The article explores how characteristics of small and medium-sized enterprises (SMEs) impact the design of information security maturity models. The goal is to create a model that fits the needs of SMEs for assessing and improving their security capabilities. By analyzing existing frameworks and SME traits, the researchers aim to develop a model that integrates key qualities and components tailored to SME requirements. The study highlights the importance of aligning design principles with the specific needs of SMEs to enhance organizational learning and development in the realm of information security.