好的，坏的和失踪的：对澳大利亚小企业网络安全影响的叙述性评论
The Good, The Bad and The Missing: A Narrative Review of Cyber-security Implications for Australian Small Businesses
摘要：
小型企业（0-19名员工）正在成为网络犯罪分子的诱人目标，但却难以实施大型企业经常部署的网络安全措施。小型企业迫切需要有效和合适的网络安全解决方案，因为它们雇用了相当大比例的劳动力。在本文中，我们考虑了目前研究或产品尚未解决的小企业网络安全挑战，通过澳大利亚镜头进行了情境化。我们还强调了有利于网络安全行动的小企业的一些独特特征。到目前为止，小型企业网络安全讨论的焦点很窄，并且在特定情况之外缺乏可重用性。我们的研究使用了来自多个学科的工业，政府和研究社区的全球证据。我们探讨了技术和非技术因素对小企业保护自己的能力产生负面影响，例如资源限制，组织流程成熟度和法律结构。我们的研究表明，一些小企业的特征，如敏捷性，大型队列规模和零碎的IT架构，可以提高网络安全性。我们的结论是，目前的研究在小企业网络安全的差距。此外，还需要开展法律和政策工作，帮助小企业提高网络复原力。
英文摘要：
Small businesses (0-19 employees) are becoming attractive targets for cyber-criminals, but struggle to implement cyber-security measures that large businesses routinely deploy. There is an urgent need for effective and suitable cyber-security solutions for small businesses as they employ a significant proportion of the workforce. In this paper, we consider the small business cyber-security challenges not currently addressed by research or products, contextualised via an Australian lens. We also highlight some unique characteristics of small businesses conducive to cyber-security actions. Small business cyber-security discussions to date have been narrow in focus and lack re-usability beyond specific circumstances. Our study uses global evidence from industry, government and research communities across multiple disciplines. We explore the technical and non-technical factors negatively impacting a small business' ability to safeguard itself, such as resource constraints, organisational process maturity, and legal structures. Our research shows that some small business characteristics, such as agility, large cohort size, and piecemeal IT architecture, could allow for increased cyber-security. We conclude that there is a gap in current research in small business cyber-security. In addition, legal and policy work are needed to help small businesses become cyber-resilient.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
