https://www.gaexcellence.com/index.php/jistm/issue/feed 2026-11-11T22:12:17+08:00 Norhaslinda haslinda@gaexcellence.com Open Journal Systems <p>The <strong>Journal Information System and Technology Management (JISTM)</strong> is published by <strong>Global Academic Excellence (M) Sdn Bhd (GAE)</strong> to serve academicians a platform of sharing and updating their knowledge and research outputs as well as information within the sphere of information system and technology management. <strong>JISTM</strong> journal invites researchers, academicians, practitioners and students for the submission of articles, either in English or Malay. The publication for this refereed journal are <strong>quarterly (March, June, September and December)</strong>. The journal aims to publish all quality submission in time to ensure the impact of humanities research quickly conveyed, examined, and disseminated worldwide. Simultaneously, it visions to become the benchmark for the research and publications in all the fields of Information System and technology management and promote the superior standards globally. This journal uses <strong>double</strong>-<strong>blind review</strong>, which means that both the <strong>reviewer</strong> and author identities are concealed from the reviewers, and vice versa, throughout the <strong>review</strong> process. To facilitate this, authors need to ensure that their manuscripts are prepared in a way that does not give away their identity.</p> https://www.gaexcellence.com/index.php/jistm/article/view/9017 2026-11-11T22:12:17+08:00 Hasimah Razak hasimah@graduate.utm.my Hafiza Abas hafiza.kl@utm.my Ganthan Narayana Samy ganthan.kl@utm.my

<p style="text-align: justify;">Small and medium-sized enterprises (SMEs) are increasingly dependent on digital technologies to support business operations, creating greater exposure to cyber threats and potential financial losses. Cyber insurance offers a mechanism for transferring certain financial consequences of cyber incidents; however, limited cybersecurity readiness, financial constraints, and insufficient technical expertise may affect the ability of SMEs to adopt appropriate cybersecurity measures and make informed cyber insurance decisions. This systematic literature review aims to identify and synthesise the organisational, technological, and financial factors influencing cybersecurity readiness among SMEs and examine their implications for cyber insurance adoption. The review applies the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) framework, using advanced search strategies in the Scopus and Web of Science databases. Searches were conducted using combinations of the keywords “Cyber Insurance,” “Risk Transfer,” “Cyber Risk,” “Cybersecurity,” and “Small and Medium Enterprises,” covering publications from January 2022 to August 2026. Following the identification, screening, and eligibility assessment processes, 24 primary studies were included in the final qualitative synthesis. The thematic analysis identified three major themes: (1) Cybersecurity Readiness and Adoption, (2) Cybersecurity Frameworks and Operational Resilience, and (3) Cyber Risk Assessment and Investment Decisions. The findings indicate that cybersecurity awareness, organisational capabilities, security control implementation, operational resilience, and financial resources are interconnected factors influencing SME cybersecurity preparedness. However, the reviewed studies provide limited direct empirical evidence linking cybersecurity readiness to cyber insurance adoption. The review concludes that a comprehensive approach integrating cybersecurity readiness assessment, operational resilience, and cyber risk investment considerations may provide a foundation for developing a cyber insurance framework tailored to the operational and financial characteristics of SMEs.</p>

2026-11-11T00:00:00+08:00 Copyright (c) 2026 JOURNAL INFORMATION AND TECHNOLOGY MANAGEMENT (JISTM)