Managing Digital Risk in Micro and Small Businesses
An Assessment of Cybersecurity Awareness and Practices in Gombe State, Nigeria
Main Article Content
Abstract
This study examines cybersecurity awareness and practices among micro and small business owners in Gombe State, Nigeria, highlighting their relevance to effective digital risk management. A descriptive survey design was adopted, and 385 respondents were selected through a multistage sampling technique based on Cochran’s sample size formula. Data were collected using a structured questionnaire validated by three experts from Gombe State University, with a Cronbach’s alpha reliability coefficient of 0.87. Data were analyzed using mean, standard deviation, and simple linear regression at the 0.05 level of significance. The findings showed a moderate level of cybersecurity awareness (x̄= 3.35, σ = 1.35) and cybersecurity practices (x̄= 3.01, σ = 1.32). Cybersecurity awareness had a positive and statistically significant influence on cybersecurity practices (β = .668, p < .001), explaining 44.6% of the variation in cybersecurity practices. The study concluded that improving cybersecurity awareness is essential for strengthening digital risk management among micro and small business owners. It recommended regular cybersecurity awareness programmes by relevant agencies, including the National Information Technology Development Agency (NITDA), Small and Medium Enterprises Development Agency of Nigeria (SMEDAN), National Orientation Agency (NOA), Nigeria Computer Society (NCS), and other relevant organizations. It also recommended integrating cybersecurity awareness into business support programmes delivered by SMEDAN, Industrial Training Fund (ITF), and educational institutions to strengthen the digital resilience of micro and small business owners in Gombe State.
Article Details
Copyright (c) 2026 Aminu Usman, Ezekiel Hassan , Aisha Mustapha Sharif (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
Ezekiel Hassan , Federal College of Horticulture Dadinkowa, Gombe State, Nigeria.
Lecturer, Department of Cooperative Economics and Management, Federal College of Horticulture Dadinkowa, Gombe State, Nigeria
Aisha Mustapha Sharif, Federal College of Horticulture Dadinkowa, Gombe State, Nigeria.
Lecturer, Department of Cooperative Economics and Management, Federal College of Horticulture Dadinkowa, Gombe State, Nigeria.
Adelusi, B. S., Ojika, F. U., & Uzoka, A. C. (2022). Advances in cybersecurity strategy and cloud infrastructure protection for SMEs in emerging markets. Journal of Frontiers in Multidisciplinary Research, 3(1), 467–482. https://doi.org/10.54660/JFMR.2022.3.1.467-482 DOI: https://doi.org/10.54660/.JFMR.2022.3.1.467-482
Alluhayb, A. I. M., Rehman, S. U., & Janjua, N. (2025). Cyber hygiene awareness and practices among Saudi micro and small enterprises. In 2025 IEEE International Conference on E-Business Engineering (ICEBE) (pp. 292–297). IEEE. https://doi.org/10.1109/ICEBE68123.2025.00053 DOI: https://doi.org/10.1109/ICEBE68123.2025.00053
Al-Somali, S. A., Saqr, R. R., Asiri, A. M., & Al-Somali, N. A. (2024). Organizational cybersecurity systems and sustainable business performance of small and medium enterprises (SMEs): The mediating and moderating role of cybersecurity resilience and organizational culture. Sustainability, 16(5), Article 1880. https://doi.org/10.3390/su16051880 DOI: https://doi.org/10.3390/su16051880
Bada, M., & Nurse, J. R. C. (2019). Developing cybersecurity education and awareness programmes for small- and medium-sized enterprises (SMEs). Information & Computer Security, 27(3), 393–410. https://doi.org/10.1108/ICS-07-2018-0080 DOI: https://doi.org/10.1108/ICS-07-2018-0080
Cartwright, A., Cartwright, E., & Edun, S. (2023). Cascading information on best practice: Cyber security risk management in UK micro and small businesses and the role of IT companies. Computers & Security, 131, Article 103288. https://doi.org/10.1016/j.cose.2023.103288 DOI: https://doi.org/10.1016/j.cose.2023.103288
Dagada, R., & Saar, G. (2025). Bridging the cybersecurity gap: Tailored strategies for Zambia's SMEs. Southern African Journal of Security, 3, Article 15713. https://doi.org/10.25159/3005-4222/15713 DOI: https://doi.org/10.25159/3005-4222/15713
Fagbule, O. (2023). Cyber security training in small to medium-sized enterprises (SMEs): Exploring organisation culture and employee training needs (Doctoral thesis). Bournemouth University.
Falch, M., Olesen, H., Skouby, K. E., Tadayoni, R., & Williams, I. (2022). Cybersecurity strategies for SMEs in the Nordic Baltic region. Journal of Cyber Security and Mobility, 11(6), 727–753. https://doi.org/10.13052/jcsm2245-1439.1161 DOI: https://doi.org/10.13052/jcsm2245-1439.1161
Kabanda, S., Tanner, M., & Kent, C. (2018). Exploring SME cybersecurity practices in developing countries. Journal of Organizational Computing and Electronic Commerce, 28(3), 269–282. https://doi.org/10.1080/10919392.2018.1484598 DOI: https://doi.org/10.1080/10919392.2018.1484598
Kariuki, P., Ofusori, L. O., & Subramaniam, P. R. (2023). Cybersecurity threats and vulnerabilities experienced by small-scale African migrant traders in Southern Africa. Security Journal. https://doi.org/10.1057/s41284-023-00378-1 DOI: https://doi.org/10.1057/s41284-023-00378-1
Khoza, N. G., & Hoeyi, P. (2025). Cyber security preparedness among SMMEs in the digital economy. African Journal of Innovation and Entrepreneurship, 4(3), 71–96. https://doi.org/10.31920/2753-314X/2025/v4n3a4 DOI: https://doi.org/10.31920/2753-314X/2025/v4n3a4
Lejaka, T. K., Da Veiga, A., & Loock, M. (2019). Cyber security awareness for small, medium and micro enterprises (SMMEs) in South Africa. In 2019 Conference on Information Communications Technology and Society (ICTAS) (pp. 1–6). IEEE. https://doi.org/10.1109/ICTAS.2019.8703609 DOI: https://doi.org/10.1109/ICTAS.2019.8703609
Masselink, M. (2025). From awareness to action: The role of cybersecurity awareness in investment behaviour among SME retailers [Master’s thesis, Radboud University]. Radboud University Repository. https://theses.ubn.nl/handle/123456789/19180
Mitrofan, A. L., Cruceru, E. V., & Barbu, A. (2020). Determining the main causes that lead to cybersecurity risks in SMEs. Business Excellence and Management, 10(4), 38–48. DOI: https://doi.org/10.24818/beman/2020.10.4-03
Moreno, D. E., Torres, R., Red, E., Hipolito, K. A., Maristela, M. N., & Ramos, B. J. (2025). Cybersecurity perception and online payment adoption among micro and small enterprises using the Theory of Planned Behavior. In Proceedings of the 16th International Conference on E-Business, Management and Economics (pp. 62–68). https://doi.org/10.1145/3760557.3760568 DOI: https://doi.org/10.1145/3760557.3760568
Ncubukezi, T., Mwansa, L., & Rocaries, F. (2020). A review of the current cyber hygiene in small and medium-sized businesses. In 2020 15th International Conference for Internet Technology and Secured Transactions (ICITST) (pp. 1–6). IEEE. https://doi.org/10.23919/ICITST51030.2020.9351339 DOI: https://doi.org/10.23919/ICITST51030.2020.9351339
Rawindaran, N., Jayal, A., & Prakash, E. (2021). Machine learning cybersecurity adoption in small and medium enterprises in developed countries. Computers, 10(11), Article 150. https://doi.org/10.3390/computers10110150 DOI: https://doi.org/10.3390/computers10110150
Rogers, R. W. (1975). A protection motivation theory of fear appeals and attitude change. The Journal of Psychology, 91(1), 93–114. DOI: https://doi.org/10.1080/00223980.1975.9915803
Rogers, R. W. (1983). Cognitive and physiological processes in fear appeals and attitude change: A revised theory of protection motivation. In Social Psychophysiology (pp. 153–176).
Tiwari, A., Biswas, B., Islam, A., Sarkar, I., Saha, S., Alam, M. Z., & Farabi, S. F. (2025). Implementing robust cybersecurity strategies to protect small businesses from potential threats in the USA. Journal of Ecohumanism, 4(3), 322–333. DOI: https://doi.org/10.62754/joe.v4i3.6644
Udofot, M., & Topchyan, R. (2020). Factors related to small business cyber-attack protection in the United States. International Journal of Cyber-Security and Digital Forensics, 9(1), 12–25. DOI: https://doi.org/10.17781/P002644
Article Sidebar
