While technical protective measures such as firewalls and software updates are widespread, organisational measures are lagging far behind. Only around a third of SMEs have an IT security concept, regular training or an emergency plan. Particularly critical: only one in five companies even carries out IT security audits.
The results emphasise the need to see cyber security as a strategic success factor. Swiss SMEs need to strengthen their cyber resilience in a targeted manner - by investing in technology, organisation and awareness.
The study, report and infographic are available at
The study was conducted by the Swiss Academy of Engineering Sciences (SATW) together with digitalswitzerland, Die Mobiliar, the Swiss Digital Security Alliance (ADSS), the FHNW, the HES-SO Valais-Wallis, the Information Security Society Switzerland (ISSS), the Swiss Internet Security Alliance (SISA) and YouGov Switzerland.