How well is your company protected against cyberattacks? Which risks are often overlooked in day-to-day operations? And how does your business remain operational if core IT systems fail?
These questions were at the heart of the Valiant Bank corporate forum in Sursee. Over 180 guests gathered to discuss cyber security and business resilience for SMEs.
Among the speakers was Patrick Wyss, Founder and CEO of BWO Systems AG. In his presentation, he highlighted where companies are most vulnerable and the concrete measures they can take to strengthen their IT security.
The key takeaway: Cyber security is a leadership issue. It is not just a technical task; it belongs on the management agenda and must be embraced throughout the entire company.
Cyber risks often start in everyday life
A seemingly familiar email, an urgent payment request, or a fake login page: cyberattacks often target situations where people are under pressure to make quick decisions. Artificial intelligence is making such attacks faster, more convincing, and harder to detect.
This makes it all the more important to not only protect employees technically, but also to raise their awareness of typical threats. Simple routines help: pause before clicking, check senders and links, and do not open suspicious attachments without thinking. For unusual payment requests, verifying the request via a second, known communication channel provides additional security.
A solid security foundation instead of isolated solutions
Effective cyber security begins with consistently implemented fundamentals. This includes up-to-date systems, sensible network segmentation, and avoiding the use of local administrator rights for daily tasks.
When it comes to protecting end devices, classic antivirus software is often no longer enough. Patrick Wyss explained the importance of modern security solutions such as Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR). They help companies detect suspicious activity early and respond appropriately. Centralized management and continuous monitoring can further strengthen protection.
Secure logins are also crucial:
- Unique passwords: Use a separate, generated password for every service.
- Password managers: Manage access data securely instead of reusing passwords.
- Multi-factor authentication (MFA): Protect accounts with an additional security factor wherever possible.
Holistic protection: from the inbox to the smartphone
Cyber risks are no longer limited to traditional email traffic. Fake websites, fraudulent SMS, manipulated attachments, and social engineering are all designed to exploit trust and trick people into making rash decisions.
In his presentation, Patrick Wyss also addressed the protection of digital communication. Signed and encrypted emails as well as secure email gateways can help make communication more secure.
At the same time, smartphones and tablets must be part of the security concept. Responsible management of digital risks also includes the conscious handling of online payments, appropriate card limits, and monitoring transactions via the card app.
Security is a process – not a product
Technical protective measures are indispensable. However, it is crucial that they are embedded in a well-thought-out security concept.
Governance, Risk & Compliance (GRC) focuses on clear responsibilities, the systematic assessment of risks, and adherence to relevant requirements. Reliable data backup is equally important. The 3-2-1-1-0 backup principle provides a proven framework for this. The key is not just to create backups, but to regularly verify that the backed-up data can actually be restored.
Management must also be prepared: Which emergency plan is triggered if core systems fail? Who makes the necessary decisions? How are employees, customers, and partners informed? And how can operations be resumed as quickly as possible?
Anyone who waits until a crisis occurs to answer these questions will lose valuable time. Business resilience therefore means identifying risks early, defining responsibilities, and preparing for potential outages.
Small routines, clear responsibility
The most important insights can be applied directly to everyday business: keep systems up to date, strictly limit user rights, secure logins with additional layers, question suspicious messages, and regularly test backup restorations.
Our conclusion at BWO Systems AG: IT security is not achieved through a one-time investment, but through the interplay of technology, people, and clear processes. It requires continuous attention, binding responsibilities, and measures that work in day-to-day operations.
How secure is your IT really?
Many security risks remain undetected until it is too late. With a professional IT audit you gain transparency regarding the current security status of your IT, identify vulnerabilities, and receive concrete recommendations for your next steps.
Would you like to know where your company stands? BWO Systems AG will support you in specifically reviewing your IT security and identifying potential for improvement.
Request an IT audit now and identify security gaps early.
We would like to thank Valiant Bank for the invitation and the excellent organization, Florian Muff from SignalFisher for his valuable insights, and all 180+ guests for the personal exchange.
