Comparison of Security Frameworks for SMEs

Small to medium-sized enterprises (SMEs) represent about 90% of businesses and more than 50% of employment in the world. The amount of SME’s volume in Turkey is larger than the volume in the rest of the world. Besides, security challenges appear and become more important with the improvement of online business opportunities even for SMEs. SMEs need a security pathway to progress in a security landscape. In this paper, the IT audit of the Turkish Court of Accounts (TCA), the Information and Communication Security Guide (ICSG), ISO 27001, and NIST IR 7621 are compared. As a result, the paper aims the most useful framework for SMEs with minimal technical knowledge and cost. Plenty of studies focus on ISO 27001 and NIST IR 7621. However, there is limited focus on the IT audit of TCA and ICSG. By exemplifying TCA and ICSG, the paper is trying to compare frameworks for SMEs.