  Although Denmark is reportedly one of the most digitised countries in Europe,
IT security in Danish companies has not followed along. To shed light into the
challenges that companies experience with implementing IT security, we
conducted a preliminary study running semi-structured interviews with four
employees from four different companies, asking about their IT security and
what they need to reduce risks of cyber threats. Our results show that
companies are lacking fundamental security protection and are in need of
guidance and tools to help them implementing basic security practices, while
raising awareness of cyber threats. Based on our findings and with the
inspiration of the latest reports and international security standards, we
discuss steps towards further investigation towards developing a framework
targeting SMEs that want to adopt straightforward and actionable IT security
guidance.
