Do good, but don’t talk about it: Companies feel well positioned when it comes to cyber protection, but don’t communicate this

According to figures from the Sophos management study, the growing threat of cyber attacks and the resulting possible economic consequences have prompted most companies in Germany, Austria and Switzerland to invest even further in IT security. As a result, most companies are satisfied with the state of their cyber protection. In Switzerland, most of those surveyed (80 percent) feel well (66 percent) or very well (14 percent) prepared against cyber attacks. In Austria people are also satisfied with their cyber protection; 16 percent of companies here say they feel very well positioned, 58 percent say they feel good. Overall, Germany is a little more reserved. Although a majority here also confirms that their company is well positioned (49.3 percent) or very well (with the highest value of 18.9 percent) when it comes to cybersecurity, 25.4 percent only give it a mediocre value for your existing security. In Austria, however, only 16 percent of those surveyed rated it as “satisfactory” and in Switzerland only 14 percent rated it “satisfactory”.

Well positioned, but hardly any communication. Except in Switzerland.

Despite the generally good satisfaction with the existing cybersecurity infrastructure, companies in the DACH region are extremely cautious when it comes to communicating this aspect – and competitive advantage. Only 29 percent of German and 24 percent of Austrian companies actively communicate their cyber protection to customers and business partners. In Switzerland people are more active on this point, with 40 percent communicating their good cyber protection. Swiss companies integrate the communication of their cybersecurity directly into their contact with partners (28 percent) or customers (20 percent); 14 percent find this important aspect incorporated into their marketing communication and 10 percent of the Swiss bosses surveyed already do so during acquisition new employee pointed this out. In Germany, 8.5 percent of bosses mention the aspect of cybersecurity when recruiting personnel; in Austria, this point is of little importance in this context at only 2 percent. In this country, as well as in Austria, the company’s existing and actually well-rated IT security is communicated, if at all, primarily in contact with partners (Germany 14.9 percent, Austria 10 percent) or customers (Germany 17.4 percent, Austria 12 Percent).

About the survey:

On behalf of Sophos, Ipsos surveyed 201 C-level managers from retail, service and manufacturing sectors in Germany and 50 each in Austria and Switzerland about IT security in their companies.