{"id":23027,"date":"2026-05-13T10:58:08","date_gmt":"2026-05-13T08:58:08","guid":{"rendered":"https:\/\/eskills.ch\/?p=23027"},"modified":"2026-05-29T16:17:23","modified_gmt":"2026-05-29T14:17:23","slug":"swiss-smes-every-hackers-favourite-target","status":"publish","type":"post","link":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/","title":{"rendered":"SWISS SMEs EVERY HACKER&#8217;S FAVOURITE TARGET"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"23027\" class=\"elementor elementor-23027 elementor-22767\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5c48a0c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5c48a0c\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-df82355\" data-id=\"df82355\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-07cc351 elementor-widget elementor-widget-text-editor\" data-id=\"07cc351\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">In 2026, cybercrime no longer primarily targets large corporations \u2014 it has shifted towards Swiss SMEs: less protected, just as profitable. This article explains why your business has become a priority target for organised cybercriminal groups, what Swiss law now requires of you in terms of data protection, and which five concrete vulnerabilities leave the door open to a cyberattack. You&#8217;ll also find a five-step action plan \u2014 realistic and actionable without a dedicated IT team \u2014 a cyber risk self-assessment checklist, an FAQ, and a glossary of essential terms. The goal: move from a reactive posture to a deliberate strategy \u2014 before the next cyber incident becomes yours.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cbdbbe8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"cbdbbe8\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bd7cd30\" data-id=\"bd7cd30\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6f7889f elementor-widget elementor-widget-text-editor\" data-id=\"6f7889f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><strong>Table des mati\u00e8res<\/strong><br \/><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d781757 elementor-widget elementor-widget-text-editor\" data-id=\"d781757\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><a href=\"#contexte\">Cybercrime has shifted towards Swiss SMEs<\/a><br \/><a href=\"#legal\">What the revDPA requires of your business \u2014 and what&#8217;s at stake<\/a><br \/><a href=\"#diagnostic\">The 5 vulnerabilities exposing SMEs to cyberattacks<\/a><br \/><a href=\"#solutions\">Reducing your cyber risk: 5 actionable steps without a dedicated IT team<\/a><br \/><a href=\"#checklist\">Checklist: assess your cyber risk exposure in 5 minutes<\/a><br \/><a href=\"#faq\">Cybersecurity FAQ for Swiss SMEs<\/a><br \/><a href=\"#glossaire\">Glossary<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e9bcf4b elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e9bcf4b\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e7ab2b3\" data-id=\"e7ab2b3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-75964a1 elementor-widget elementor-widget-image\" data-id=\"75964a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0314af elementor-widget elementor-widget-heading\" data-id=\"b0314af\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"contexte\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cybercrime has shifted towards Swiss SMEs<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b49f40f elementor-widget elementor-widget-text-editor\" data-id=\"b49f40f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">In 2024, more than 60% of documented cyberattacks in Switzerland targeted companies with fewer than 250 employees. This is no coincidence \u2014 it reflects a structural shift in organised cybercrime, with direct consequences for SMEs.<\/p><p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">For years, hacking groups primarily targeted large corporations: quick results, substantial payoffs. But big players fought back \u2014 in-house SOCs, dedicated security officers, segmented network architectures. By 2026, launching a cyberattack against a systemic bank requires resources that most criminal groups simply can&#8217;t mobilise.<\/p><p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">SMEs now offer the best effort-to-gain ratio on the market. The Federal Office for Cybersecurity (FOCS) recorded over 30,000 cyber incident reports in 2023, rising steadily for three consecutive years. Among documented cases: law firms paralysed for weeks by an attack, fiduciaries held to ransom, industrial SMEs whose manufacturing plans were encrypted and sold to foreign competitors.<\/p><p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">Cyber threats targeting Swiss businesses have grown more sophisticated and more discreet. Attackers are no longer seeking visibility \u2014 they&#8217;re after quick, traceless payouts. And they&#8217;ve worked out that your systems are accessible, your teams rarely trained, and your backups rarely tested.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32bfb87 elementor-blockquote--skin-border elementor-widget elementor-widget-blockquote\" data-id=\"32bfb87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"blockquote.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<blockquote class=\"elementor-blockquote\">\n\t\t\t<p class=\"elementor-blockquote__content\">\n\t\t\t\tYou don't need to be a strategic target to fall victim to a cyberattack. You simply need to hold data that has value \u2014 customer data, banking access, intellectual property, or access to third-party systems \u2014 and be less well protected than your digital neighbours. That's the calculation criminal groups make, in seconds, scanning the internet continuously.\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0fcd8de elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0fcd8de\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cea38a9\" data-id=\"cea38a9\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f48776d elementor-widget elementor-widget-image\" data-id=\"f48776d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-72f4039 elementor-widget elementor-widget-heading\" data-id=\"72f4039\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"legal\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What the revDPA requires of your business \u2014 and what's at stake\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f737d1 elementor-widget elementor-widget-text-editor\" data-id=\"0f737d1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">The revised Federal Act on Data Protection (revDPA), in force since 1 September 2023, has fundamentally changed the obligations of Swiss SMEs when it comes to cyber risk. It no longer recommends caution \u2014 it mandates it, with penalties for non-compliance.<\/p><p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">Article 8 of the revDPA requires any business processing personal data to implement appropriate technical and organisational measures to ensure its security. In the event of a cyber incident that could pose a risk to the individuals concerned, notification to the Federal Data Protection and Information Commissioner (FDPIC) must be made without delay \u2014 emerging case law is converging on a 72-hour window.<\/p><p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">For an SME that falls victim to a cyberattack, this creates a dual exposure:<\/p><ul class=\"[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3\"><li class=\"font-claude-response-body whitespace-normal break-words pl-2\"><strong>Direct operational damage<\/strong>: business interruption, data loss or theft, system reconstruction costs<\/li><li class=\"font-claude-response-body whitespace-normal break-words pl-2\"><strong>Risk of administrative sanction<\/strong>: if security measures were insufficient or if FDPIC notification was omitted<\/li><\/ul><p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">For businesses active on the European market, the GDPR adds another layer, with penalties of up to 4% of global annual turnover \u2014 a ceiling that applies regardless of company size.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-01b7773 elementor-blockquote--skin-border elementor-widget elementor-widget-blockquote\" data-id=\"01b7773\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"blockquote.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<blockquote class=\"elementor-blockquote\">\n\t\t\t<p class=\"elementor-blockquote__content\">\n\t\t\t\tIn the event of an attack, your SME is simultaneously exposed on two fronts: the immediate operational impact, and legal liability if your security measures prove inadequate. revDPA compliance isn't a bureaucratic formality \u2014 it's legal protection against the consequences of a cyber incident.\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-fa67974 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"fa67974\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3a5f56c\" data-id=\"3a5f56c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e21da7c elementor-widget elementor-widget-image\" data-id=\"e21da7c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bca0ba4 elementor-widget elementor-widget-heading\" data-id=\"bca0ba4\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"diagnostic\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">The 5 vulnerabilities exposing SMEs to cyberattacks<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f88f04b elementor-widget elementor-widget-text-editor\" data-id=\"f88f04b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">The majority of cyberattacks on Swiss businesses don&#8217;t exploit unknown vulnerabilities. They rely on well-documented weaknesses \u2014 systematically overlooked for lack of time or awareness. Here are the five most common, ranked by severity.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1cbce14 elementor-widget elementor-widget-heading\" data-id=\"1cbce14\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">1. Shared, never-rotated passwords<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b0fffe elementor-widget elementor-widget-text-editor\" data-id=\"0b0fffe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>One set of credentials used by multiple employees for years: this scenario applies to the majority of Swiss SMEs. For a hacking group, a single compromised account is enough to gain full access to sensitive data \u2014 and the intrusion can go undetected for weeks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3d1a402 elementor-widget elementor-widget-heading\" data-id=\"3d1a402\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">2. No two-factor authentication (2FA)<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-89767b8 elementor-widget elementor-widget-text-editor\" data-id=\"89767b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Without 2FA, a password alone is enough to take control of an email account, VPN, or cloud tool. Setup takes less than a day and reduces the risk of compromise via credential stuffing by 99% \u2014 one of the most widespread hacking techniques, which involves automatically testing millions of combinations from stolen databases.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e0b1b0 elementor-widget elementor-widget-heading\" data-id=\"8e0b1b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">3. Untested backups \u2014 or none that actually work<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-489acb9 elementor-widget elementor-widget-text-editor\" data-id=\"489acb9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Many SMEs believe they have backups. In reality, they have copied files that have never been tested in a real restoration scenario. When ransomware encrypts an entire system on a Friday evening, that&#8217;s the worst time to find out \u2014 and paying the ransom becomes the only apparent option.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35ef926 elementor-widget elementor-widget-heading\" data-id=\"35ef926\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">4. Employees with no phishing training<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-09782da elementor-widget elementor-widget-text-editor\" data-id=\"09782da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Phishing remains the number one entry vector for cyberattacks on Swiss SMEs. The sophistication of lures has exploded with generative AI: emails impersonating known suppliers, fake PDF invoices, text messages posing as a colleague travelling abroad. Your teams are your first line of defence \u2014 and, without regular training, your most vulnerable link.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f49637a elementor-widget elementor-widget-heading\" data-id=\"f49637a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">5. Unpatched software and websites<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62e849d elementor-widget elementor-widget-text-editor\" data-id=\"62e849d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Every unapplied security update is an open window. Automated tools continuously scan the internet to identify vulnerable software versions \u2014 including poorly maintained CMSs like WordPress, or outdated business applications. Your systems advertise themselves, without you being specifically targeted.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2744b43 elementor-blockquote--skin-border elementor-widget elementor-widget-blockquote\" data-id=\"2744b43\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"blockquote.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<blockquote class=\"elementor-blockquote\">\n\t\t\t<p class=\"elementor-blockquote__content\">\n\t\t\t\tThese five vulnerabilities share one thing in common: none of them require a complex technical solution to fix. They require a decision, a process, and \u2014 for vulnerability #4 \u2014 ongoing training. Most cyber incidents affecting Swiss SMEs could have been prevented by these fundamental measures.\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-37628e0 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"37628e0\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-55bce2d\" data-id=\"55bce2d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c185392 elementor-widget elementor-widget-image\" data-id=\"c185392\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b062ce7 elementor-widget elementor-widget-heading\" data-id=\"b062ce7\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"solutions\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Reducing your cyber risk: 5 actionable steps without a dedicated IT team<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-97f47f7 elementor-widget elementor-widget-text-editor\" data-id=\"97f47f7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">Managing cyber risk as an SME isn&#8217;t about securing everything at once \u2014 it&#8217;s about prioritising actions by their effort-to-protection ratio, and progressing step by step. These five actions are ordered for an SME without internal IT resources, starting with the most critical measures.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-98700f1 elementor-widget elementor-widget-heading\" data-id=\"98700f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 1 \u2014 Map your critical assets<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3abef86 elementor-widget elementor-widget-text-editor\" data-id=\"3abef86\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>(1 day, no tools required)<\/em> <br \/>Before any investment, identify what a cyberattack on your business could compromise most damagingly: customer data, contracts, banking access, intellectual property. This mapping exercise \u2014 achievable on a spreadsheet \u2014 underpins every decision that follows.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-af7640e elementor-widget elementor-widget-heading\" data-id=\"af7640e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 2 \u2014 Enable 2FA on all remote access<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bb24748 elementor-widget elementor-widget-text-editor\" data-id=\"bb24748\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>(1 to 2 weeks)<\/em> <br \/>Business email, VPN, cloud tools, business applications: no remote access should operate without two-factor authentication. At the same time, deploy a professional password manager and audit active accounts \u2014 delete those belonging to employees who have left the company, an entry point exploited in many cyberattacks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-311bf65 elementor-widget elementor-widget-heading\" data-id=\"311bf65\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 3 \u2014 Apply the 3-2-1 rule for your backups<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-add4c05 elementor-widget elementor-widget-text-editor\" data-id=\"add4c05\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Three copies of your data, on two different media, with one offsite (secure cloud or physical storage disconnected from the network). Test a full restoration at least once a year, under real conditions. This simple rule is the most effective response to ransomware \u2014 it makes paying the ransom unnecessary.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b16372 elementor-widget elementor-widget-heading\" data-id=\"6b16372\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 4 \u2014 Train your teams continuously, not just once<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-45f3075 elementor-widget elementor-widget-text-editor\" data-id=\"45f3075\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>An annual training session isn&#8217;t enough against constantly evolving cyber threats. Short e-learning modules (15 to 30 minutes), regularly deployed on phishing recognition, risky behaviours, and internal alert procedures, deliver measurable results \u2014 without blocking out half a day of meetings, and with no technical prerequisites for participants.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-83864ab elementor-widget elementor-widget-heading\" data-id=\"83864ab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Step 5 \u2014 Write a one-page cyber incident response plan<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-53eb09e elementor-widget elementor-widget-text-editor\" data-id=\"53eb09e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>What do you do if you detect a cyberattack targeting your infrastructure on a Monday morning? Who do you call first? How do you isolate compromised systems? When do you notify the FDPIC? A one-page document answering these questions can make the difference between a managed crisis and a chaotic one \u2014 it requires no technical expertise, just one hour of preparation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a68cf82 elementor-blockquote--skin-border elementor-widget elementor-widget-blockquote\" data-id=\"a68cf82\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"blockquote.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<blockquote class=\"elementor-blockquote\">\n\t\t\t<p class=\"elementor-blockquote__content\">\n\t\t\t\tFor an SME with fewer than 100 employees, working with a Managed Security Service Provider (MSSP) is often more effective and less costly than hiring internally. It provides access to specialist cybersecurity expertise, continuous monitoring, and rapid incident response \u2014 at a predictable cost.\t\t\t<\/p>\n\t\t\t\t\t<\/blockquote>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-84f6aaf elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"84f6aaf\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b1cac65\" data-id=\"b1cac65\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-766d987 elementor-widget elementor-widget-image\" data-id=\"766d987\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cb90259 elementor-widget elementor-widget-heading\" data-id=\"cb90259\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"checklist\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Checklist: assess your cyber risk exposure in 5 minutes<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6da4ea1 elementor-widget elementor-widget-text-editor\" data-id=\"6da4ea1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">Six questions are enough to identify your priority risk areas. Answer honestly.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ccdfe43 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"ccdfe43\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-far-square\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M400 32H48C21.5 32 0 53.5 0 80v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V86c0-3.3 2.7-6 6-6h340c3.3 0 6 2.7 6 6v340c0 3.3-2.7 6-6 6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">All my remote access is protected by 2FA<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-far-square\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M400 32H48C21.5 32 0 53.5 0 80v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V86c0-3.3 2.7-6 6-6h340c3.3 0 6 2.7 6 6v340c0 3.3-2.7 6-6 6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">My backups have been tested with a real restoration in the past 12 months<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-far-square\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M400 32H48C21.5 32 0 53.5 0 80v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V86c0-3.3 2.7-6 6-6h340c3.3 0 6 2.7 6 6v340c0 3.3-2.7 6-6 6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">My employees have completed cybersecurity training this year<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-far-square\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M400 32H48C21.5 32 0 53.5 0 80v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V86c0-3.3 2.7-6 6-6h340c3.3 0 6 2.7 6 6v340c0 3.3-2.7 6-6 6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">I know who to contact in the event of a cyber incident within the first hour<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-far-square\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M400 32H48C21.5 32 0 53.5 0 80v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V86c0-3.3 2.7-6 6-6h340c3.3 0 6 2.7 6 6v340c0 3.3-2.7 6-6 6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">My software, website, and operating systems are up to date<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-far-square\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M400 32H48C21.5 32 0 53.5 0 80v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V80c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V86c0-3.3 2.7-6 6-6h340c3.3 0 6 2.7 6 6v340c0 3.3-2.7 6-6 6z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">I have a list of the personal data processed and the associated protective measures (revDPA requirement)<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7016175 elementor-widget elementor-widget-text-editor\" data-id=\"7016175\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\"><strong>Result:<\/strong> 2 or more &#8220;no&#8221; or &#8220;I don&#8217;t know&#8221; answers indicate a level of cyber risk exposure that warrants immediate action. Every week without corrective measures is a week in which your protection against a cyberattack relies on luck rather than strategy.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6ce215e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6ce215e\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a4be8ed\" data-id=\"a4be8ed\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5af6d8a elementor-widget elementor-widget-text-editor\" data-id=\"5af6d8a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\"><strong>Explore our e-learning courses on <a href=\"https:\/\/eskills.ch\/en\/information-security\/\">cybersecurity<\/a> and <a href=\"https:\/\/eskills.ch\/en\/e-learning-fadp\/\">data protection (revDPA)<\/a>, designed for Swiss SME teams. Compliant with revDPA requirements, accessible with no technical prerequisites.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8e86e37 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8e86e37\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5d4f272\" data-id=\"5d4f272\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-94ccd36 elementor-widget elementor-widget-image\" data-id=\"94ccd36\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1a7168c elementor-widget elementor-widget-heading\" data-id=\"1a7168c\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"faq\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQ \u2014 Cybersecurity for Swiss SMEs<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-851f26b elementor-widget elementor-widget-spacer\" data-id=\"851f26b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-99c852b elementor-widget elementor-widget-toggle\" data-id=\"99c852b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"toggle.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h4 id=\"elementor-tab-title-1611\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-1611\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><svg class=\"e-font-icon-svg e-fas-caret-square-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M448 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h352c26.5 0 48 21.5 48 48zM92.5 220.5l123 123c4.7 4.7 12.3 4.7 17 0l123-123c7.6-7.6 2.2-20.5-8.5-20.5H101c-10.7 0-16.1 12.9-8.5 20.5z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><svg class=\"elementor-toggle-icon-opened e-font-icon-svg e-fas-caret-square-up\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M0 432V80c0-26.51 21.49-48 48-48h352c26.51 0 48 21.49 48 48v352c0 26.51-21.49 48-48 48H48c-26.51 0-48-21.49-48-48zm355.515-140.485l-123.03-123.03c-4.686-4.686-12.284-4.686-16.971 0L92.485 291.515c-7.56 7.56-2.206 20.485 8.485 20.485h246.059c10.691 0 16.045-12.926 8.486-20.485z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">What is ransomware, and why are Swiss SMEs particularly exposed?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1611\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-1611\"><p>Ransomware is malicious software that encrypts a company&#8217;s data and demands a ransom to restore access. Swiss SMEs are particularly exposed because they combine three factors that make them attractive to cybercriminal groups: systems that are often less protected than those of large corporations, genuinely valuable data, and teams rarely trained to detect the early signs of an attack in progress.<br \/><!-- notionvc: b8e9c166-f623-4677-bf39-8f91a0df6d51 --><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h4 id=\"elementor-tab-title-1612\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-1612\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><svg class=\"e-font-icon-svg e-fas-caret-square-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M448 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h352c26.5 0 48 21.5 48 48zM92.5 220.5l123 123c4.7 4.7 12.3 4.7 17 0l123-123c7.6-7.6 2.2-20.5-8.5-20.5H101c-10.7 0-16.1 12.9-8.5 20.5z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><svg class=\"elementor-toggle-icon-opened e-font-icon-svg e-fas-caret-square-up\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M0 432V80c0-26.51 21.49-48 48-48h352c26.51 0 48 21.49 48 48v352c0 26.51-21.49 48-48 48H48c-26.51 0-48-21.49-48-48zm355.515-140.485l-123.03-123.03c-4.686-4.686-12.284-4.686-16.971 0L92.485 291.515c-7.56 7.56-2.206 20.485 8.485 20.485h246.059c10.691 0 16.045-12.926 8.486-20.485z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Does the revDPA apply to small businesses, even without an IT department?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1612\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-1612\"><p>Yes. The revDPA applies to any business processing the personal data of natural persons, regardless of size or sector. A ten-person SME managing a customer database is subject to the same security and incident notification obligations as a large corporation.<br \/><!-- notionvc: 6bafebbd-9d99-4777-b28d-db80741c0d77 --><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h4 id=\"elementor-tab-title-1613\" class=\"elementor-tab-title\" data-tab=\"3\" role=\"button\" aria-controls=\"elementor-tab-content-1613\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><svg class=\"e-font-icon-svg e-fas-caret-square-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M448 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h352c26.5 0 48 21.5 48 48zM92.5 220.5l123 123c4.7 4.7 12.3 4.7 17 0l123-123c7.6-7.6 2.2-20.5-8.5-20.5H101c-10.7 0-16.1 12.9-8.5 20.5z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><svg class=\"elementor-toggle-icon-opened e-font-icon-svg e-fas-caret-square-up\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M0 432V80c0-26.51 21.49-48 48-48h352c26.51 0 48 21.49 48 48v352c0 26.51-21.49 48-48 48H48c-26.51 0-48-21.49-48-48zm355.515-140.485l-123.03-123.03c-4.686-4.686-12.284-4.686-16.971 0L92.485 291.515c-7.56 7.56-2.206 20.485 8.485 20.485h246.059c10.691 0 16.045-12.926 8.486-20.485z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">What does a cyberattack actually cost a Swiss SME on average?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1613\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"region\" aria-labelledby=\"elementor-tab-title-1613\"><p>According to data from the FOCS and cyber insurers active in the Swiss market, the average cost of a ransomware incident for an SME falls between CHF 50,000 and CHF 200,000 \u2014 factoring in business interruption, system reconstruction, legal fees, and crisis communications, independent of any ransom payment.<br \/><!-- notionvc: 6bafebbd-9d99-4777-b28d-db80741c0d77 --><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h4 id=\"elementor-tab-title-1614\" class=\"elementor-tab-title\" data-tab=\"4\" role=\"button\" aria-controls=\"elementor-tab-content-1614\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><svg class=\"e-font-icon-svg e-fas-caret-square-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M448 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h352c26.5 0 48 21.5 48 48zM92.5 220.5l123 123c4.7 4.7 12.3 4.7 17 0l123-123c7.6-7.6 2.2-20.5-8.5-20.5H101c-10.7 0-16.1 12.9-8.5 20.5z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><svg class=\"elementor-toggle-icon-opened e-font-icon-svg e-fas-caret-square-up\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M0 432V80c0-26.51 21.49-48 48-48h352c26.51 0 48 21.49 48 48v352c0 26.51-21.49 48-48 48H48c-26.51 0-48-21.49-48-48zm355.515-140.485l-123.03-123.03c-4.686-4.686-12.284-4.686-16.971 0L92.485 291.515c-7.56 7.56-2.206 20.485 8.485 20.485h246.059c10.691 0 16.045-12.926 8.486-20.485z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Is website hacking a real threat for an SME without an e-commerce site?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1614\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"region\" aria-labelledby=\"elementor-tab-title-1614\"><p>Yes. Website hacking doesn&#8217;t only target online shops. A compromised business website can serve as an entry point to the hosting environment, a distribution tool for malware targeting your visitors, or a vector for reputational damage. Unpatched CMSs \u2014 WordPress above all \u2014 are among the most exploited targets by hacking groups across Europe.<br \/><!-- notionvc: 6bafebbd-9d99-4777-b28d-db80741c0d77 --><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h4 id=\"elementor-tab-title-1615\" class=\"elementor-tab-title\" data-tab=\"5\" role=\"button\" aria-controls=\"elementor-tab-content-1615\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><svg class=\"e-font-icon-svg e-fas-caret-square-down\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M448 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h352c26.5 0 48 21.5 48 48zM92.5 220.5l123 123c4.7 4.7 12.3 4.7 17 0l123-123c7.6-7.6 2.2-20.5-8.5-20.5H101c-10.7 0-16.1 12.9-8.5 20.5z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><svg class=\"elementor-toggle-icon-opened e-font-icon-svg e-fas-caret-square-up\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M0 432V80c0-26.51 21.49-48 48-48h352c26.51 0 48 21.49 48 48v352c0 26.51-21.49 48-48 48H48c-26.51 0-48-21.49-48-48zm355.515-140.485l-123.03-123.03c-4.686-4.686-12.284-4.686-16.971 0L92.485 291.515c-7.56 7.56-2.206 20.485 8.485 20.485h246.059c10.691 0 16.045-12.926 8.486-20.485z\"><\/path><\/svg><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">What should you do in the first minutes of a cyberattack on your systems?<\/a>\n\t\t\t\t\t<\/h4>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1615\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"region\" aria-labelledby=\"elementor-tab-title-1615\"><p>Immediately isolate any suspected devices from the network (unplug the network cable or disable Wi-Fi) \u2014 without switching off the machines, to preserve forensic evidence. Then contact a specialist incident response provider. If personal data is involved, prepare notification to the FDPIC without delay \u2014 ideally within 72 hours.<br \/><!-- notionvc: 2a27e28c-9354-45c7-9bd2-56dfb234fa34 --><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9a3b676 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9a3b676\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-eab7ab6\" data-id=\"eab7ab6\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-48b0fff elementor-widget elementor-widget-image\" data-id=\"48b0fff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/eskills.ch\/wp-content\/uploads\/2022\/12\/yellow-line.svg\" title=\"yellow line\" alt=\"yellow line\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-03efe8c elementor-widget elementor-widget-heading\" data-id=\"03efe8c\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"glossaire\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Glossary<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-09db02b elementor-widget elementor-widget-heading\" data-id=\"09db02b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Cyberattack<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fde42ac elementor-widget elementor-widget-text-editor\" data-id=\"fde42ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A malicious act aimed at compromising, stealing, altering, or destroying data or computer systems. In Switzerland, the FOCS centralises cyberattack reports and publishes annual statistics.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a8108d elementor-widget elementor-widget-heading\" data-id=\"8a8108d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Cyber incident\n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-99c9d39 elementor-widget elementor-widget-text-editor\" data-id=\"99c9d39\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Any IT security event with a real or potential impact on the confidentiality, integrity, or availability of an organisation&#8217;s data or systems. A cyber incident may result from an external attack, human error, or technical failure.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b813ff2 elementor-widget elementor-widget-heading\" data-id=\"b813ff2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Cybercrime<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a7c896e elementor-widget elementor-widget-text-editor\" data-id=\"a7c896e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The full range of criminal activities conducted via or targeting computer systems: fraud, ransomware, industrial espionage, hacking for financial gain.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29b92b8 elementor-widget elementor-widget-heading\" data-id=\"29b92b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Ransomware<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-68b88cc elementor-widget elementor-widget-text-editor\" data-id=\"68b88cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Malicious software that encrypts a company&#8217;s data and conditions its recovery on payment of a ransom in cryptocurrency. The primary cyber risk vector for SMEs in 2026.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4be121e elementor-widget elementor-widget-heading\" data-id=\"4be121e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Hacking \/ Cyber hacking<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7fca3ac elementor-widget elementor-widget-text-editor\" data-id=\"7fca3ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Unauthorised intrusion into a computer system, for purposes of espionage, data theft, sabotage, or extortion. Organised hacking groups are increasingly targeting SMEs, seen as less well defended than large corporations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3850eda elementor-widget elementor-widget-heading\" data-id=\"3850eda\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Phishing<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ed38a37 elementor-widget elementor-widget-text-editor\" data-id=\"ed38a37\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A cyberattack technique that deceives a user via a fraudulent message (email, SMS) into disclosing sensitive information or triggering the installation of malicious software.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6236bdb elementor-widget elementor-widget-heading\" data-id=\"6236bdb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Cyber risk<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b65c5ac elementor-widget elementor-widget-text-editor\" data-id=\"b65c5ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>An organisation&#8217;s exposure to the potential consequences of a cyber incident: data loss, business interruption, reputational damage, regulatory sanctions. Cyber risk assessment is the prerequisite for any security strategy.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9f4b92d elementor-widget elementor-widget-heading\" data-id=\"9f4b92d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Website hacking<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f09d693 elementor-widget elementor-widget-text-editor\" data-id=\"f09d693\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The compromise of a website for malicious purposes: code injection, redirection to fraudulent sites, theft of visitor data, or use of the server as a base for further attacks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1d09698 elementor-widget elementor-widget-heading\" data-id=\"1d09698\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">2FA (Two-Factor Authentication)<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-96135b0 elementor-widget elementor-widget-text-editor\" data-id=\"96135b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A security mechanism requiring two distinct proofs of identity to access an account: typically a password and a temporary code sent to a mobile device. A fundamental measure against credential stuffing attacks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c846067 elementor-widget elementor-widget-heading\" data-id=\"c846067\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">MSSP (Managed Security Service Provider)<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-08f139f elementor-widget elementor-widget-text-editor\" data-id=\"08f139f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>An external provider delivering managed cybersecurity services: continuous monitoring, incident detection, attack response \u2014 without requiring an in-house security team.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9f35708 elementor-widget elementor-widget-heading\" data-id=\"9f35708\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">3-2-1 Rule<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-010fa69 elementor-widget elementor-widget-text-editor\" data-id=\"010fa69\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The benchmark backup strategy: 3 copies of data, on 2 different media, with 1 stored offsite or disconnected from the main network. Essential protection against ransomware.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>In 2026, cybercrime no longer primarily targets large corporations \u2014 it has shifted towards Swiss SMEs: less protected, just as profitable. This article explains why your business has become a [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":22774,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[59],"class_list":["post-23027","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-eskills-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SWISS SMEs EVERY HACKER&#039;S FAVOURITE TARGET - eSkills<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SWISS SMEs EVERY HACKER&#039;S FAVOURITE TARGET\" \/>\n<meta property=\"og:description\" content=\"In 2026, cybercrime no longer primarily targets large corporations \u2014 it has shifted towards Swiss SMEs: less protected, just as profitable. This article explains why your business has become a [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/\" \/>\n<meta property=\"og:site_name\" content=\"eSkills\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-13T08:58:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-29T14:17:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eskills.ch\/wp-content\/uploads\/2026\/05\/Blog_Cyber.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"648\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"PLevillon\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/\"},\"author\":{\"name\":\"PLevillon\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#\\\/schema\\\/person\\\/b1e6679da09687018ceca790bf73e61f\"},\"headline\":\"SWISS SMEs EVERY HACKER&#8217;S FAVOURITE TARGET\",\"datePublished\":\"2026-05-13T08:58:08+00:00\",\"dateModified\":\"2026-05-29T14:17:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/\"},\"wordCount\":2130,\"publisher\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eskills.ch\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Blog_Cyber.png\",\"articleSection\":[\"eSkills\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/\",\"url\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/\",\"name\":\"SWISS SMEs EVERY HACKER'S FAVOURITE TARGET - eSkills\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eskills.ch\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Blog_Cyber.png\",\"datePublished\":\"2026-05-13T08:58:08+00:00\",\"dateModified\":\"2026-05-29T14:17:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eskills.ch\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Blog_Cyber.png\",\"contentUrl\":\"https:\\\/\\\/eskills.ch\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Blog_Cyber.png\",\"width\":1000,\"height\":648},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/blog\\\/swiss-smes-every-hackers-favourite-target\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/eskills.ch\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SWISS SMEs EVERY HACKER&#8217;S FAVOURITE TARGET\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/eskills.ch\\\/en\\\/\",\"name\":\"eSkills\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#organization\"},\"alternateName\":\"e-skills\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/eskills.ch\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#organization\",\"name\":\"eSkills\",\"alternateName\":\"e-skills\",\"url\":\"https:\\\/\\\/eskills.ch\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/eskills.ch\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/logo-seo.png\",\"contentUrl\":\"https:\\\/\\\/eskills.ch\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/logo-seo.png\",\"width\":133,\"height\":89,\"caption\":\"eSkills\"},\"image\":{\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/eskills-ch\"],\"description\":\"eSkills est une agence suisse de digital learning bas\u00e9e \u00e0 Gen\u00e8ve. Elle con\u00e7oit et r\u00e9alise des formations e-learning sur mesure et cl\u00e9s en main pour entreprises, administrations et universit\u00e9s depuis 2012.\",\"email\":\"hello@eskills.ch\",\"telephone\":\"+41 22 700 12 01\",\"legalName\":\"eSkills S\u00e0rl\",\"foundingDate\":\"2012-06-01\",\"vatID\":\"CHE-453.127109\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/eskills.ch\\\/en\\\/#\\\/schema\\\/person\\\/b1e6679da09687018ceca790bf73e61f\",\"name\":\"PLevillon\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SWISS SMEs EVERY HACKER'S FAVOURITE TARGET - eSkills","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/","og_locale":"en_US","og_type":"article","og_title":"SWISS SMEs EVERY HACKER'S FAVOURITE TARGET","og_description":"In 2026, cybercrime no longer primarily targets large corporations \u2014 it has shifted towards Swiss SMEs: less protected, just as profitable. This article explains why your business has become a [&hellip;]","og_url":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/","og_site_name":"eSkills","article_published_time":"2026-05-13T08:58:08+00:00","article_modified_time":"2026-05-29T14:17:23+00:00","og_image":[{"width":1000,"height":648,"url":"https:\/\/eskills.ch\/wp-content\/uploads\/2026\/05\/Blog_Cyber.png","type":"image\/png"}],"author":"PLevillon","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#article","isPartOf":{"@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/"},"author":{"name":"PLevillon","@id":"https:\/\/eskills.ch\/en\/#\/schema\/person\/b1e6679da09687018ceca790bf73e61f"},"headline":"SWISS SMEs EVERY HACKER&#8217;S FAVOURITE TARGET","datePublished":"2026-05-13T08:58:08+00:00","dateModified":"2026-05-29T14:17:23+00:00","mainEntityOfPage":{"@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/"},"wordCount":2130,"publisher":{"@id":"https:\/\/eskills.ch\/en\/#organization"},"image":{"@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#primaryimage"},"thumbnailUrl":"https:\/\/eskills.ch\/wp-content\/uploads\/2026\/05\/Blog_Cyber.png","articleSection":["eSkills"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/","url":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/","name":"SWISS SMEs EVERY HACKER'S FAVOURITE TARGET - eSkills","isPartOf":{"@id":"https:\/\/eskills.ch\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#primaryimage"},"image":{"@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#primaryimage"},"thumbnailUrl":"https:\/\/eskills.ch\/wp-content\/uploads\/2026\/05\/Blog_Cyber.png","datePublished":"2026-05-13T08:58:08+00:00","dateModified":"2026-05-29T14:17:23+00:00","breadcrumb":{"@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#primaryimage","url":"https:\/\/eskills.ch\/wp-content\/uploads\/2026\/05\/Blog_Cyber.png","contentUrl":"https:\/\/eskills.ch\/wp-content\/uploads\/2026\/05\/Blog_Cyber.png","width":1000,"height":648},{"@type":"BreadcrumbList","@id":"https:\/\/eskills.ch\/en\/blog\/swiss-smes-every-hackers-favourite-target\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/eskills.ch\/en\/"},{"@type":"ListItem","position":2,"name":"SWISS SMEs EVERY HACKER&#8217;S FAVOURITE TARGET"}]},{"@type":"WebSite","@id":"https:\/\/eskills.ch\/en\/#website","url":"https:\/\/eskills.ch\/en\/","name":"eSkills","description":"","publisher":{"@id":"https:\/\/eskills.ch\/en\/#organization"},"alternateName":"e-skills","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/eskills.ch\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/eskills.ch\/en\/#organization","name":"eSkills","alternateName":"e-skills","url":"https:\/\/eskills.ch\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eskills.ch\/en\/#\/schema\/logo\/image\/","url":"https:\/\/eskills.ch\/wp-content\/uploads\/2023\/01\/logo-seo.png","contentUrl":"https:\/\/eskills.ch\/wp-content\/uploads\/2023\/01\/logo-seo.png","width":133,"height":89,"caption":"eSkills"},"image":{"@id":"https:\/\/eskills.ch\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/ch.linkedin.com\/company\/eskills-ch"],"description":"eSkills est une agence suisse de digital learning bas\u00e9e \u00e0 Gen\u00e8ve. Elle con\u00e7oit et r\u00e9alise des formations e-learning sur mesure et cl\u00e9s en main pour entreprises, administrations et universit\u00e9s depuis 2012.","email":"hello@eskills.ch","telephone":"+41 22 700 12 01","legalName":"eSkills S\u00e0rl","foundingDate":"2012-06-01","vatID":"CHE-453.127109","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"}},{"@type":"Person","@id":"https:\/\/eskills.ch\/en\/#\/schema\/person\/b1e6679da09687018ceca790bf73e61f","name":"PLevillon"}]}},"_links":{"self":[{"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/posts\/23027","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/comments?post=23027"}],"version-history":[{"count":0,"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/posts\/23027\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/media\/22774"}],"wp:attachment":[{"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/media?parent=23027"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eskills.ch\/en\/wp-json\/wp\/v2\/categories?post=23027"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}