The proliferation of information and communication technologies in enterprises enables them to develop new business models and enhance their operational and commercial activities. Nevertheless, this practice also introduces new cybersecurity risks and vulnerabilities. This may not be an issue for large organizations with the resources and mature cybersecurity programs in place; the situation with small and medium-sized enterprises (SMEs) is different since they often lack the resources, expertise, and incentives to prioritize cybersecurity. In such cases, cybersecurity awareness can be a critical component of cyberdefense. However, research studies dealing with cybersecurity awareness or related domains exclusively for SMEs are rare, indicating a pressing need for research addressing the cybersecurity awareness requirements of SMEs.

Prior to that, though, it is crucial to identify which aspects of cybersecurity awareness require further research in order to adapt or conform to the needs of SMEs. In this study, we conducted a systematic literature review that focused on cybersecurity awareness, prioritizing those performed with a particular focus on SMEs. The study seeks to analyze and evaluate such studies primarily to determine knowledge and research gaps in the cybersecurity awareness field for SMEs, thus providing a direction for future research.

企业中信息和通信技术的激增使他们能够开发新的业务模式并增强其运营和商业活动。然而，这种做法也带来了新的网络安全风险和漏洞。对于拥有资源和成熟网络安全计划的大型组织来说，这可能不是问题；中小企业 (SME) 的情况有所不同，因为它们往往缺乏资源、专业知识和动力来优先考虑网络安全。在这种情况下，网络安全意识可以成为网络防御的关键组成部分。然而，专门针对中小企业的网络安全意识或相关领域的研究很少，这表明迫切需要研究解决中小企业的网络安全意识要求。

但在此之前，确定网络安全意识的哪些方面需要进一步研究以适应或符合中小企业的需求至关重要。在这项研究中，我们进行了系统的文献综述，重点关注网络安全意识，并优先考虑那些特别关注中小企业的文献。本研究旨在分析和评估此类研究，主要确定中小企业在网络安全意识领域的知识和研究差距，从而为未来的研究提供方向。