{"id":166022,"date":"2026-09-16T10:00:00","date_gmt":"2026-09-16T08:00:00","guid":{"rendered":"https:\/\/e3mag.com\/?p=166022"},"modified":"2026-08-31T15:52:10","modified_gmt":"2026-08-31T13:52:10","slug":"overestimated-cybersecurity-capabilities-a-false-sense-of-security-among-german-small-and-medium-sized-enterprises","status":"publish","type":"post","link":"https:\/\/e3mag.com\/en\/ueberschaetzte-cyberabwehrkraefte-truegerische-sicherheit-im-deutschen-mittelstand\/","title":{"rendered":"Overestimated Cybersecurity Capabilities: A False Sense of Security Among German Small and Medium-Sized Businesses"},"content":{"rendered":"<p>Benchmarks from PwC analyses show that the actual maturity levels of security are significantly lower than companies\u2019 self-assessments. At the same time, IT security budgets often fail to address the current threat landscape and are frequently insufficient to meet rising demands. Furthermore, attackers are increasingly focusing on the supply chain, as vulnerabilities among service providers and partners offer attractive targets.<\/p>\n\n\n\n<p>The use of artificial intelligence is fundamentally changing the threat landscape by providing both attackers and defenders with new capabilities. In addition, external service providers are increasingly becoming an integral part of modern security architectures and are taking on important roles in protecting IT infrastructure.<\/p>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Sharp Increase in Data Breaches<\/h2>\n\n\n\n<p>The discrepancy between people\u2019s subjective sense of security and the lower level of protection\u2014as evidenced by maturity analyses\u2014is particularly critical given the current threat landscape. For example, the recently published PwC study \u201eThreat Dynamics\u201c shows that there has been a massive increase in data breaches and ransomware activity in Germany. According to the study, small and medium-sized enterprises (SMEs) are particularly vulnerable because many companies are still in the process of transitioning to zero-trust architectures, and user accounts without consistent access controls across all network boundaries remain a critical vulnerability.<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-9d6595d7 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"400\" src=\"https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/zitat_web_rittmann_uwe_pwc.jpg\" alt=\"\" class=\"wp-image-166026\" srcset=\"https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/zitat_web_rittmann_uwe_pwc.jpg 300w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/zitat_web_rittmann_uwe_pwc-100x133.jpg 100w, https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/zitat_web_rittmann_uwe_pwc-9x12.jpg 9w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<p><em>\u201eAs the driving force behind the German economy, small and medium-sized businesses are<\/em><br><em>\u201dUnfortunately, it's a highly lucrative target for attackers.\"<\/em><\/p>\n\n\n\n<p><strong>Uwe Rittmann,<\/strong><br>Head of Family-Owned Businesses and Small and Medium-Sized Enterprises,<br>PwC Germany<\/p>\n<\/div>\n<\/div>\n\n\n\n<p>The threat to small and medium-sized enterprises (SMEs) is also confirmed by the BKA\u2019s 2025 Situation Report, which states that 90 percent of digital extortion victims are SMEs. \u201eAs the engine of the German economy, SMEs are unfortunately a highly lucrative target for attackers. The dilemma is that while we see significant progress in digitalization at many companies, this not only increases their potential for innovation but also expands their attack surface,\u201c said Uwe Rittmann, Head of Family Businesses and SMEs at PwC Germany.<\/p>\n\n\n\n<p>While the majority rate their own maturity level as advanced, the benchmarks used for comparison paint a different picture. Self-assessments are consistently one to two maturity levels higher than the benchmarks. The latter are based on actual analyses that include, among other things, technical inspections of the IT infrastructure, reviews of existing security documentation, and interviews with the responsible departments.<\/p>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Investment volumes are too low<\/h2>\n\n\n\n<p>\u201eCompanies systematically overestimate their own cyber defense capabilities. This is also reflected in security budgets that are, in some cases, disproportionately low,\u201c says PwC IT security expert Nial Moore. While an annual budget of 50,000 euros may still be appropriate for small businesses with fewer than 200 employees, it is not sufficient to adequately address the risks in larger organizations. Nevertheless, even many significantly larger companies invest less than 50,000 euros in their IT security\u2014which the expert considers a high risk: \u201eSuch budgets are not sufficient for professional monitoring or tested emergency procedures. This is cutting corners in the wrong place, because the potential damage from even supposedly minor incidents generally far exceeds the investment required for adequate protection.\u201c (Source: PwC)<\/p>\n\n\n\n<p><\/p>","protected":false},"excerpt":{"rendered":"<p>Artificial intelligence and digital technologies will be at the top of the agenda for German companies in 2026. As technology evolves, the importance of cybersecurity is also growing. At the same time, issues such as performance and competitiveness are coming into sharper focus.<\/p>","protected":false},"author":2368,"featured_media":166024,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"pmpro_default_level":"","footnotes":""},"categories":[6,44620],"tags":[44762,44761,20346,44758,44766,6174,44764,44765,3569,44763,3442,5438,3862,44759,44760],"coauthors":[39720],"class_list":["post-166022","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wirtschaft","category-mag-26-09","tag-cyberabwehr","tag-cyberrisiken","tag-cybersecurity","tag-datenlecks","tag-incident-response","tag-it-sicherheit","tag-it-sicherheitsbudget","tag-ki-in-der-cybersecurity","tag-kmu","tag-lieferkettensicherheit","tag-mittelstand","tag-pwc","tag-ransomware","tag-sicherheitsreifegrad","tag-zero-trust","pmpro-has-access"],"acf":[],"featured_image_urls_v2":{"full":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"thumbnail":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-150x150.jpg",150,150,true],"medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-400x180.jpg",400,180,true],"medium_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-768x346.jpg",768,346,true],"large":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"image-100":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-100x45.jpg",100,45,true],"image-480":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-480x216.jpg",480,216,true],"image-640":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-640x288.jpg",640,288,true],"image-720":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-720x324.jpg",720,324,true],"image-960":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-960x432.jpg",960,432,true],"image-1168":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"image-1440":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"image-1920":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"1536x1536":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"2048x2048":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"trp-custom-language-flag":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-18x8.jpg",18,8,true],"bricks_large_16x9":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"bricks_large":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"bricks_large_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc.jpg",1000,450,false],"bricks_medium":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-600x270.jpg",600,270,true],"bricks_medium_square":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-600x450.jpg",600,450,true],"profile_24":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-24x24.jpg",24,24,true],"profile_48":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-48x48.jpg",48,48,true],"profile_96":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-96x96.jpg",96,96,true],"profile_150":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-150x150.jpg",150,150,true],"profile_300":["https:\/\/e3mag.com\/wp-content\/uploads\/2026\/08\/2609_wi_pwc-300x300.jpg",300,300,true]},"post_excerpt_stackable_v2":"<p>K\u00fcnstliche Intelligenz und digitale Technologien stehen 2026 ganz oben auf der Agenda deutscher Unternehmen. Mit dem technologischen Wandel w\u00e4chst auch die Bedeutung von Cybersecurity. Gleichzeitig r\u00fccken Themen wie Leistungs- und Wettbewerbsf\u00e4higkeit st\u00e4rker in den Fokus.<\/p>\n","category_list_v2":"<a href=\"https:\/\/e3mag.com\/en\/category\/wirtschaft\/\" rel=\"category tag\">Wirtschaft<\/a>, <a href=\"https:\/\/e3mag.com\/en\/category\/mag-26-09\/\" rel=\"category tag\">MAG 26-09<\/a>","author_info_v2":{"name":"E3 Magazine","url":"https:\/\/e3mag.com\/en\/author\/e3_magazin\/"},"comments_num_v2":"0 comments","_links":{"self":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/166022","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/users\/2368"}],"replies":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/comments?post=166022"}],"version-history":[{"count":3,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/166022\/revisions"}],"predecessor-version":[{"id":166037,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/posts\/166022\/revisions\/166037"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media\/166024"}],"wp:attachment":[{"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/media?parent=166022"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/categories?post=166022"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/tags?post=166022"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/e3mag.com\/en\/wp-json\/wp\/v2\/coauthors?post=166022"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}