Cyber risk assessment for small and medium-sized enterprises, focusing on methodologies proportional to limited resources, threat analysis specific to the SME context, identification of critical assets, and prioritization of security interventions based on business impact and economic sustainability.