SMEs are an attractive target for malicious hackers. They have more digital assets and information than an individual, but less security than a large enterprise. Coupled with the fact that SMEs usually have no expertise or resources for cybersecurity, the outcome is a recipe for disaster. One study found that 60 % of hacked SMEs go out of business because they do not know how to respond. Additionally, cybersecurity solutions are usually expensive for SMEs or do not provide a good solution for their needs. This problem is also a major inhibitor for start-up innovation in the EU. Cyber-security framework SMESEC aims to provide a solution that supports SMEs in these issues. The key pillars of SMESEC can be divided in three areas: i) to provide a state-of-the-art cybersecurity framework; ii) make the solution cost-effective and adaptive to SME needs; iii) offer cybersecurity awareness and training courses for SMEs.