This focus paper explores the growing cybersecurity challenges facing Europe’s Micro and Small Enterprises (MSEs), which play a vital role in economic growth but are increasingly vulnerable due to rapid digitalisation and limited resources. While digital transformation has helped MSEs remain competitive (particularly during crises such as the COVID-19 pandemic) it has also exposed them to a broad spectrum of cyber threats, including ransomware, phishing, malware, DDoS attacks, and supply chain breaches. These threats are intensified by a lack of cybersecurity expertise, dependence on costly or ill-suited technology solutions, and constrained budgets, all of which can result in significant operational and financial consequences.

The paper underscores the urgent need for comprehensive policy measures and targeted support from EU authorities and National Coordination Centres (NCCs). It recommends expanding access to practical training, increasing funding, and developing user-friendly cybersecurity tools to foster a strong cybersecurity culture and safeguard both individual businesses and the broader digital ecosystem.