Information Technology (IT) Security Framework for Kenyan Small and Medium Enterprises (SMEs)

To address challenges faced by SMEs especially in Kenya, this paper aims to establish anInformation Technology (IT) framework that can allow Kenyan Small and Medium Enterprises(SMEs) implement cost effective security measures. Particularly this paper discusses IT securityrequirements and appropriate metrics. There is evidence from the survey to suggest that despitehaving some IT security measures in place, Kenyan SMEs still face some serious IT securitychallenges. In the light of the challenges faced by Kenyan SMEs, this work recommends aframework which is supposed among other things provide some metrics of evaluating theeffectiveness of implemented security measures. The framework is likely to assist SMEstakeholders measure the effectiveness of their security enhancing mechanisms.