Skip to content

Cyber threats continue to escalate, posing a growing danger.

Cyber-crimes have successfully infiltrated approximately one-quarter of all companies, report findings from the General Association of the German Insurance Industry (GDV).

Digital assaults are growing increasingly menacing.
Digital assaults are growing increasingly menacing.

Cyber threats continue to escalate, posing a growing danger.

In a recent survey commissioned by the German Insurance Association (GDV), it was revealed that many small and medium-sized enterprises (SMEs) are falling short in their cybersecurity preparations.

The survey, part of the "Cyber Secure" initiative, found that 27% of respondents have already been victims of a cyber-attack. Worryingly, one in five companies does not make weekly backups or stores them insecurely, and only 60% of the companies surveyed check if the data from the backup copies can be restored.

Jörg Asmussen, the CEO of the GDV, expressed concern about the lack of preparation by many companies. He attributes the findings of this year's survey to a third of companies having no one explicitly responsible for IT security and half having no plan for dealing with a cyber-attack.

The survey also indicated an increase in the time it takes for medium-sized companies to restore their IT systems after a cyber-attack. 39% of affected medium-sized companies needed four or more days to restore their IT systems, an increase from around 20% in previous years.

Despite these security gaps, a majority of respondents (79%) believe they are doing enough for their IT security. However, Asmussen warns that the SME sector is particularly vulnerable to cybercrime due to its complacency.

To address these issues, the GDV advises SMEs to enhance their cybersecurity and data backup procedures by following established guidelines such as VdS 10005LF. These guidelines emphasize implementing practical, cost-effective security measures aligned with the size and risk profile of the business, including regular data backups, comprehensive data protection policies, and targeted cybersecurity practices to manage risk efficiently.

The VdS certifications and guidelines referenced are often supported or recognized by German industry associations like GDV for their practical relevance to SMEs’ cybersecurity and data protection needs. These approaches help SMEs mitigate risks efficiently while complying with German and European data protection standards.

The "Cyber Secure" initiative, led by the GDV, aims to raise awareness of cyber threats and provide guidance to SMEs on how to protect themselves. Asmussen encourages small and medium-sized enterprises to do much more to protect their IT systems, emphasizing the importance of up-to-date and secure backup copies as a remedy against ransomware attacks.

Despite the broad majority of respondents considering the risk to their own company to be low, Asmussen stated that due to the lack of preparation, companies are reacting too slowly to cyber-attacks. The GDV's message is clear: SMEs must take their cybersecurity seriously to protect their businesses from the increasing threat of cybercrime.

[1] VdS 10000: Structured Information Security Management Systems for SMEs [2] VdS 10010: Data Protection Measures and Procedures for SMEs [3] VdS 10005LF: Guideline for Information Security and Data Protection in SMEs and Micro Enterprises

Read also:

Latest