This study examines cybersecurity awareness and practices among micro and small business owners in Gombe State, Nigeria, highlighting their relevance to effective digital risk management. A descriptive survey design was adopted, and 385 respondents were selected through a multistage sampling technique based on Cochran’s sample size formula. Data were collected using a structured questionnaire validated by three experts from Gombe State University, with a Cronbach’s alpha reliability coefficient of 0.87. Data were analyzed using mean, standard deviation, and simple linear regression at the 0.05 level of significance. The findings showed a moderate level of cybersecurity awareness (x̄= 3.35, σ = 1.35) and cybersecurity practices (x̄= 3.01, σ = 1.32). Cybersecurity awareness had a positive and statistically significant influence on cybersecurity practices (β = .668, p < .001), explaining 44.6% of the variation in cybersecurity practices. The study concluded that improving cybersecurity awareness is essential for strengthening digital risk management among micro and small business owners. It recommended regular cybersecurity awareness programmes by relevant agencies, including the National Information Technology Development Agency (NITDA), Small and Medium Enterprises Development Agency of Nigeria (SMEDAN), National Orientation Agency (NOA), Nigeria Computer Society (NCS), and other relevant organizations. It also recommended integrating cybersecurity awareness into business support programmes delivered by SMEDAN, Industrial Training Fund (ITF), and educational institutions to strengthen the digital resilience of micro and small business owners in Gombe State.