Effectiveness and Promotion of Cybersecurity Awareness among Small and Micro-Medium Sized Enterprises (SMEs) and Consumers Survival in Kogi State.

Abstract

Cybersecurity awareness is crucial for safeguarding small and medium-sized 
enterprises (SMEs) and individual consumers from escalating cyber threats. This 
study evaluates cybersecurity awareness among SMEs and end-users in Kogi State, 
Nigeria, with a focus on their understanding of cyberattacks, attitudes towards 
cybersecurity, and awareness of government initiatives. A descriptive survey 
methodology was employed, involving 500 participants, achieving a 91% response 
rate. The results indicate a generally high level of cybersecurity awareness, with 65% 
of respondents identifying as "Very Aware" of cybercrime. However, significant 
knowledge gaps persist, particularly in awareness of phishing (45.1% "Very Aware") 
and cyberbullying (59% "Not Aware"). The study also reveals mixed attitudes and 
behaviors towards cybersecurity. While 39.5% of respondents expressed confidence 
in identifying cyber threats, only 20.9% acknowledged their personal responsibility 
in maintaining cybersecurity. Furthermore, awareness of government initiatives 
was notably low, with 44% of participants unaware of the National Cybersecurity 
Policy and 55% unfamiliar with the Nigeria Computer Emergency Response Team 
(ngCERT). These findings highlight critical areas for improvement, underscoring the 
need for targeted educational interventions and awareness campaigns. 
Recommendations include tailored training programs to address specific knowledge 
gaps, improved communication strategies to enhance understanding of 
government initiatives, and behavioral change programs to foster a sense of 
personal accountability among SMEs and consumers. Collaborative efforts involving 
policymakers, educators, and cybersecurity professionals are essential to building a 
resilient digital environment in Kogi State. By addressing the identified gaps, this 
study contributes to the broader goal of strengthening cybersecurity resilience and 
mitigating the risks posed by evolving cyber threats.