Echo CCIF · January 2025

Cybersecurity: a fundamental issue for businesses

Cybercrime is intensifying and evolving rapidly, putting Swiss companies, and SMEs in particular, under severe strain. Faced with this growing threat, protection is becoming a priority.

1. A constantly evolving threat

With a 112% increase in cyberattacks targeting SMEs in Switzerland between 2022 and 2023, the figures are alarming. In 2023, more than 30,000 incidents were reported, according to the National Cyber Security Centre (NCSC). Yet 30% of SMEs have still not trained their staff in IT security best practices, exposing them to increased risks of data theft and financial loss.

2. The most common types of attack

The most widespread attacks include:

• Phishing: In 2024, “chain phishing” targeting business e-mails exploded.
• Ransomware: Ransoms reach thousands of francs. With the RaaS (ransomware as a service) model, attacks are accessible to anyone.
• Exploiting QR codes: Manipulated QR codes redirect to fraudulent websites.

3. Protective measures and the role of regulation

Prevention is essential to counter these threats. Recommended best practices include:

• Strong passwords and multi-factor authentication.
• Regular system updates.
• Training staff to detect cyberattacks and using sites such as virustotal.com.

Cyber insurance: an essential safety net

Appropriate insurance covers:

• Data restoration.
• Business interruption.
• Assistance in the event of blackmail or data breaches by experts in cyber incident response and/or cyber assistance

In 2025, cybersecurity is therefore no longer an option but an absolute necessity to safeguard the future of businesses.