Guides for your business

Each guide starts with a short answer, walks you through practical steps and sets out limits and sources.

A cyber incident: first steps for your businessStay calm and act in an orderly way: document the incident, disconnect affected systems from the network rather than wiping them, bring in professional IT or incident response help and – if you have a policy – inform your insurer early. At the same time, check your legal reporting duties.Read guide

Preparing backups against ransomwareSeparation, immutability and regular restore tests for small businesses.
Preventing invoice fraud and CEO fraudHow call-backs and clear payment approvals protect against fake invoices and fake instructions from management.
Cyber insurance for businesses: benefits, modules and limitsProduct-neutral: own losses, third-party claims, assistance and business interruption – and which points to check when comparing cyber policies in Germany.
Cyber insurance or IT liability: what’s the difference?For IT service providers and freelancers in Germany: what IT professional liability and cyber insurance typically cover, where they overlap and what to check in the contract.
Applying for cyber insurance: which IT security questions may be asked?Which security topics insurers in Germany may ask about, why truthful answers matter and how application questions differ from contractual obligations.
Cloud outage: how businesses prepare for disruptionWhat to do if Microsoft 365, Google Workspace or your key SaaS system goes down? Map dependencies, plan emergency operations, set a recovery order.
Security awareness in a small business: training staff sensiblyHow to introduce cybersecurity training in a small team in practice: content, a simple programme, reporting routes and a no-blame culture.
Prioritising security updates: what small businesses should patch firstCan’t update everything at once? A clear prioritisation by exploitation, exposure and criticality – plus how to handle legacy systems.
Choosing an IT or security provider: what small businesses should look forHow to recognise a suitable IT or security provider: clarify needs, check scope and responsibilities, control admin access, prepare for switching.
Personal data breach: when do you have to notify?When a personal data breach must be notified to the supervisory authority in Germany/the EU, when affected people must be informed and why every breach should be documented.
Using AI tools safely at work: rules for employeesWhich rules your team needs for ChatGPT, Copilot, Gemini and other AI tools: risks, a simple usage policy, human review and AI literacy under Art. 4 of the EU AI Act.
Prioritising a cybersecurity budget: what small businesses should invest in firstHow small businesses with a limited budget can prioritise security measures: baseline protection first, then extended protection – and what can be solved without extra cost.