# Information Security and Cybersecurity Management: A Case Study with SMEs in Portugal
## 4 Results
### Results for Type 1 Auditing
\begin{table}
\begin{tabular}{l l r r r} \hline \multicolumn{1}{c}{**Dimension**} & \multicolumn{1}{c}{**0\% to 50\%**} & \multicolumn{1}{c}{**51\% to 75\%**} & \multicolumn{1}{c}{**76\% to 100\%**} \\ \hline \multirow{3}{*}{Classification} & Micro & 27.14\% & 8.10\% & 64.76\% \\  & Small & 23.06\% & 4.44\% & 72.50\% \\  & Medium & 14.55\% & 0.91\% & 84.55\% \\ \hline \multirow{3}{*}{Main Activity Sector} & Retail & 17.50\% & 2.92\% & 79.58\% \\  & Industry & 9.09\% & 2.73\% & 88.18\% \\  & Services & 35.15\% & 6.06\% & 58.79\% \\ \hline \multirow{3}{*}{Number of Employees} & \textless{}=10 & 25.33\% & 8.00\% & 66.67\% \\  & \textgreater{}10 \textless{}=20 & 22.59\% & 3.33\% & 74.07\% \\  & \textgreater{}20 \textless{}=60 & 22.08\% & 5.83\% & 72.08\% \\  & \textgreater{}60 & 15.00\% & 0.42\% & 84.58\% \\ \hline \multirow{9}{*}{Sub-activity Sector} & Ceramics & 0.00\% & 0.00\% & 100.00\% \\  & Construction & 26.67\% & 0.00\% & 73.33\% \\  & Consulting & 40.00\% & 8.33\% & 51.67\% \\  & Electrical & 0.00\% & 0.00\% & 0.00\% \\  & Engineering & 0.00\% & 0.00\% & 0.00\% \\  & Glass & 0.00\% & 0.00\% & 0.00\% \\  & IT & 23.33\% & 7.78\% & 68.89\% \\  & Machinery and Equipment & 13.33\% & 13.33\% & 73.33\% \\  & Maintenance Services & 0.00\% & 0.00\% & 0.00\% \\  & Metalworking & 0.00\% & 0.00\% & 100.00\% \\  & Minerals & 20.00\% & 0.00\% & 80.00\% \\  & Molds & 0.00\% & 0.00\% & 0.00\% \\  & Packaging & 13.33\% & 0.00\% & 86.67\% \\  & Plastics & 0.00\% & 3.33\% & 96.67\% \\  & Primary Sector & 0.00\% & 0.00\% & 100.00\% \\  & Retail & 16.67\% & 5.00\% & 78.33\% \\  & Temporary Work & 66.67\% & 0.00\% & 33.33\% \\  & Tires & 13.33\% & 6.67\% & 80.00\% \\  & Trade Shows and Congresses & 60.00\% & 0.00\% & 40.00\% \\  & Transports & 0.00\% & 0.00\% & 0.00\% \\  & Wholesales & 16.67\% & 2.86\% & 80.48\% \\ \hline \multirow{3}{*}{Company Age} & \textless{}=17 & 21.82\% & 4.24\% & 73.94\% \\  & \textgreater{}17 \textless{}=26 & 12.50\% & 2.50\% & 85.00\% \\  & \textgreater{}26 \textless{}=36 & 33.33\% & 5.42\% & 61.25\% \\  & \textgreater{}36 & 10.00\% & 2.86\% & 87.14\% \\ \hline \multirow{3}{*}{Revenue} & \textless{}=2 M & 25.45\% & 6.67\% & 67.88\% \\  & \textgreater{}2 M \textless{}=5.5 M & 26.30\% & 3.70\% & 70.00\% \\ \cline{1-1}  & \textgreater{}5.5 M \textless{}=10 M & 10.00\% & 2.22\% & 87.78\% \\ \cline{1-1}  & \textgreater{}10 M & 11.43\% & 0.95\% & 87.62\% \\ \hline \multirow{3}{*}{Exports as \% of Revenue} & \textless{}=2.5\% & 21.19\% & 5.48\% & 73.33\% \\ \cline{1-1}  & \textgreater{}2.5\% \textless{}=25\% & 19.05\% & 1.43\% & 79.52\% \\ \cline{1-1}  & \textgreater{}25\% \textless{}=60\% & 30.00\% & 6.67\% & 63.33\% \\ \cline{1-1}  & \textgreater{}60\% & 11.67\% & 0.00\% & 88.33\% \\ \hline \end{tabular}
\end{table} 
Table 2: Type 1—Acceptance percentage intervals of the controls in the predefined dimensions. compliance results, however by two distinct reasons. Regarding Section 10.1, the reasons are related to the technical complexity in implementing and validating cryptographic controls. In Section 12.1, it is emphasised the difficulty in specifying and validating strict operational and responsibility procedures, in the scope of SMEs.