Analysis of cyber security management approaches in medium and large-size enterprises operating at Gaziantep

Nowadays Information and Communication Technologies (ICT) widely use in each and every sector. Almost everyone has been using it for educational, business, social connections and every day work purposes. ICT provides benefits for good people as opportunities available for people with evil intentions as well. They steal personal, financial information, use it for espionage, and harm individuals and enterprises. ICT also serve as medium to commit cybercrime. Enterprises' most valuable data is stored on virtual environments and if not protected by proper security measures they all open to be abused. This research will focus on medium and large enterprises approach to protect their cyber assets. The paper will also examine cyber security awareness levels of their technology users as well as will look into demographic differences among them. The research will use survey technique conducted on 128 medium and large size enterprises located in Gaziantep Turkey. This study found out that the overall level of cyber security awareness and protection measures in institutional approach to cyber security, software development, access control during support stages, cyber security breach management, business continuity was low, physical security measures, communication and IT networks security and maintenance controls was moderate. Moreover the study found out that firms show differences according to their demographic characteristics. For example; firms with a larger number of employees and capital are more dependent on information systems, while firms also have higher levels of institutional approach to cyber security. Keywords: Cyber security, institutional approach to cyber security.