For this study, INTECO has chosen a combination of qualitative and quantitative techniques with the aim of solving the methodological problems which, regarding the diagnosis and metrics of the information security, occur in the field of SMEs.

In this sense, INTECO has managed to get the opinion of a wide sample of companies: 265 SMEs have been interviewed, whose answers have been contrasted with the opinion of 282 large companies. A systemized study has been carried out on the existing products and services currently offered to SMEs by the security industry. Also, the evaluation of 42 product advisor experts or providers of security solutions for SMEs, who therefore know their problems and needs (manufacturers, service providers, distributors, public sector, business associations, non-profit organizations linked to the promotion of security, important professionals in the academic field), has been synthesized.

In this way, INTECO has been able to identify the security incidences that affect SMEs and their deficiencies and needs, in order to propose a series of recommendations aimed at the security industry and the public administrations.

Overall report available in Spanish and partial report available in Catalan, Basque and Galician.