Empowering Small and Medium Enterprises with CyberQ Chatbot: A Knowledge Graph Enhanced Large Language Model

Small and medium-sized enterprises (SMEs) face significant challenges in achieving cyber security maturity due to limited resources, complex compliance requirements, and a shortage of skilled professionals. This research-in-progress paper introduces CyberQ, an AI-powered chatbot underpinned by a cyber security standards and frameworks knowledge graph, designed to support Australian SMEs in navigating cyber security challenges and certification processes. Drawing on thematic analysis of 96 interviews with SME owners, cyber security experts, and government stakeholders, the study identifies key barriers to certification—such as cost, complexity, and lack of guidance—and explores perceptions of AI-driven tools in addressing these issues. Findings reveal a strong demand for accessible, context-aware solutions that can demystify standards like ISO 271, DISP, and the Essential Eight. The paper contributes to the design of an intelligent, standards-aligned chatbot that can provide tailored guidance, reduce administrative overhead, and enhance cyber resilience among SMEs.