ON SOME ASPECTS OF THE APPLICATION OF THE CYBERSECURITY DIRECTIVE IN THE ACCOUNTING OF MICRO AND SMALL ENTERPRISES IN BULGARIA

Abstract

This study examines some aspects of implementing the Network and Information Security Directive (NIS2 Directive) in the accounting activities of micro and small enterprises in Bulgaria. The Directive was adopted at the end of 2022 and aims to build cybersecurity capabilities in the European Union, limit threats to network and information systems used to provide essential services in key sectors and ensure the continuity of these services in the event of incidents, thereby contributing to the effective functioning of the economy and society. The Directive is mandatory for application from October 18, 2024.
Achieving sustainability in enterprises' development depends on the measures taken to enhance cybersecurity in their activities, including accounting. The study analyzes the application of cybersecurity requirements in protecting sensitive financial information and the effective management of accounting processes in a digital environment. The proposed management solutions are associated with the application of various complex approaches, complementing the requirements of accounting and tax legislation with the new information protection legislation.
Key aspects of implementing appropriate risk management mechanisms related to cybersecurity are examined, including raising awareness of cyber threats and the need to apply new technologies to protect economic information created in the accounting process of micro and small enterprises. The study also considers the challenges faced by enterprises, such as limited resources, lack of specialized IT personnel, and relatively high costs for implementing modern information security solutions.
The aim of this study is to offer practical guidelines and recommendations for adapting the accounting practices in the studied enterprises to the requirements of the directive. Emphasis is placed on the specific characteristics of the studied enterprises, the need for cooperation with technology providers of secure electronic resources, including the use of cloud services.