## 6 Interview Results and Defined Research Questions
### Correlation between the IT Qualification of Decision Maker and the IT Security Solution Presented  
During the processing of the interview results, the authors sought answers to the following questions (research question, RQ):  
* RQ1: Is there a significant correlation between the IT decision makers of the companies in the field of IT, their level of education and what IT security solutions are present in the network?  
The company-specific data include the number of servers, endpoints and workstations (which later in the article is \"number of computers\", NoC) in the IT infrastructure and the level (shown in Figure 4), presence or absence of IT skills of the IT decision maker.  
As it can be seen in Figure 5, the examined companies have different levels of protection.  
Table 1 presents information on the companies' physical intrusion detection and presence of the physical firewalls on their networks. The results show that 67% of them have physical protection over their locations, but only 41% of the companies have a firewall on their computer network. A higher proportion of companies on the network have firewalls installed where the decision maker does not have an IT degree. This statement  
Figure 4: IT infrastructure properties for examined companies.  
proves that the hardware protection of networks and IT infrastructures is not closely related to the IT skills of the decision maker.  
The next issue is concerned with the overall headcount of the company and the number of people working with sensitive data within the firm. Figure 6 presents the number of employees at the examined companies, and especially the number of employees working with sensitive data (e.g., employees' personal data, contracts, salary data). With the use of quick classification, the companies were divided into four clusters, based on their manpower. This classification is equal to the classification based on the number of computers at the company.  
The examined companies include companies with 2-250 employees, which is typical among small- and medium-sized companies. The number of companies with a similar number of employees in Hungary today (micro-sized enterprises that employ up to nine people make up the majority of SMEs in Hungary) is approximately 549,000, and the estimated number of small and medium-sized enterprises (SMEs) in the European Union was approximately 25.1 million in 2018 [27; 28].  
\begin{table}
\begin{tabular}{c c c c c} \hline \hline \multirow{2}{*}{**Resp. IT Grade/Basic Protection Level**} & **No Physical** & **Physical Intrusion** & **Physical Firewall** & **Physical Firewall** \\  & **Intrusion Protection** & **Protection Presented** & **Not Presented** & **Presented** \\ \hline
**Higher grade, specialized** & 2 & 5 & 4 & 3 \\
**Higher grade, not specialized** & 4 & 13 & 8 & 9 \\
**Secondary grade, specialized** & 1 & 1 & 1 & 1 \\
**Secondary grade, not specialized** & 8 & 12 & 14 & 6 \\ \hline
**Number of companies** & 15 & 31 & 27 & 19 \\ \hline Percent(\%) of 46 & 33\% & 67\% & 59\% & 41\% \\ \hline \hline \end{tabular}
\end{table}
Table 1: Relation between IT grade of decision maker and presented protection level of the company.  
Figure 5: Correlation between the companies’ decision makers’ IT skills and the presented security state.  
As mentioned earlier, the survey cannot be considered as a representative sample due to the small number of participants, however, it covers a wide range of SMEs, as participants have similar characteristics, so the results show a realistic picture.  
Since all the companies surveyed carry out online activities in the performance of their administrative tasks, the next research question focuses on virus protection solutions.