Information Security in Small and Medium-Sized Companies

Information security doesn’t involve only large organizations. Small and medium-sized companies must closely examine this issue too, because they are increasingly threatened by cyber attacks. Many of them mistakenly believe, that security of their valuable data is sufficient, or that the attackers are not interested in them. Existing standards and methodologies for implementation and management of information security are often hard to transfer to the environment of small and medium-sized businesses, because these companies do not want, or are not able to observe a large bounty of prescribed procedures and regulations related to certification standards. The article offers a methodology of balanced information security for small and medium-sized businesses. It describes important areas of information security and defines the basic criteria for assessing the security quality of each of the key areas.