Small companies are particularly at risk when it comes to cyber attacks - and at the same time are often undersupplied with resources, expertise and guidance. With DIN SPEC 27076, also known as the Cyber Risk Check, a practical standard is now available that addresses precisely this issue: realistic, efficient and eligible for funding.
Ransomware, phishing, data theft - the threat situation is alarming. According to Bitkom, the annual damage caused by cyber attacks in Germany amounts to over 178 billion euros. Small and micro businesses are particularly affected. 88% were attacked last year, 74% reported digital data theft.
However, many of these companies do not have their own IT department, hardly any time and limited budgets. Traditional standards such as ISO 27001 or BSI basic protection are often too complex and costly.
The ‘mIT Standard sicher’ project has developed a new consulting standard - especially for small businesses. DIN SPEC 27076 offers:
The focus is not on completeness, but on relevance and feasibility. The aim is to close the biggest gateways - especially against ransomware and phishing.
The process is simple and efficient:
The process can be carried out online, takes just a few hours and is eligible for funding - e.g. via the BAFA programme ‘Promotion of business consultancies for SMEs’.
Anyone wishing to offer the Cyber Risk Check needs:
After successful training, a listing in the BSI service provider directory is possible - over 700 providers are currently registered there.
The cyber security transfer centre for SMEs offers another powerful tool in the form of CYBERsicher emergency assistance: Companies can request help quickly and anonymously in the event of a suspected attack
and receive feedback from qualified service providers in the shortest possible time.
________________________________________
The cyber risk check is not a gold standard - but a seahorse of cyber security: a well-founded, practical introduction for small companies. It provides orientation, lowers barriers to entry and makes progress measurable. For many companies, it is the first step towards a more secure digital future.
