{"id":17854,"date":"2024-11-05T13:03:00","date_gmt":"2024-11-05T12:03:00","guid":{"rendered":"https:\/\/www.ohb-ds.de\/wpml\/magazin\/cyber-security-fuer-kmus"},"modified":"2026-09-17T12:04:13","modified_gmt":"2026-09-17T10:04:13","slug":"cyber-security-for-smes","status":"publish","type":"magazin","link":"https:\/\/www.ohb-ds.de\/en\/magazine\/cyber-security-for-smes","title":{"rendered":"Cyber Security for SMEs"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t<\/path><\/svg>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\tIT-Sicherheit<\/span>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cyber Security for SMEs<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tAccurately Assessing and Analyzing Cybersecurity Risks\u2014We’ll Show You What Options Are Available.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSchedule an initial consultation now<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When we talk about cybersecurity risks<\/em>, most people first think of large-scale, targeted hacker attacks on major corporations and governments. We hear about advanced persistent threats (APTs)<\/em>, zero-day vulnerabilities<\/em>, spear-phishing<\/em>, and CEO fraud<\/em>.<\/p>

In fact, cybersecurity <\/em>simply means that the risk is not limited to IT, but affects the entire company and originates in the cyber domain\u2014primarily the internet. Thus, every small and medium-sized enterprise (SME) is exposed to a significantcybersecurity risk<\/em>on a daily basis, simply because it owns systems and employs staff who interact with the internet. The greatest risk for these companies, however, is not targeted attacks (motivated by national interests) exploiting unknown vulnerabilities, but rather global malware, phishing, and ransomware campaigns carried out by profit-driven cybercriminals. These criminals use simple scams and known vulnerabilities to cause rapid, widespread damage and extort money.<\/p>

The consequences can be devastating. The damage caused by a malware or ransomware attack often threatens the very survival of small and medium-sized businesses alike. It is therefore essential for every business leader to understand the risks to which their employees and resources are exposed and to know what options are available to effectively mitigate those risks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Assess cyber security risks quickly and effectively<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The first and most important step is to analyze the threats and challenges to cybersecurity. Security frameworks can facilitate a systematic assessment, but they are often\u2014such as the BSI\u2019s IT-Grundschutz in Germany\u2014too extensive for small and medium-sized enterprises (SMEs) to manage. With the CIS Controls<\/em>, the\u00a0Center for Information Security (CIS)<\/a><\/em>\u00a0\u00a0provides a framework that can be scaled to suit the needs of small and medium-sized enterprises.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

The 20 critical control points<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The 20 critical control points of the\u00a0CIS Controls Framework<\/a><\/em>\u00a0<\/em>are divided into three categories:<\/p>