Companies and authorities

Cyberattacks affect micro-enterprises, too. Five essential measures can significantly improve your cybersecurity levels: multi-factor authentication, daily backups, updates, caution when opening emails, and secure passwords.

Cyberattacks can affect any business or public authority, regardless of size, sector or technical expertise. The consequences range from temporary system failures and the loss of confidential data to liability issues and reputational damage. Effectively protecting against such threats therefore requires both technical and organisational measures that work in tandem. The following section outlines how businesses and public authorities can take targeted steps to tighten their cybersecurity.

The NCSC provides standards and methods to improve cyber resilience: the Cybersecurity and Resilience Method (CSRM) for process security, ICT minimum standards for critical infrastructure and, in future, an assessment tool that will enable organisations to measure their cyber resilience maturity levels.

Specific protective measures complement baseline protection; they are determined based on identified risks and consistently implemented to specifically protect information assets, systems, and data against relevant cyber threats.

Cyber security also involves collaboration with IT service providers, cloud providers and other external partners. The NCSC offers a number of resources to ensure that this collaboration is successful.