The added value of detection tools for the digital resilience of entrepreneurs

To answer the main research question, the following sub-questions have been formulated:

Research questions from a technical perspective:

1. What types of detection tools are available (for SMEs), and how effective are they in identifying cyber threats?
2. Which criteria are relevant for entrepreneurs when selecting a detection tool for use in SMEs?
3. How can the impact of a cyber threat be formulated and interpreted in such a way that the target group clearly understands what is happening?

Research questions from a human perspective:

1. Which motivating and inhibiting factors do SMEs experience when using detection tools?
2. To what extent does the use of detection tools change SMEs’ risk perception?
3. To what extent do detection tools influence SMEs’ attitudes and behaviour with regard to digital resilience?

Research questions from an organisational perspective:

1. What does the legal and ethical cybersecurity landscape look like for SMEs?
2. What are the responsibilities associated with the use of detection tools for SMEs, and how do these responsibilities shift when such tools identify threats?
3. How is liability arranged in relation to the use of detection tools by SMEs, and how does this liability shift when such tools identify threats?

This project provides practice-oriented insights into whether and how detection tools contribute to strengthening the digital resilience of entrepreneurs in smaller SMEs (10–50 employees). Through a qualitative pilot involving ten companies, well-founded insights are generated into the technical functioning, perceived value and behavioural effects of these tools.

Specifically, we expect the following results:

• Technical insight into which types of detection tools are suitable and feasible for smaller SMEs, which threats they detect, and to what extent they demonstrably contribute to the faster identification and mitigation of cyber incidents.

• Insight into entrepreneurs’ behaviour and awareness: how detection tools influence their risk perception, whether they prompt entrepreneurs to take action, and which motivating and inhibiting factors play a role in their use and adoption.

• Clarity on legal and organisational aspects, including responsibilities and liability in the use of detection tools, translated into a practical and accessible framework for action for entrepreneurs.

• Practical tools and recommendations for SMEs, market parties and government on the effective and sustainable use of detection tools, including conditions for scaling up.

In addition, the project will deliver concrete outputs, such as a research report, a factsheet and a legal infographic. Together, these results form a solid starting point for follow-up research and larger-scale application, with the overarching outcome being an enhanced action perspective and increased digital resilience of smaller SMEs.

The impact of this project lies in strengthening the digital resilience of smaller SMEs and clarifying roles and responsibilities within the Dutch cybersecurity ecosystem. By providing practice-oriented insight into the functioning and value of detection tools, the project helps bridge the gap between abstract cyber threats and concrete courses of action for entrepreneurs.

For SME entrepreneurs, the project leads to greater awareness of digital risks, improved insight into their own digital resilience, and more concrete options for preventing or mitigating cyber incidents. Entrepreneurs gain a clearer understanding not only of which measures are effective, but also of their legal responsibilities. This enhances their self-reliance, reduces uncertainty in decision-making, and strengthens their ability to respond to digital threats in a timely and effective manner.

For market parties (such as IT and cybersecurity service providers), the project provides insight into the needs, limitations and decision-making criteria of smaller SMEs. This enables better alignment of detection tools and related services with this target group, as well as greater transparency regarding roles, responsibilities and liability. In doing so, the project contributes to more professional collaboration and increased trust between SMEs and market parties.

For government and policymakers, the project generates valuable knowledge on how digital resilience can be effectively stimulated among SMEs that are not subject to NIS2 requirements. The results support policy development, strengthen public–private collaboration, and contribute to a more realistic and workable model of shared responsibility for cybersecurity.

In the longer term, the project contributes to a structural improvement in the digital resilience of SMEs, a reduction in the societal and economic impact of cyber incidents, and better alignment between policy, market and entrepreneurial practice. As such, this project forms an important building block for scaling up and achieving sustainable impact within regional and national resilience initiatives.

The aim of this project is to gain insight into whether detection tools genuinely help SME entrepreneurs to improve their digital resilience. We examine whether these tools make cyber threats visible, prompt entrepreneurs to strengthen their digital security, and contribute to improved behaviour and awareness regarding digital safety.

In doing so, we look not only at the technology, but also at human behaviour, as well as organisational, legal and ethical responsibilities.