The CyberPassport blog

Cybersecurity explained simply, for Swiss SMEs.

Illustration: the head of an accounting firm reviews a file, between a "compliant" stamp and a switched-off alarm

AwarenessAug 3, 20267 min read

Cybersecurity myths (5/5): being compliant is not being safe

Final part of the series: compliance is not security, and "we'll deal with it if it happens" is not a plan. Two myths to unpack, three moves for a Swiss SME.

Illustration: a trustee firm partner rereads a suspicious email while IT security rests on an external provider.

AwarenessJul 27, 20269 min read

Two cybersecurity myths that put your SME at risk (4/5)

Two myths that expose Swiss SMEs: believing your IT provider handles everything, and assuming a cyberattack would be obvious. The habits to put in place this week.

Illustration: an accounting firm's desk with a password on a sticky note and client files hosted in the cloud.

AwarenessJul 20, 20267 min read

Cybersecurity myths (3/5): the strong password and the cloud

Is a complicated password enough? Is the cloud riskier than your own server? We take apart two cybersecurity myths that leave Swiss SMEs exposed.

Illustration: an SME manager facing a suspicious email, with an unplugged backup drive in the background

AwarenessJul 13, 20267 min read

Cybersecurity: two myths that leave your SME exposed (2/5)

Two cybersecurity myths — “my team pays attention” and “we have backups” — and the concrete steps to close these blind spots in a Swiss SME.

Illustration: a Swiss SME facing common cybersecurity myths, caught between a false sense of security and real threats.

AwarenessJul 6, 20267 min read

Cybersecurity myths: two beliefs that expose your SME (1/5)

Too small to interest a hacker? Antivirus is enough? Two cybersecurity myths that expose Swiss SMEs, debunked, with three concrete steps to take this week.

A person moves through a series of doorways in an office, verifying her identity at each one before continuing: access checked every time

Best practicesJun 29, 20267 min read

Zero Trust: a buzzword, or a real strategy for an SME?

Zero Trust isn't software you buy, it's a principle: never trust by default, always verify. What a Swiss SME actually gains from it, in plain terms.

A protective umbrella over a small business's laptop and files, one corner left exposed, an insurance contract with fine print nearby

ComplianceJun 22, 20267 min read

Cyber-insurance: what it really covers (and its limits)

What a cyber-insurance policy covers and excludes for a Swiss SME, and why it demands baseline security hygiene. Three concrete steps to set up this week.

A split scene: a data centre tended by the provider on one side, a manager securing her own accounts on the other, a dividing line between them

Best practicesJun 15, 20267 min read

Cybersecurity and the cloud: who is responsible for what?

In the cloud, the provider secures the infrastructure and you secure your access and your data. The shared responsibility model, explained simply, plus three steps for your SME.

An office desk split between light and shadow: an approved laptop in the light, personal phones and unofficial apps in the shadow

Best practicesJun 8, 20267 min read

Shadow IT: the tools your team uses without you knowing

Shadow IT means the digital tools your team uses without approval. What it risks for your data, and three simple steps to take back control.

Illustration: an SME manager gets a security alert on her screen and picks up the phone to respond

Best practicesJun 1, 20267 min read

Detect and respond: advanced cybersecurity within an SME's reach

A Swiss SME has no security team watching over it day and night. Here is how to detect and respond to an attack with the means at hand, in three moves.

A small-business owner views a screen mapping the main threats around a small Swiss company: phishing, a padlock, a fake invoice

ThreatsMay 25, 20268 min read

Cyber Threats: The Main Risks Facing Swiss SMEs

Phishing, CEO fraud, ransomware, data leaks: a clear overview of the threats that really hit Swiss SMEs, and where to start.

A small-business owner writes a simple password rule on a notepad, an easy-to-remember passphrase, a password manager open on her laptop

Best practicesMay 18, 20267 min read

Password policy: the principles that actually work

Length over complexity, a password manager and two-factor authentication: the principles of a password policy that survives real life in a Swiss SME.