<p>This research demonstrates the strong link between successful leadership and the development of creative company models. The study's findings show that many leadership aspects are critical for obtaining success in small and medium-sized businesses.</p> <p><br></p> <p>Providing staff with the proper tools, resources, and training opportunities is critical for enhancing productivity and morale. Furthermore, providing competitive salaries, benefits, and a happy work atmosphere assists in attracting and retaining great employees, which is crucial for</p> <p>small company success.</p> <p><br></p> <p>The success of Computer Village Lagos serves as a model for aspiring entrepreneurs and countries seeking to replicate it. This dissertation introduces the Otigba Business Model (OBM), which was created by capitalizing on the success of the Computer Village. Entrepreneurs and</p> <p>countries can use the OBM to develop innovative business models that emphasize a diverse range of products and services, strong partnerships, competitive pricing, a centralized location, excellent marketing, and an entrepreneurial culture. Businesses in the technology industry can achieve</p> <p>success and thrive by leveraging these factors and embracing effective leadership.</p>

For decades, the importance of information technology (IT) for organizations has continuously increased. To ensure effective IT management and operations, to enable the business, and to stay competitive, many large organizations appoint a Chief Information Officer (CIO) as their highest-ranked IT executive (Preston et al., 2008). While many small to medium-sized enterprises (SMEs) face similar challenges concerning IT, they often lack the resources to employ a full-time IT executive (Bhagwat & Sharma, 2007; Cragg et al., 2013). However, Kamariotou and Kitsios (2022) find that strategic planning and alignment with IT are important determinants for increasing an SME’s business value. An increasing number of SMEs started to employ CIOs part-time to avoid the risk of not staying competitive and losing business value (Moise, 2021; Pratt, 2022). Such so-called “Fractional CIOs” are often highly experienced and skilled individuals working for multiple SMEs simultaneously (Kratzer et al., 2022). By contracting a Fractional CIO, SMEs benefit in various ways. First, they get an experienced IT leader at a fraction of the cost. Second, they remain flexible concerning billable hours and the time horizon of the engagement. Third, they are receiving an outside-in perspective and might profit from the Fractional CIO’s experience gained from simultaneous engagements. Even though the Fractional CIO role benefits SMEs, adoption and awareness are still low. Further, substantial research on the novel role is missing. This dissertation aims to establish a new stream in CIO research that explores the role of the Fractional CIO. Our comprehensive literature review of the CIO research field provides the basis for this research (Kratzer et al., 2023b). As we explore this novel phenomenon, we are also interested in how to best report research findings. We, therefore, aim to conceptualize techniques to convey novel phenomena in information systems (IS) research in an illustrative way. Hence, we posed the following overarching research questions: RQ1: How can novel phenomena be communicated in an illustrative yet rigorous way in research papers? RQ2: What is the state-of-the-art in the CIO research field, and what are further avenues for research? RQ3: What concepts provide SMEs with the experienced IT executive management they need? RQ4: What makes Fractional CIO engagements successful? RQ5: How does the role of the Fractional CIO take shape in practice in the German market? These overarching research questions are answered through six consecutive publications. 1) 'Literary Sketches in Information Systems Research: Conceptualization and Guidance for Using Vignettes as a Narrative Form' This paper is conceptual and has a methodological focus on the use of vignettes. The paper contributes to the usage of vignettes as a narrative form in academic research, providing a taxonomy that structures vignettes and identifies three archetypes. By conceptualizing vignettes through a taxonomy and archetypes, we create transparency for the usage of vignettes, encourage the use of vignettes, and provide recommendations how to use them more rigorously. Long term, this might contribute to a better exchange between academia and practice through better comprehensibility of academic papers. 2) 'Four Decades of Chief Information Officer Research: A Literature Review and Research Agenda Based on Main Path Analysis' In this paper, we conducted a bibliographic literature review using main path analysis, which helped to objectively identify existing topics based on their importance. We also illustrated the knowledge flow in CIO research by identifying major and emerging research streams and analyzing their evolution over time. Additionally, we aggregated central papers in CIO research and developed a research agenda to provide guidance for future research. Overall, this paper helps to advance the understanding of the CIO research field and provides insights for researchers and practitioners. 3) 'The Fractional CIO in SMEs: Conceptualization and Research Agenda' With this paper, we were the first to conceptualize the role of the Fractional CIO and to develop a research agenda for this novel research field. The results from this paper contribute to research and practice in several ways. First, we are the first authors to conceptualize the role of the Fractional CIO, derive a definition, compare it to existing CIO role research, and derive four engagement types. Second, we develop a research agenda to guide future research in the new Fractional CIO research field. Third, we contribute to practice by promoting the role’s awareness among potential Fractional CIOs and organizations. Fourth, we show that Fractional CIO services are versatile and can benefit organizations of different sizes and maturity levels, and there are diverse possibilities for evolution. 4) 'What Makes Fractional CIO Engagements in SMEs Successful? – A Research Framework' In this paper, we developed a research framework for Fractional CIO engagement success. It makes contributions to research and practice. First, we propose a research framework for Fractional CIO engagement success and, therefore, develop a common ground for future research. Second, we provide practical advice for Fractional CIOs and SMEs regarding factors for engagement success. Third, we raise awareness about the Fractional CIO role that may benefit many SMEs around the world. 5) 'Factors for Fractional CIO Engagement Success' In this paper, we used Q-methodology to empirically evaluate the relative importance of factors influencing Fractional CIO engagement success and to identify different viewpoints on engagement success. Our paper makes several contributions to research and practice. First, our paper is the first to identify and evaluate the importance of factors for Fractional CIO engagement success. Therefore, it serves as a basis for further research in the new Fractional CIO research field. Second, we find that upper echelon theory (Hambrick & Mason, 1984) can be applied to executives independent of their contractual relationship in cases of comparable responsibilities. Third, by thoroughly applying Q-methodology, we showcase an exploratory tool for identifying opinions and preferences of participants and clustering them accordingly. This approach provides guidance for other IS scholars to apply it. Fourth, we develop preliminary archetypes of Fractional CIOs and, based on that, provide tentative advice for Fractional CIOs and organizations that hire them. These preliminary archetypes enabled us to identify further theoretical explanations of this phenomenon. In addition to transaction cost theory, agency theory, and upper echelon perspective, we found that stewardship theory and dynamic capabilities explain additional characteristics of Full-ownership CIOs and Change Agents. 6) 'Mehr als Vollzeit: Fractional CIOs in KMUs' This paper summarizes the results of our previous studies regarding the Fractional CIO role in German language and conducts semi-structured interviews with three Fractional CIOs from Germany to complement it with a perspective on the German market. Overall, we find that the Fractional CIO role in the German market is performed similarly to the international market. The interviewed German Fractional CIOs/CTOs could not clearly identify any hurdles that might explain the low adoption of the role. However, all three German Fractional CIOs agree that German SMEs would strongly benefit from Fractional CIOs. (References to be found in the full text)

No description available.

[pt] O objetivo da dissertação é analisar a influência de fatores de gestão da inovação, particularmente cooperação interorganizacional e uso de informação de diferentes fontes, sobre a percepção dos problemas e obstáculos enfrentados pelas pequenas e médias empresas (PMEs) inovadoras da indústria de transformação no Brasil, ao longo de suas atividades inovativas. Realizou-se esta análise segundo três níveis de intensidade tecnológica dos setores em que as PMEs atuam e duas faixas de pessoal alocado (pequenas e médias empresas). A pesquisa pode ser considerada descritiva e aplicada. A metodologia adotada compreendeu pesquisa bibliográfica sobre inovação; classificações tecnológicas, destacando-se a classificação de intensidade tecnológica proposta pela Organização para a Cooperação e Desenvolvimento Econômico (OCDE); análise comparada dos estudos empíricos internacionais e nacionais sobre problemas e obstáculos enfrentados por PMEs; pesquisa documental referente à Classificação CNAE e à Pesquisa Nacional de Inovação (Pintec), ambas as publicações do Instituto Brasileiro de Geografia e Estatística (IBGE); análise de conteúdo para classificar as atividades econômicas das PMEs respondentes da Pintec 2014, segundo três níveis de intensidade tecnológica dos setores em que atuam e duas faixas de pessoal alocado; solicitação dos microdados ao IBGE; desenvolvimento de modelos de regressão logística para seis agrupamentos de PMEs, classificadas por intensidade tecnológica setorial e por faixa de pessoal ocupado; interpretação e discussão dos resultados. A partir dos resultados do estudo empírico, conclui-se que as PMEs podem ampliar de forma significativa seu entendimento sobre a criticidade dos problemas e obstáculos à inovação à medida que se envolvem em atividades de PDeI, especialmente em modelos de inovação aberta. / [en] The dissertation aims to analyze the influence of innovation management factors, particularly inter-organizational cooperation and the use of information from different sources, on the perception of the problems and obstacles to innovation faced by small and medium-sized enterprises (SMEs) of the manufacturing industry in Brazil. This analysis was performed according to three levels of technological intensity of SMEs and firm size (small and medium enterprises). The research can be considered descriptive and applied. The methodology adopted comprised bibliographic research on innovation; technological classifications, highlighting the classification proposed by the Organization for Economic Cooperation and Development (OECD) for technological intensity of manufacturing sectors; comparative analysis of empirical studies on problems and obstacles faced by SMEs; documentary analysis focusing on the National Classification of Economic Activities (CNAE, acronym in Portuguese) and the National Innovation Survey (Pintec), both publications of the Brazilian Institute of Geography and Statistics (IBGE); content analysis to classify the economic activities of the respondent SMEs of Pintec 2014, according to three levels of technological intensity of the sectors in which they operate and two ranges of allocated personnel; request of microdata to IBGE; development of logistic regression models for six groups of SMEs; interpretation and discussion of the results innovation. From the results of the empirical study, the main conclusion is that SMEs can significantly broaden their understanding of the criticality of problems and obstacles to innovation as they engage in RandD activities, especially in open innovation models.

Background: Nowadays, organizations face an increased occurrence and magnitude ofsystemic risks in their supply chain. For SMEs, these risks are even more prominent due toresources and capacity constraints, especially if they are positioned within global trade dyadssuch as the Europe-Asia dyad. As is it reasonable to assume that the near future will see otherexamples of disrupting events within this dyad, this study focuses on SMEs in the Europe-Asiadyad facing systemic risks. Purpose: The purpose of this study is to uncover how European SMEs within Europe-Asiadyads can strategically navigate and optimize their SCRM approach to counter systemic risks,harmonizing the adoption of the SCRM process and a cost-benefit approach to enhance theirrisk preparedness. Methods: This study has a qualitative and deduction approach with an exploratory purpose.Data is gathered though semi structured interviews within five case companies. Findings/Contribution: SMEs who are more dependent on the Europe-Asia dyad usually havemore SCRM practices in place. As a result, SMEs with solid SCRM processes have an increasedlevel of risk preparedness. However, SMEs also aim to stay agile to leverage for their smallsize and limited resources. The empirical findings also show that SMEs with less preparednessoften rely on a fast and agile reactive measure to tackle risks in their Europe-Asia supply chain.This level of preparedness directly influences the level of which SMEs use CBA within SCRM,which the leads to even more preparedness to systemic risks. Furthermore, SMEs with a highlevel of preparedness utilize CBA on a more advanced level than SMEs who showcase lowerpreparedness. It also offers valuable insights for both academics and practitioners on optimizingSMEs' risk management strategies. Keywords: Small and Medium Enterprises (SMEs) – Supply Chain Risk Management (SCRM)– Europe-Asia Dyad – Systemic Risks – Risk Preparedness – Cost-Benefit Analysis (CBA)

The Sustainable Development Agenda 2030 is halfway to the finish line, underscoring the urgency for engagement of all stakeholders to accomplish its overarching objectives. The private sector, particularly small and medium-sized enterprises, play a crucial role, with a significant potential to advance sustainable development. Nevertheless, they frequently abstain from sustainable endeavours due to several constraining factors such as lack of resources or knowledge. This thesis aims to explore strategies for sustainable business practices that SMEs implemented despite these limitations. These strategies can consequently enhance their contribution to the Agenda 2030. Building on the theoretical concepts of dynamic capabilities and transformational leadership, a case study was developed including eight semi-structured interviews with SME leaders from the food and beverage industry in Skåne, Sweden. In addition to the interviews, data from three documents provided by the interviewed SMEs were reviewed. The main findings of this thesis illustrate that SMEs can develop essential capabilities and strategies to address sustainability. Moreover, the owner-managers’ perceptions of sustainability and leadership style influence the organisational commitment towards sustainability. The strategies SMEs employ are focused on developing a long-term, holistic perspective towards sustainability, focusing on sustainable product development, adjusting their operational processes, and enhancing integration of resources of external stakeholders by maintaining collaborative efforts, partnerships, and networks.

Businesses nowadays are increasingly adopting new technologies to obtain competitive advantages. Artificial Intelligence (AI) stands out as an advanced, novel technology that has potential benefits across industries. The fast-food industry is one such industry that is highly competitive, evolving, and requires advanced technologies to cater to modern customers who increasingly demand fast, digitized services. Increased customer engagement has also become a main driving force to adopt technologies since these consumers demand quick, personalized, digitized services. The fast-food industry, compared to other industries, produces food that is perishable, and quick, which demands proper handling before, during, and after preparation, for instant consumption. Services should be quick, fast, and accessible, where adopting advanced technologies has become a necessity for the industry players' survival. Larger organizations have successfully adopted AI and have harnessed a competitive advantage. Conversely, Smaller and Medium Enterprises (SMEs) have successfully adopted digital technologies, assuming it as AI. They have not yet translated to adopt AI, which could threaten their survival and competitiveness in a highly evolving, dynamic industry. On the other hand, AI is a novel technology that has much potential, yet many are unaware of where the technology is heading, specifically, SMEs have a limited understanding and exposure to this technology, demanding more research.  The main purpose of this study is to gain a comprehensive understanding of how fast-food SMEs in Sweden perceive AI, the reasons for non-adoption, and the reasons influencing the behavioral intention to utilize AI for customer engagement within the organization. The study utilizes the Unified Theory of Acceptance and Use of Technology (UTAUT) framework to analyze how performance expectancy, effort expectancy, social influence, and facilitating conditions influence individual SMEs' behavioral intentions towards AI adoption on customer engagement by studying it from an individual, organizational context. Through qualitative interviews with fast-food SME owners, IT managers, and marketing managers, the research explored a nuanced understanding of how AI is being perceived by SMEs, challenges, barriers, and factors influencing their adoption behavior.  The research findings indicated that AI technology itself is immature and the immediate business use case is not apparent for SMEs. It was also revealed that SMEs have a misconception between AI and digital technologies. Though there is enthusiasm and willingness to adopt AI within SMEs, significant challenges remain, such as a lack of understanding about AI, resource constraints, complexity, skills, and influences from competitors and stakeholders. The research identified factors specific to SMEs that contribute to extending the UTAUT framework, such as customized payment plans, establishing technology associations, and new business models suiting SMEs. It was further evidenced that customer engagement is not an impactful mediator that influences AI adoption within SMEs. It was concluded that though SMEs have the potential to improve performance, their adoption is limited due to the immaturity of AI and due to identified challenges.

[ES] Alcanzar eficiencia y la efectividad empresarial es un aspecto vital para las organizaciones y, como viene siendo tendencia desde hace muchos años, se puede lograr mediante la implementación de sistemas de gestión y metodologías de mejora continua. Los sistemas de gestión más conocidos son aquellos desarrollados por la Organización Internacional de Estandarización (ISO), siendo los más implantados el sistema de gestión de la calidad en base a la norma ISO 9001 y el sistema de gestión medioambiental en base a la norma ISO 14001. Estas normas han supuesto un cambio en la forma de gestionar las organizaciones alcanzando un éxito sin precedentes. Sin embargo, la proliferación de estos sistemas de gestión ha dado lugar a que las organizaciones implanten varios sistemas de gestión simultáneamente. Para aprovechar las sinergias de cada sistema de gestión implantado individualmente surge la necesidad de la integración, es decir, unir los distintos sistemas de gestión presentes en un solo sistema. En este contexto, debido a la inexistencia de una metodología de integración universal, en la literatura existen numerosas metodologías de integración, ya que tanto los académicos como las instituciones han elaborado varias metodologías de integración, que abarcan fundamentalmente los sistemas de calidad y medio ambiente. Es por ello que un nuevo planteamiento de investigación podría incluir la integración de otros sistemas de gestión distintos a los mencionados anteriormente, con el fin de diferenciarse y así crear nuevas líneas de investigación. Por tanto, una buena opción sería la integración de la gestión del riesgo que, aunque no sea uno de los sistemas de gestión más extendidos, conllevaría cuantiosos beneficios para las organizaciones, pudiendo así controlar de la forma más adecuada los problemas referentes a los riesgos. Por otro lado, cuando en la literatura se analizan las metodologías de integración, todas ellas engloban únicamente sistemas de gestión. No hay que obviar, que además de estas normas, existen otras metodologías de mejora continua y de mejora de la calidad, como es el caso de Six Sigma. En referencia a esta metodología, existen estudios donde se reflejan los beneficios que conlleva la implantación de la metodología Six Sigma en las organizaciones. Llegados a este punto, en la presente tesis se pretende diseñar una nueva metodología de integración para ayudar a las organizaciones a incrementar la competitividad, productividad y calidad y mediante la integración de metodología Six Sigma, la Gestión de la Calidad basado en la norma ISO 9001:2015 y la Gestión del Riesgo en base a la norma ISO 31000:2018. La metodología de integración propuesta se podrá aplicar en pymes industriales de la Comunidad Valenciana y, además, será validada por un panel de expertos y por las pymes valencianas. Adicionalmente se ha realizado un estudio comparativo con pymes españolas establecidas en la República Checa. / [CA] Aconseguir l'eficiència i l'efectivitat empresarial és un aspecte vital per a les organitzacions i, com és tendència des de fa molts anys, es pot aconseguir mitjançant la implantació de sistemes de gestió i metodologies de millora contínua. Els sistemes de gestió més coneguts són aquells desenvolupats per l'Organització Internacional de Estandardització (ISO), sent els més implantats el sistema de gestió de la qualitat en base ala norma ISO 9001 i el sistema de gestió mediambiental en base a la normal ISO 14001. Aquestes normes han suposat un canvi en la forma de gestionar les organitzacions aconseguint un èxit sense precedents. No obstant això, la proliferació d'aquests sistemes de gestió ha donat lloc al fet que les organitzacions implanten diversos sistemes de gestió simultàniament. Per aprofitar les sinèrgies de cada sistema de gestió implantat individualment sorgeix la necessitat de la integració, és a dir, unir els diversos sistemes de gestió presents en un sol sistema integrat. En aquest context, ja que no existeix una metodologia d'integració universal, a la literatura existeixen nombroses metodologies d'integració, ja que tant els acadèmics com les institucions han elaborat diverses metodologies d'integració, que abasten principalment els sistemes de qualitat i medi ambient. Per això, un nou plantejament de recerca podria incloure la integració d'altres sistemes de gestió diferents als esmentats anteriorment, amb la finalitat de diferenciar-se i així crear noves línies de recerca. Per tant, una bona opció seria la integració de la gestió del risc que, encara que no és un dels sistemes de gestió més estesos, comportaria quantiosos beneficis per a les organitzacions, podent així controlar de la forma més adequada els problemes referents als riscos. D'altra banda, quan a la literatura s'analitzen les metodologies d'integració, totes elles engloben únicament sistemes de gestió. No cal obviar, que a més d'aquestes normes, existeixen altres metodologies de millora contínua i de millora de la qualitat, com és el cas de Six Sigma. En referència a aquesta metodologia, es troben estudis on es reflecteixen els beneficis que comporta la implantació de la metodologia Six Sigma en les organitzacions. Arribats a aquest punt, en la present tesi es pretén desenvolupar una nova metodologia d'integració que ajude a les organitzacions a millorar la competitivitat, productivitat i qualitat mitjançant la integració de metodologia Six Sigma, la Gestió de la Qualitat basat en la norma ISO 9001:2015 i la Gestió del Risc basat en la norma ISO 31000:2018. La metodologia d'integració proposta serà aplicable a pimes industrials de la Comunitat Valenciana i a més, serà validada per un panel d'experts i per les pimes valencianes. Addicionalment s'ha dut a terme una comparativa amb pimes espanyoles establides en la República Txeca. / [EN] Achieve business efficiency and effectiveness is a vital aspect for organizations and, as it has been the tendency for many years, this can be achieved through the implementation of management systems and continuous improvement methodologies. The best-known management systems are those developed by the International Organization for Standardization (ISO), being the most implemented quality management system based on the ISO 9001 standard and the environmental management system based on ISO 14001. These standards have meant a change in the way organizations are managed, leading to unprecedented success. However, the proliferation of these management systems has resulted in organizations implementing simultaneously various management systems. To take advantage of the synergies of each management system implemented individually, the need of integration arises to join the different management systems into a one integrated system. In this context, since there is not a universal integration methodology, there are abundant integration methodologies in the literature, due to both academics and institutions have developed several integration methodologies, which mainly cover quality and environmental systems. Thus, a new research approach could include the integration of other management systems different from those mentioned above, in order to differentiate and then create new lines of research. Therefore, a good option would be the integration of risk management which, although it is not one of the most widespread management systems, would involve significant benefits for organizations, being able to control the problems related to risks in the most appropriate way. On the other hand, we must not forget that in addition to the above standards, there are other methodologies for continuous improvement and improvement of quality, such as the case of Six Sigma. According to this methodology, there are studies where the benefits of implementing Six Sigma methodology in organizations are reflected. At this point, this thesis aims to develop a new integration methodology that can help organizations improve competitiveness, productivity and quality and through the integration of Six Sigma methodology, Quality Management based on ISO 9001:2015, and Risk Management based on ISO 31000:2018 standard. The proposed integration methodology will be applicable to industrial SMEs in the Valencia region in Spain and it will also be validated by a panel of experts and SMEs. It has beena dditionally carried out a comparison with Spanish SMEs located in the Czech Republic. / Blasco Torregrosa, M. (2022). Nueva metodología de integración: Six Sigma + Gestión de riesgos + Gestión de la calidad. Aplicabilidad en pymes industriales de la Comunidad Valenciana [Tesis doctoral]. Universitat Politècnica de València. https://doi.org/10.4995/Thesis/10251/180812

Since the emergence and the subsequent evolution of lean manufacturing concepts, numerous enterprises of different scale and specialties have adopted lean tools and techniques in their facilities with varying success. In general, lean manufacturing related studies have been conducted on large manufacturing firms, such as the automotive industry. Yet, lean manufacturing tools and techniques are also suited for small enterprises. Thus, the main concern of this study is to investigate the success of set-up time reduction efforts (one of the steps needed to achieve 'one-piece flow') in secondary wood products manufacturing facilities on four woodworking machines (moulder, shaper, table saw, and band saw) based on firm size. The first objective of this research is to explore the results of the implementation of set-up time reduction efforts on selected woodworking machines in enterprises of varying size. It is assumed that company size is a major factor influencing the rate of set-up time improvements. To that end, the first hypothesis, which states that 'Small firms are less successful in reducing set-up time through set-up time reduction efforts than are large firms,' has been developed and supportive questions have been corresponding created. While statistical testing of the hypotheses created for this is not possible due to the limited number of participants, speculations about the possible outcome can be made. Thus, for hypothesis one, the data obtained does not show any sign of a relationship between a firm size and the success rate of set-up time reduction efforts. The second objective of this study is to investigate how a firm's productivity is affected by set-up time reduction efforts as related to firm size. With regards to some of the weaknesses of typical small manufacturing firms (e.g. having limited budget and resources, intuitive management strategies including lack of strategic planning), large firms, by and large, are expected to be more successful in increasing productivity through set-up time reduction. To that end, the goal is to investigate results of the set-up time reduction efforts in terms of productivity improvement in manufacturing facilities. With this in mind, the second hypothesis was proposed, which reads 'Small firms achieve lower productivity gains through set-up time reduction than do large firms.' For the second hypothesis, while no conclusive proof can be offered, no sign of a relationship between firm size and productivity gain through set-up time reduction could be found. Another objective of this study is to explore the success rate of set-up time activities on the four types of woodworking machines in industry facilities considering the training activities provided by manufacturers. The aim is to compare set-up time improvement performance of manufacturers between enterprises which trained their workers/operators and enterprises which did not train their employees. To understand the relationship between the scale of firms (and/or facilities) and training activities to improve set-ups, the third hypothesis, which reads 'Small firms are less concerned with set-up time reduction through training than are large firms,' has been developed. For the third hypothesis, while testing is not possible, it appears that there is no relationship between firm size and the level of concern for set-up time reduction through training activities. The final objective of this research is to investigate whether the secondary wood manufacturing firms studied experienced a bottleneck in their production due to the long set-up actions of machines. In order to accomplish this objective, the final hypothesis, 'In both, large and small firms, bottlenecks occur at machines with high set-up times,' has been developed. The final hypothesis cannot be accepted or rejected due to the limited number of responses obtained, set-up time was a frequently indicated explanation for the occurrence of production bottlenecks in secondary wood products manufacturing firms. / Master of Science

Denna studie undersöker hur små och medelstora företag i Sverige implementerar EU:s NIS-direktiv genom sina cybersäkerhetsstrategier och -policyer. Syftet är att identifiera de huvudsakliga utmaningarna och framgångsfaktorerna i denna process. Genom intervjuer med ledande personer inom dessa företag framkommer det att ledningens fulla engagemang är avgörande för att integrera NIS-direktivens krav i den dagliga verksamheten. Studien identifierar tvångsmässig och mimetisk isomorfism som viktiga faktorer för anpassning, där företagen påverkas både av regulatoriska krav och av att efterlikna framgångsrika strategier från andra företag. Resultaten visar att proaktiv riskhantering, inklusive regelbundna utbildningar och användning av standarder som ISO 27001 och NIST, stärker företagens motståndskraft mot cyberhot. Användning av externa konsulter är en effektiv strategi, trots de höga kostnaderna. Studien betonar behovet av skräddarsydda cybersäkerhetsstrategier som tar hänsyn till varje företags unika förutsättningar och behov / This study investigates how small and medium-sized enterprises in Sweden implement the EU's NIS Directive through their cybersecurity strategies and policies. The aim is to identify the main challenges and success factors in this process. Interviews with key individuals within these companies reveal that strong leadership engagement is crucial for integrating the NIS Directive requirements into daily operations. The study identifies coercive and mimetic isomorphism as significant factors for adaptation, where companies are influenced both by regulatory demands and by mimicking successful strategies from other firms. The findings show that proactive risk management, including regular training and the use of standards such as ISO 27001 and NIST, enhances companies' resilience against cyber threats. The use of external consultants is an effective strategy, despite the high costs. The study emphasizes the need for tailored cybersecurity strategies that consider each company's unique conditions and needs.