How to design a method for measuring IT security in micro enterprises for IT security level measuring? A literature analysis

摘要

The author focuses on the issue of IT security for micro enterprises, specifically enterprises carrying out manual work considering German law and industrial requirements, with the aim of developing a self-implemented IT security assessment designed to identify threats and aid in increasing their security level. This is necessary because micro-enterprises contributing to the national economy have limited resources, preventing these enterprises from employing secure IT solutions seen in their larger counterparts. This insecurity can threaten innovative micro-enterprises as sensitive data may become accessible to malevolent parties. A systematic literature analysis is also carried out in this work to define requirements for a suitable assessment method. The solution were defined under attention of the German law and industrial requirements.