A cyberattack does not only hit large companies. For an SME, ransomware or payment fraud can halt operations for days. Cyber insurance is useful, but it comes after prevention.
1. Tested backups
Keep at least one copy offline or isolated from the network, and regularly check that restoring it really works.
2. Two-factor authentication
Enable it on e-mail, remote access and management tools. It is one of the most effective measures against password theft.
3. Up-to-date systems
Known vulnerabilities are the most common way in. Update systems, applications and network equipment without delay.
4. Aware employees
Short training on phishing and on fake invoices or urgent payment requests significantly reduces risk.
5. A response plan
Who to call, what to shut down, who decides, how to inform clients and partners? A one-page plan, known to everyone, saves precious time. The Federal Office for Cybersecurity (FOCS) provides a reporting desk.
What about insurance?
Depending on the policy, cyber insurance can cover incident-response costs, business interruption and certain liabilities. Insurers review the measures in place and apply exclusions, so the conditions need to be read carefully. A risk map is a good starting point.
General information only, not personalised advice. Rules and deadlines can change: please check them against your own situation.