Preparing for GDPR: helping EU SMEs to manage data breaches

Keshav Kapoor, Karen Renaud, Jacqueline Archibald

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Citations (Scopus)
1034 Downloads (Pure)


Over the last decade, the number of small and medium (SME) businesses suffering data breaches has risen at an alarming rate. Knowing how to respond to inevitable data breaches is critically important. A number of guidelines exist to advise organisations on the steps necessary to ensure an effective incident response. These guidelines tend to be unsuitable for SMEs, who generally have limited resources to expend on security and incident responses. Qualitative interviews were conducted with SMEs to probe current data breach response practice and to gather best-practice advice from SMEs themselves. The interviews revealed no widespread de facto approach, with a variety of practices being reported. A number of prevalent unhelpful-practice themes emerged from the responses, which we propose specific mitigation techniques to address. We therefore propose a SME-specific incident response framework that is simple yet powerful enough to inform and guide SME responses to data breach incidents.
Original languageEnglish
Title of host publicationAISB 2018
Subtitle of host publicationSymposium on Digital Behaviour Interventions for Cyber-Security
PublisherSociety for the Study of Artificial Intelligence and Simulation for Behaviour (AISB)
Number of pages8
Publication statusPublished - 5 Apr 2018
Event2018 AISB Convention: Symposium on Digital Behaviour Intervention for Cyber Security - University of Liverpool, Liverpool, United Kingdom
Duration: 4 Apr 20186 Apr 2018


Other2018 AISB Convention
Country/TerritoryUnited Kingdom
Internet address


Dive into the research topics of 'Preparing for GDPR: helping EU SMEs to manage data breaches'. Together they form a unique fingerprint.

Cite this