Pune, September 2026: West India is emerging as India’s investment-led cybersecurity market, with SMEs in the region translating strong technology spends into a growing focus on monitoring, governance and specialist expertise according to the latest SME Digital Insights 2026: Cybersecurity study 2026: Cybersecurity study by Tata Tele Business Services (TTBS) and CyberMedia Research (CMR).
56% of West Indian SMEs now invest 6–10% of their annual revenue in IT, and 45% allocate 6–10% of that IT budget specifically to cybersecurity, among the strongest investment commitments of any region in the country. This positions the region to translate technology investments into stronger long-term cybersecurity resilience.
55% of West Indian SMEs prefer working with specialist technology providers to manage their security posture, while 51% plan to further strengthen monitoring and 45% plan to strengthen compliance over the coming year. The research identifies expertise as the largest barrier to effective cybersecurity implementation, cited by 45% of SMEs overall, highlighting the importance of specialist support as businesses seek to strengthen their security capabilities. This emphasises why West India’s strong appetite for specialist technology partnerships (55%) is well positioned to close that gap faster.
Speaking on the findings, Mannu Singh, Vice President, Tata Teleservices, said, “West India’s SMEs are demonstrating a strong commitment to building secure, digitally enabled businesses. The findings from our study are particularly encouraging because they show that this commitment is extending beyond technology investment to a growing focus on operational discipline. As businesses continue to expand their digital footprint, the opportunity is to build on this strong foundation and make cybersecurity an increasingly integrated part of everyday business operations. At TTBS, we see our role as helping SMEs translate this momentum into greater visibility, stronger resilience and the confidence to pursue their next phase of growth. Together with CyberMedia Research, we are using these insights to understand where businesses are today and help them take practical steps towards a more proactive, continuously managed security environment.”
According to Prabhu Ram, Vice President – Industry Research Group (IRG), CyberMedia Research (CMR), “Our study findings highlight a clear inflection point in the cybersecurity journey of Indian SMEs. While investment intent is rising sharply, cyber maturity remains uneven, with just 12% of SMEs continuously monitoring their cybersecurity environments. Many are still relying on fragmented security deployments, periodic reviews, and reactive remediation, even as the threat environment becomes more persistent and sophisticated. This gap between intent and preparedness is the defining challenge for Indian SMEs today. At CyberMedia Research (CMR), our analysis suggests that SME cyber resilience will increasingly depend on integrated, continuously managed approaches — a shift already visible among the more mature enterprises in our sample.”
The study also found that while 46% of SMEs overall allocate less than 5% of their IT budgets towards cybersecurity, the higher allocation among very-high-intent SMEs indicates a stronger correlation between investment intent and established cybersecurity foundations. This suggests that future cybersecurity investment is increasingly being driven by efforts to strengthen an existing security foundation, rather than responding only to immediate security gaps.
Against this backdrop, the study also highlights the emerging role of AI in strengthening cybersecurity, with 35% of SMEs recognising AI as a cybersecurity enabler that can accelerate threat detection, automate routine monitoring and strengthen cyber resilience. At the same time, 34% expect AI-powered cyber threats to materially impact their business over the next 12–24 month. These findings underscore the opportunity for SMEs to harness AI alongside continuously managed cybersecurity capabilities to strengthen resilience and stay ahead of evolving threats.
Key Findings from the SME Digital Insights Study
Cybersecurity Investment Signals Strong Growth Opportunity
- 84% of Indian SMEs plan to increase cybersecurity investments over the next 12–24 months, reflecting growing recognition that cybersecurity is now a strategic business priority.
- Medium-sized enterprises are leading this trend, with 89% planning to increase investments.
- However, 46% of SMEs continue to allocate less than 5% of their IT budgets towards cybersecurity, indicating significant headroom for strengthening cyber resilience.
SMEs are prioritising trusted, specialist cybersecurity partnerships
- 48% of SMEs value ease of integration and quality customer support when evaluating cybersecurity partners.
- 46% prioritise trust and long-term relationships.
- 45% value strong security and compliance capabilities.
Cybersecurity Preparedness evolves as SMEs strengthens their defences
- 40% of SMEs have experienced a cyber incident in the last 24 months.
- Only 28% implemented structural cybersecurity improvements following the incident.
- 60% responded by making tactical security tool upgrades rather than strengthening their overall security posture.
- 35% operate multiple cybersecurity tools with limited visibility into risks.
AI is Emerging as a Cybersecurity Enabler
- 35% of SMEs recognise AI’s potential to strengthen cyber resilience through intelligent threat detection, automated monitoring and faster incident response.
- 34% expect AI-powered cyber threats to materially impact their business over the next 12–24 months.
