F.A. Arranz, Carlos ORCID: https://orcid.org/0000-0002-6866-0684, Arroyabe, Marta F ORCID: https://orcid.org/0000-0003-3223-0268 and Fernandez de Arroyabe, Ignacio (2026) When protect ion enables innovation: cybersecurity and digitalization in SMEs through the lens of protection motivation theory. Journal of Cybersecurity, 12 (1). pp. 1-16. ISSN 2057-2085 (Print), 2057-2093 (Online) (doi:10.1093/cybsec/tyag034)

Preview

PDF (Open Access Article) 54806 ARRANZ_When_Protect_Ion_Enables_Innovation_(OA)_2026.pdf - Published Version Available under License Creative Commons Attribution. Download (1MB) | Preview

Abstract

This study examines the relationship between cybersecurity and the digitalization of small and medium-sized enterprises (SMEs). Digitalization is conceptualized as a gradual, path-dependent process in which firms adopt digital technologies over time, increasing both connectivity and exposure to cyber threats. Drawing on protection motivation theory (PMT), we interpret digitalization as a form of motivated protective behavior shaped by two cognitive mechanisms: threat appraisal and coping appraisal. To investigate this relationship, we conducted a survey of 239 UK-based SMEs in 2022 and analyzed the data using regression models and artificial neural networks (ANN). The findings show that cybersecurity practices are significantly and positively associated with digitalization, but their association varies depending on SMEs’ digital maturity. At early stages, digitalization is driven primarily by perceived cyber risk, whereas at more advanced stages, established cybersecurity routines and standards act as enablers of further digital adoption. This study contributes to the literature by extending PMT to the organizational level and demonstrating that cybersecurity is not merely a constraint or protective add-on, but a central mechanism shaping digital transformation in SMEs.

Item Type:	Article
Uncontrolled Keywords:	cybersecurity, digitalization, digital transformation, small and medium-sized enterprises, SMEs, protection motivation theory, threat appraisal, coping appraisal, cybersecurity management, cybersecurity standards, digital maturity, technology adoption, cyber resilience, artificial neural networks, machine learning
Subjects:	H Social Sciences > H Social Sciences (General) H Social Sciences > HD Industries. Land use. Labor > HD28 Management. Industrial Management Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Faculty / School / Research Centre / Research Group:	Greenwich Business School > Networks and Urban Systems Centre (NUSC) Greenwich Business School > Networks and Urban Systems Centre (NUSC) > Connected Cities Research Group (CCRG) Greenwich Business School Greenwich Business School > School of Business, Operations and Strategy
Last Modified:	21 Oct 2026 15:36
URI:	https://gala.gre.ac.uk/id/eprint/54806

Actions (login required)

View Item

Downloads