Assessment of cybersecurity investment and customer trust in SMEs of South Africa
-
DOIhttp://dx.doi.org/10.21511/ppm.24(3).2026.06
-
Article InfoVolume 24 2026, Issue #3, pp. 84-94
- 27 Views
-
3 Downloads
This work is licensed under a
Creative Commons Attribution 4.0 International License
Type of the article: Research Article
Abstract
Small and medium-sized enterprises (SMEs) are a key driver of employment and economic growth in South Africa, yet their increasing reliance on digital technologies has significantly increased exposure to cyber threats that can undermine customer trust and business sustainability. However, empirical evidence on how cybersecurity investment influences customer trust among SMEs in South Africa remains limited. This study aims to examine the relationship between cybersecurity investment and customer trust among SMEs operating in the retail, hospitality, e-commerce, professional services, and small-scale manufacturing sectors in KwaZulu-Natal, South Africa. These sectors were selected because of their high dependence on digital transactions and customer data processing. A quantitative research design was adopted using primary data collected through a structured questionnaire administered to SME owners and senior managers between 2024 and 2025. A total of 375 valid responses were analyzed using Pearson’s correlation and linear regression techniques. The results reveal a statistically significant positive relationship between cybersecurity investment and customer trust (r = 0.312, p < 0.001). Regression analysis further indicates that cybersecurity investment explains 9.7% of the variance in customer trust (R2 = 0.097, p < 0.05). SMEs that implemented secure digital payment systems, data protection measures, employee cyber-awareness training, and compliance with the Protection of Personal Information Act (POPIA) reported higher levels of customer confidence and perceived business credibility. These findings highlight that strategic investment in cybersecurity contributes to strengthening customer trust and improving the competitiveness and resilience of digitally enabled SMEs in South Africa.
- Keywords
-
JEL Classification (Paper profile tab)L26, K24
-
References41
-
Tables3
-
Figures0
-
- Table 1. Descriptive statistics of composite constructs
- Table 2. Correlation between cybersecurity investment and customer trust in South African SMEs
- Table 3. Linear regression – Cybersecurity investment and customer trust
-
- Adelusi, B. S., Ojika, F. U., & Uzoka, A. C. (2022). Advances in cybersecurity strategy and cloud infrastructure protection for SMEs in emerging markets. Journal of Frontiers in Multidisciplinary Research, 3(1), 467-482.
- Alshaikh, M. (2020). Developing cybersecurity culture to influence employee behavior: A practice perspective. Computers & Security, 98, Article 102003.
- Anukoonwattaka, W., Romao, P., Bhogal, P., Bentze, T., & Lobo, R. S. (2021). Digital economy integration in Asia and the Pacific: Insights from DigiSRII 1.0 (ARTNeT Working Paper Series No. 208). Asia-Pacific Research and Training Network on Trade.
- Awad, J. A., & Martín-Rojas, R. (2024). Digital transformation influences organisational resilience through organisational learning and innovation. Journal of Innovation and Entrepreneurship, 13(1), Article 69.
- Bada, A., Sasse, M. A., & Nurse, J. R. C. (2019). Cyber security awareness campaigns: Why do they fail to change behaviour? Cryptography and Security.
- Bada, M., & Nurse, J. R. C. (2019). Developing cybersecurity education and awareness programmes for small- and medium-sized enterprises (SMEs). Information & Computer Security, 27(3), 393-410.
- Baskerville, R., Spagnoletti, P., & Kim, J. (2014). Incident-centered information security: Managing a strategic balance between prevention and response. Information & Management, 51(1), 138-151.
- Bélanger, F., Hiller, J. S., & Smith, W. J. (2002). Trustworthiness in electronic commerce: The role of privacy, security, and site attributes. The Journal of Strategic Information Systems, 11(3-4), 245-270.
- Brodin, M. (2019). A framework for GDPR compliance for small- and medium-sized enterprises. European Journal for Security Research, 4(2), 243-264.
- Cao, C., & Huang, S. (2022). How can SMEs boost trust through third-party means? Tracing the multidimensional institutional basis of online trust. IEEE Access, 10, 127149-127167.
- Cegarra-Navarro, J. G., Soto-Acosta, P., & Wensley, A. (2014). Structured knowledge processes and firm performance: The role of organizational agility. Journal of Business Research, 69(5), 1544-1549.
- Cheng, L., & Nasirov, J. (2025). Promoting trust and security in the digital domain: A discourse analysis of legal constructs. International Journal of Legal Discourse, 10(1), 13-34.
- Cochran, W. G. (1977). Sampling techniques (3rd ed.). John Wiley & Sons.
- Connelly, B. L., Certo, S. T., Ireland, R. D., & Reutzel, C. R. (2011). Signaling theory: A review and assessment. Journal of Management, 37(1), 39-67.
- Council for Scientific and Industrial Research. (2024, October 8). CSIR issues national survey results on the state of cybersecurity in South Africa.
- Creswell, J. W. (2014). Research design: Qualitative, quantitative, and mixed methods approaches (4th ed.). SAGE Publications.
- Dillman, D. A., Smyth, J. D., & Christian, L. M. (2014). Internet, phone, mail, and mixed-mode surveys: The tailored design method (4th ed.). John Wiley & Sons.
- Flores, W. R., Holm, H., Nohlberg, M., & Ekstedt, M. (2015). Investigating personal determinants of phishing and the effect of national culture. Information & Computer Security, 23(2), 178-199.
- Hsu, C., Lee, J. N., & Straub, D. W. (2012). Institutional influences on information systems security innovations. Information Systems Research, 23(3), 918-939.
- Jones, C. A. M. (2026). The foundation of digital trust. In Advancing IT interoperability and trade facilitation in Southeast Asia (pp. 295-324). Singapore: Palgrave Macmillan.
- Kabanda, S., Tanner, M., & Kent, C. (2018). Exploring SME cybersecurity practices in developing countries. Journal of Organizational Computing and Electronic Commerce, 28(3), 269-282.
- Karadağ, H., Sahin, F., & Matemane, R. (2023). Disentangling the innovation orientation, intellectual capital, and dynamic innovation capability relationships in emerging economy start-ups. International Journal of Innovation Management, 27(7-8), Article 2350039.
- Khoza, N. G., & Hoeyi, P. (2025). Cyber security preparedness among SMMEs in the digital economy. African Journal of Innovation & Entrepreneurship, 4(3), 71-96.
- Kshetri, N. (2019). Cybercrime and cybersecurity in Africa. Journal of Global Information Technology Management, 22(2), 77-81.
- Likert, R. (1932). A technique for the measurement of attitudes. Archives of Psychology, 22(140), 1-55.
- Maharaj, A., & Msomi, T. S. (2026). The effect of strategic planning on operational efficiency in South African SMEs. Problems and Perspectives in Management, 24(1), 578-588.
- Mofokeng, T. E. (2023). Antecedents of trust and customer loyalty in online shopping: The moderating effects of online shopping experience and e-shopping spending. Heliyon, 9(5), Article e16182.
- Msomi, T. S., & Ngcobo, N. G. (2023). Monetary access and survival of small and medium-sized enterprises in South Africa post-COVID-19 era. Problems and Perspectives in Management, 21(3), 351-360.
- Msomi, T. S., & Olarewaju, O. M. (2021). Does financial literacy and access to finance impact the viability of small- and medium-sized enterprises in South Africa? In Proceedings of the 6th International Conference on Governance and Accountability (ICGA 2021) (pp. 9-13).
- Noutchie, S. C. O. (2025). Unlocking SME potential through digital platforms: Insights from three African digital economies. International Journal of Business Ecosystem & Strategy, 7(4), 106-112.
- Parsons, K., McCormac, A., Butavicius, M., Pattinson, M., & Jerram, C. (2017). Determining employee awareness using the Human Aspects of Information Security Questionnaire (HAIS-Q). Computers & Security, 42, 165-176.
- Renaud, K., & Ophoff, J. (2021). A cyber situational awareness model to predict the implementation of cyber security controls and precautions by SMEs. Organizational Cybersecurity Journal: Practice, Process and People, 1(1), 24-46.
- Rizomyliotis, I. (2026). Consumer trust and online purchase intention for sustainable products. American Behavioral Scientist, 70(5), 706-724.
- Sang, K. (2023). Cybersecurity assessment model for small and medium enterprises (SMEs) e-commerce in Kenya (Master’s Thesis). KCA University.
- Santos, M. P., & Berssaneti, F. T. (2024). Impacts of technological innovation on product and service quality and sustainable financial, environmental and social results in the aeronautics sector: A Brazilian case study. Sustainability, 16(8), Article 3476.
- Sassi, Sahli A., Hammami, H., & Ben Lallouna Hafsia, H. (2022). Perceived risk, structural assurance and trust in mobile payments. Journal of Telecommunications and the Digital Economy, 10(4), 41-56.
- Saunders, M., Lewis, P., & Thornhill, A. (2019). Research methods for business students (8th ed.). Pearson Education.
- Segotso, T., Mvunabandi, J. D., & Phesa, M. (2024). A systematic literature review of the challenges of adopting and implementing IFRS for SMEs in South Africa. International Journal of Economics and Financial Issues, 14(5), 131-147.
- Sema, G. G., Owolawi, P. A., & Olugbara, O. O. (2025). Protection of Personal Information Act in practice: A systematic synthesis of research trends, sectoral applications, and implementation barriers in South Africa. Sustainability, 17(19), Article 8529.
- South African Banking Risk Information Centre. (2025, August 28). Media statement: SABRIC annual crime statistics 2024.
- Zhang, R., Jun, M., & Palacios, S. (2023). M-shopping service quality dimensions and their effects on customer trust and loyalty: An empirical study. International Journal of Quality & Reliability Management, 40(1), 169-191.


