have not enough human, material and information technology resources toperform tasks of this sort. The controversy seems to be an irresoluble one; the authors attemptto provide help to initiate a solution to the issue that remains above the ‘still acceptable’ level.The paper surveys several professional sources as well as standards, recommendations, andmethodologies applicable in the field. The authors of this paper consciously strive todifferentiate between information technology security and information security.