Swiss SMEs can blunt cyberattacks with stronger safeguards
Wednesday 21st October 2026 on 18:45 in
Switzerland
Small businesses can reduce the damage caused by cyberattacks, but many underestimate the risk and do too little to protect themselves, Swiss broadcaster SRF reports. Its digital editor Jürg Tschirren says most attacks are not targeted: hackers tend to hit businesses with weaknesses they can exploit.
A study of cybersecurity among Swiss SMEs found that four per cent of small businesses suffered damage from cyberattacks over a three-year period. Extrapolated across the country, that represents about 26,000 companies. Recent victims of attacks have included the federal pension fund Publica, online marketplace Ricardo and Swiss Broadcasting Corporation SRG.
Updates and backups are key
Businesses sometimes delay security updates because they can disrupt software. They may also lose track of devices connected to their networks, which can become entry points for attackers. Some vulnerabilities are exploited before a security update is available.
SRF recommends using two-factor authentication for email and remote access, keeping backups offline and installing updates promptly on anything accessible from the internet. Businesses should also prepare an emergency plan, provide regular short awareness sessions for staff and consider cyber insurance as a last line of defence.
Artificial intelligence is making attacks faster, cheaper and more personalised, according to the latest half-year report from the Federal Office for Cybersecurity. Attackers use AI to create convincing messages tailored to recipients, making phishing emails harder to spot. The technology can also help them exploit known vulnerabilities more quickly, shrinking the time available to install updates.
Staff should report incidents
Management is primarily responsible for providing protection, clear rules and training. Employees are expected to follow those rules and report incidents immediately, including their own mistakes. If workers fear punishment for errors, they may stay silent, potentially helping attackers.
Under the Swiss Code of Obligations, employees are liable for damage only if they cause it intentionally or through negligence.