Protect what holds your business together digitally.
Clear guidance on cyber insurance, technical safeguards and incident help for freelancers, small businesses and online shops in Germany.
Practical protection
For small businesses, a few consistently applied basics matter most.
MFA and admin rights
Multi-factor sign-in for every account, admin rights only where needed.
Backups against ransomware
Separate, regularly tested backups that attackers cannot encrypt too.
Prevent invoice fraud
Always confirm changed bank details and urgent payment requests by call-back.
Updates
Update operating systems, shop software and plugins promptly, with a clear owner.
Train your team
Short exercises and a simple way to report suspicious messages.
Incident plan
Prepare roles, contacts and business continuity steps in writing.
Selected partner offer
Hiscox CyberClear – standalone cyber insurance for businesses in Germany
Provider and insurer: Hiscox
CyberClear is a standalone cyber policy, not an add-on to liability insurance. Please check modules, turnover thresholds, limits and excesses in Hiscox's current offer and terms. Available for the German market.
One partner offer among several on the market – no 'best in test' or market-leader claim and no personal advice. How we select and fund
- Review cover together with limits, exclusions and obligations
- Application and risk assessment happen with the provider
- Technical precautions remain essential
Guides
All guides- Preparing backups against ransomwareSeparation, immutability and regular restore tests for small businesses.
- Preventing invoice fraud and CEO fraudHow call-backs and clear payment approvals protect against fake invoices and fake instructions from management.
- Cyber insurance for businesses: benefits, modules and limitsProduct-neutral: own losses, third-party claims, assistance and business interruption – and which points to check when comparing cyber policies in Germany.
- Cyber insurance or IT liability: what’s the difference?For IT service providers and freelancers in Germany: what IT professional liability and cyber insurance typically cover, where they overlap and what to check in the contract.
- Applying for cyber insurance: which IT security questions may be asked?Which security topics insurers in Germany may ask about, why truthful answers matter and how application questions differ from contractual obligations.
- Cloud outage: how businesses prepare for disruptionWhat to do if Microsoft 365, Google Workspace or your key SaaS system goes down? Map dependencies, plan emergency operations, set a recovery order.
- Security awareness in a small business: training staff sensiblyHow to introduce cybersecurity training in a small team in practice: content, a simple programme, reporting routes and a no-blame culture.
- Prioritising security updates: what small businesses should patch firstCan’t update everything at once? A clear prioritisation by exploitation, exposure and criticality – plus how to handle legacy systems.
- Choosing an IT or security provider: what small businesses should look forHow to recognise a suitable IT or security provider: clarify needs, check scope and responsibilities, control admin access, prepare for switching.
- Personal data breach: when do you have to notify?When a personal data breach must be notified to the supervisory authority in Germany/the EU, when affected people must be informed and why every breach should be documented.
- Using AI tools safely at work: rules for employeesWhich rules your team needs for ChatGPT, Copilot, Gemini and other AI tools: risks, a simple usage policy, human review and AI literacy under Art. 4 of the EU AI Act.
- Prioritising a cybersecurity budget: what small businesses should invest in firstHow small businesses with a limited budget can prioritise security measures: baseline protection first, then extended protection – and what can be solved without extra cost.
News
- TrainingSource date: 30 Sep 2026Cybersecurity Month focuses on workplace skillsFor European Cybersecurity Month, ENISA highlights knowledge and preparedness at work.
- Provider updateSource date: 29 Sep 2026Hiscox opens CyberClear Plus to more businessesHiscox is opening CyberClear Plus to larger businesses and expanding its Norton package.
- Browser securitySource date: 23 Sep 2026Chrome security advisory highlights the importance of updatesAn authority advisory flagged vulnerabilities in Chrome for Desktop and recommended applying available updates.
Act in an incident
During an ongoing incident, a measured response matters. Taking out new insurance does not cover losses that have already occurred.
- 01Bring in professional IT or incident response help
- 02Notify your existing insurer and follow its instructions
- 03Preserve evidence; don't rebuild systems hastily
- 04Check reporting duties, e.g. to the data protection authority
Frequently asked questions
What is business cyber insurance?
Insurance that, depending on the plan, can cover first-party losses (such as recovery or business interruption), third-party claims and incident assistance. Scope and limits are set out in the provider's terms.
Does a freelancer need cyber insurance?
It depends on how much your work relies on data, accounts and systems and what an outage would mean. We offer general guidance, not a personal recommendation.
Does insurance replace technical security?
No. Insurers usually expect basic precautions such as backups, updates and multi-factor sign-in. Missing precautions may limit cover.
What should we do first after a cyber attack?
Act calmly, don't wipe affected systems hastily, involve professional IT or incident response help and follow your insurer's instructions if you have a policy. Check reporting duties, for example under GDPR.
Does Cyberschutz.io advise businesses individually?
No. We provide general information and refer to selected partner offers. Risk assessment, quotes and applications are handled by the provider.