Applicability Evaluation of a Managed Cybersecurity Solution as a Service for Micro, Small and Medium-Sized Enterprises (MSMEs) in Honduras

Abstract

This research evaluates the applicability of a managed cybersecurity solution for MSMEs in Honduras in response to the growing incidence of cyberattacks affecting the digital economy. A mixed applied, exploratory, and descriptive approach was adopted, collecting data through 389 surveys administered to MSMEs and interviews with subject-matter experts. The analysis was grounded in change management theory, strategic planning principles, international cybersecurity frameworks (ISO 27001, NIST CSF, and CIS Controls), and the PMBOK good practices guide. The findings reveal a low level of digital maturity: 53.21% of MSMEs lack formal risk management policies, and 31.88% do not possess legally licensed basic software. Nevertheless, 83.54% expressed willingness to invest in cybersecurity solutions. As a result, this study proposes an original five-phase, tiered model designed to externalize technical complexity and ensure operational continuity, representing the most efficient pathway to strengthen business resilience against current cybersecurity risks.