Cybersecurity Challenges in Nepalese SMEs: The Missing Role of Executive Leadership

Abstract

Cybersecurity risks are becoming more significant for small and medium-sized businesses (SMEs) in today's fast-paced, digitally driven corporate climate. Examining the cybersecurity hazards encountered by small and medium-sized enterprises (SMEs) in Nepal and the part played by executive leadership in mitigating these risks is the focus of this research. Using a combination of quantitative surveys and qualitative interviews, the research examines a range of SME industries. Cyber events have affected 68% of Nepalese SMEs, according to the results; however, the majority of these businesses do not have any kind of written policy, training, or strategic supervision. Leadership is a key factor in resilience, as indicated by a somewhat favorable connection (r = 0.52) between executive participation and organizational cybersecurity preparation. Core hurdles to effective cybersecurity governance, according to the report, include digital threat underestimates, low cyber knowledge, and broad misunderstandings among SME leaders. Key preparedness measures reveal that Nepalese SMEs are behind their worldwide peers, according to the comparative research. To enhance cybersecurity in Nepal's SME ecosystem, the report finishes by stressing the importance of frameworks based around leadership, policy recommendations, and capacity-building programs.