(Note: This report was originally produced in German. This case study is based on an English interpretation of the findings.)

The challenge

For small and medium-sized businesses, cybersecurity is often seen as complex, confusing and difficult to implement.

Kaspersky wanted to understand:

• What’s actually holding SMEs back
• Where the biggest gaps exist between strategy and execution
• What businesses truly need from cybersecurity providers

The approach

Arlington Research conducted a study of 880 cybersecurity decision-makers across Europe and Africa, focusing on organisations with fewer than 500 employees

The research explored:

• Strategy maturity and implementation gaps
• Resource, knowledge and staffing challenges
• Relationships between leadership, IT and external partners
• Real-world frustrations and unmet needs

The insight 

The findings revealed a stark reality: many SMEs are operating without effective protection.

• Only 29% have a fully implemented strategy
• 22% lack sufficient skilled personnel
• 29% say managing threats is a full-time job
• 21% are overwhelmed by too many system alerts

Beyond strategy, a deeper issue emerged: a disconnect across the organisation:

• Leadership often underestimates cybersecurity importance
• IT teams are overstretched and under-resourced
• External partners are not yet seen as strategic advisors

The outcome

Arlington helped Kaspersky shape a powerful narrative around: From confusion to clarity

Positioning cybersecurity as:

• Practical, not theoretical
• Understandable, not jargon-heavy
• A shared business priority and not just an IT issue

The research also highlighted a key opportunity: the shift from vendor to trusted partner.

The impact

The research enabled Kaspersky to:

• Surface real-world frustrations and unmet needs in SMEs
• Strengthen positioning around simplicity, trust and expertise
• Highlight the importance of long-term, strategic partnerships
• Provide clear direction for improving cybersecurity adoption

By cutting through complexity, Kaspersky is helping SMEs move from uncertainty to confidence in cybersecurity.

Download the report