The CyberPassport blog

Cybersecurity explained simply, for Swiss SMEs.

An accountant compares two nearly identical supplier invoices with a magnifier, focused on a subtly altered bank-account line

AwarenessNov 2, 20267 min read

Fake supplier invoice: the warning signs that should stop you

One quietly altered account number on an invoice, and the payment is gone. How to spot a fake supplier invoice and secure your SME's payments.

A short low-cost awareness session in an office break area, a manager sharing simple tips with two colleagues over coffee, a piggy bank nearby

AwarenessOct 26, 20267 min read

Train your team on cybersecurity without blowing the budget

Security awareness training doesn't have to be expensive. The real lever is consistency, not budget. Three concrete habits to put in place this week in your SME.

A manager sends a harmless test email to her own team from her laptop, like a controlled fire-drill before a real attack

Best practicesOct 19, 20267 min read

Internal phishing simulation: why test your team before attackers do

A phishing simulation sends a harmless fake phishing email to your own team to observe how they react. Why run one, and how to do it kindly rather than as a trap.

A team manager reviews the results of an internal phishing test on a dashboard, a few colleagues having clicked the test email

AwarenessOct 12, 20267 min read

Running a phishing simulation with your team: what it reveals

Why a phishing simulation — a harmless test trap email — trains your team without blaming anyone. What the exercise reveals, and three moves to start this week.

A short cybersecurity awareness moment in a small office, a facilitator by a screen with a few attentive colleagues

AwarenessOct 5, 20267 min read

A security awareness program: what it really changes in an SME

Security culture, fewer incidents, client trust: what a real security awareness program brings to a Swiss SME, plus three habits to start this week.

A part-time IT manager reviews a list of user accounts, disabling dormant accounts and tightening over-broad sharing permissions

Best practicesSep 28, 20267 min read

Reviewing access to your Microsoft 365 accounts: where to start

Dormant accounts, folders shared with everyone, permissions that pile up: why your SME should regularly review Microsoft 365 access, and three simple steps to begin.

A small-business manager takes on the security-lead role among her many responsibilities, a security badge beside her

AwarenessSep 21, 20267 min read

The security officer role: what a CISO does, and how to cover it without one

Without a full-time CISO, a Swiss SME still has to cover the security officer role. What it involves — technical, educational, judgment — and three steps to own it.

A small team standing together forms a first line of defence in front of the company's data, colleagues confident and valued

AwarenessSep 14, 20267 min read

Security awareness: your people are the first line, not the weak link

Why your employees are your cybersecurity's first line of defence, not the weak link to blame. Three security awareness habits to set up this week.

A parent and a child at home in the evening looking together at a smartphone to set up its safety options

AwarenessSep 7, 20268 min read

Teaching your kids and teens cybersecurity at home

Passwords, phishing, privacy: the habits your children learn at home also protect your business. A calm, practical guide for a Swiss SME.

A freelancer works alone at a co-working desk, securing her own laptop and phone, with no IT team

Best practicesAug 31, 20267 min read

Cybersecurity for freelancers and the self-employed: the essentials

Alone with your inbox, your backups and your passwords? Freelance cybersecurity comes down to three realistic habits — no budget, no IT department.

An authorised ethical security tester, wearing a visible access pass, probes a company's digital lock with permission to find weak points

ThreatsAug 24, 20267 min read

Ethical hackers and red teams: what a penetration test reveals about your business

Ethical hacker, red team, penetration test: what an authorised attacker reveals about your Swiss SME's security, and where to start without being a large company.

A line-up of cybersecurity professionals, each shown with an emblem of their role: monitoring a screen, testing a lock, advising with a clipboard

AwarenessAug 17, 20267 min read

Cybersecurity roles: who does what?

SOC analyst, pentester, CISO, consultant: a clear guide to cybersecurity roles so your SME knows exactly who to turn to.