THE CHALLENGES IN PROTECTING SENSITIVE INFORMATION IN SMALL AND MEDIUM-SIZED ENTERPRISES AGAINST CYBERATTACKS

Abstract

Small and medium-sized enterprises (SMEs) are fundamental pillars of the global economy; however, their increasing digitalization, accelerated by the pandemic, makes them prime targets for cyberattacks. This article aims to investigate the main challenges and vulnerabilities SMEs face in protecting their sensitive information. The research, qualitative in nature and based on an extensive literature review, analyzes how factors such as financial resource limitations, the absence of structured security policies, and a lack of employee awareness — aggravated by the remote work scenario — contribute to digital risk exposure. The results show that the most recurrent threats, such as phishing and ransomware, primarily exploit the human factor. It is concluded that the effective mitigation of these risks depends not only on technology investments but on a robust security culture, which includes continuous digital education (beyond standard training), clear policies, and compliance with legal regulations, such as the General Data Protection Law (LGPD). The adoption of these integrated strategies is crucial to ensure the resilience and sustainability of SMEs in the contemporary digital landscape.