Date of Award

8-2026

Document Type

Open Access Thesis

Degree Name

Master of Computer and Information Science (MCIS)

Department

Computer Science

First Advisor

Dr. Cassandra Dove

Abstract

Small and medium-sized businesses (SMBs) are critical economic drivers, yet they remain prime targets for cyber-attacks. Frequently operating under constraints involving financial resources, personnel, technical expertise, and time, SMBs have difficulty recognizing cybersecurity as a business risk warranting the expenditure of resources. Traditional cybersecurity consulting approaches meet with organizational resistance and fail to gain acceptance due to the SMB’s general underestimation of their own risk. This paper introduces a novel structured, repeatable framework designed to introduce a fresh mindset to conventional consulting. It repurposes Open-Source Intelligence (OSINT) reconnaissance - a toolset typically used by adversaries - for a constructive, empathetic purpose. The developed process adapts selected reconnaissance techniques from the MITRE ATT&CK® Enterprise Reconnaissance tactic for benign, non-intrusive use. The core of this methodology is to build a deep, pre-engagement understanding of an SMB’s unique operational culture, financial sensitivities, and perceived threats by incorporating consultant mindset preparation, cognition and mindfulness, and consideration of change management to support an informed and empathetic initial approach. By leveraging publicly available information, the OSINT-Driven Framework provides a structured procedure and supporting collection worksheet for developing an SMB profile before engagement. This proactive intelligence gathering fosters a first meeting grounded in empathy and trust, aligning security imperatives with the SMB's core business goals of continuity and growth. Ultimately, this paper presents a structured, repeatable framework for transforming an SMB's risk posture from vulnerable to resilient, embedding a durable culture of security awareness.

Download

Share

COinS