Skip to main content

SME @ Risk

01 March 2021

Software vulnerabilities, ransomware, new data protection rules and dependencies on cloud providers – the growing use of IT is increasing the associated risks and the demands on risk management.

Neglecting IT risk management can have a variety of consequences, ranging from a virus attack on a single computer to business interruptions and high contractual fines, not to mention far-reaching legal consequences. And although SMEs are also investing more and more in IT expansion and digitalisation, the risks are usually given too little attention.

But what does active risk management actually mean? Ultimately, it means nothing more than that a company’s management consciously takes or avoids risks. These conscious decisions require, on the one hand, knowledge and adequate assessment of the existing risks and, on the other hand, their control by means of suitable measures. A simple risk analysis forms the basis on which further clarifications and measures can be taken.

IT risks in the SME environment

Various studies – including some from Switzerland – repeatedly paint the same picture. The majority of SMEs depend on their IT systems running as smoothly as possible. Longer interruptions are no longer tolerable for a growing number of companies. In addition, a number of companies fear the theft of trade secrets and customer data. It turns out that IT risks in SMEs are no less diverse than in larger companies. On the other hand, however, they usually have fewer financial resources and a lack of personnel with the necessary know-how. This means that basic IT security measures are often not implemented or are implemented insufficiently, so that the actual level of protection of the respective company is usually far below the management’s perceived sense of security.

A risk analysis is always the first step in identifying and prioritising measures. We offer risk assessments at a flat rate for SMEs. Contact us for more information.