The Cybersecurity Governance Gap in Ecuadorian SMEs: IT–Management Alignment, Decision Rights, and Incident-Response Accountability
Cybersecurity weaknesses in small and medium-sized enterprises (SMEs) are frequently attributed to limited budgets, inadequate training, and obsolete technology. This explanation is incomplete when employees responsible for cybersecurity recognize risks but lack the authority, executive access, and governance routines...