Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises

Taskin, Nazim, Yıldırım, Aslı Özkeles, Ercan, Handan Derya, Wynn, Martin G ORCID: 0000-0001-7619-6079 and Metin, Bilgin (2025) Cyber Insurance Adoption and Digitalisation in Small and Medium-Sized Enterprises. Information, 16 (66). pp. 1-27. doi:10.3390/info16010066

[img]
Preview
Text
14701 Taskin, N. et al. (2025) Cyber Insurance Adoption and Digitalisation.pdf - Published Version
Available under License Creative Commons Attribution 4.0.

Download (1MB) | Preview

Abstract

Digitalisation has significantly increased cybersecurity risks in organisations, notably for small to medium-sized enterprises (SMEs), in which IT departments often have relatively small teams and limited resources. Cyber insurance enables SMEs to navigate cybersecurity risks more economically, providing an essential risk transfer alternative to costly reduction strategies. This article examines the antecedents, emergence, and application of cyber insurance as a solution to cybersecurity concerns against the backdrop of increasing digitalisation. The research adopts a quantitative deductive approach, with an analysis of relevant literature providing the basis for the development of 12 hypotheses, which are then tested via a survey of 168 SMEs in Turkey. Using the Technology–Organisation–Environment–Individual (TOE-I) model as a top-line conceptual framework, the article finds that cyber insurance policy adoption has facilitated a more rapid and secure digitalisation process and that the mitigation of financial risk associated with cyberattacks has allowed companies to invest more widely in information technologies and systems. The article clearly has its limitations, in that it is based on primary research in one European country, but the authors believe that it nevertheless provides some new insights into the potential benefits of cyber insurance, and the key issues SMEs must consider when considering adopting a cyber insurance policy. The findings will be of practical relevance to SMEs and other organisations reviewing their cybersecurity strategy and are also of relevance to the wider debate around the costs and benefits of digitalisation.

Item Type: Article
Article Type: Article
Uncontrolled Keywords: Cybersecurity; Digitalisation; Risk management; Cyber insurance; TOE; Technology–Organisation–Environment–Individual model; TOE-I
Subjects: T Technology > T Technology (General)
Divisions: Schools and Research Institutes > School of Business, Computing and Social Sciences
Depositing User: Martin Wynn
Date Deposited: 24 Jan 2025 15:19
Last Modified: 24 Jan 2025 15:19
URI: https://eprints.glos.ac.uk/id/eprint/14701

University Staff: Request a correction | Repository Editors: Update this record

University Of Gloucestershire

Bookmark and Share

Find Us On Social Media:

Social Media Icons Facebook Twitter YouTube Pinterest Linkedin

Other University Web Sites

University of Gloucestershire, The Park, Cheltenham, Gloucestershire, GL50 2RH. Telephone +44 (0)844 8010001.