IT Security Deficits in German SMEs: Alarming Gaps Revealed

The “Praxisreport Mittelstand 2021/22” by Deutschland sicher im Netz e.V. (DsiN) reveals severe weaknesses in IT security among small and medium-sized enterprises (SMEs). Even basic protection measures are often missing — putting competitiveness and business continuity at risk.

Digital Vulnerability in German SMEs

Under the patronage of the Federal Ministry for Economic Affairs and Climate Action (BMWK), DsiN has published its seventh report on the cybersecurity status of German SMEs.
The Praxisreport Mittelstand 2021/22 is based on over 1,300 company surveys and analyzes the effects of cyberattacks, the impact of COVID-19, and growing digitalization risks.
The findings paint a concerning picture of how unprepared many companies remain despite increased awareness.

Key Findings: Security Gaps and Risk Awareness

According to DsiN, 43% of companies neglect essential software and security updates.
64% lack measures for attack detection, and 34% operate without an IT emergency plan.
One in four organizations does not promote IT security awareness among employees.
32% consider inadequate IT security a fundamental business risk — 11% even see their existence endangered.

While 86% acknowledge their digital vulnerability, the report shows little progress compared to the previous year.
The awareness exists — but implementation remains weak.

Small Businesses Often Left Alone

Although the share of SMEs relying on external IT security experts increased slightly from 20% to 27%, smaller firms still struggle the most.
During the pandemic, the adoption of digital technologies — especially cloud solutions — accelerated.
However, 43% of companies using cloud services depend solely on the provider’s built-in protection.
This lack of independent safeguards exposes critical data and operations to avoidable risks.

Fewer but More Severe Cyberattacks

42% of SMEs have been victims of at least one cyberattack, a slight drop from the previous report.
However, the severity has grown: 76% experienced noticeable damage, while 4% faced existential threats.
These findings mirror the BKA’s Federal Cybercrime Report 2021, which highlights a sharp rise in ransomware incidents.

centron’s Perspective: Proactive Security is Key

At centron, we observe similar trends among SMEs across industries.
Cloud adoption is rising, but without structured cybersecurity strategies, companies remain exposed.
Our Managed Firewall Services and Backup & Recovery Solutions are designed to close these critical gaps — compliant, scalable, and ISO 27001 certified.

Take Action Before It’s Too Late

IT security is not a luxury — it’s a necessity for every business.
centron helps SMEs establish reliable protection against ransomware, data loss, and downtime.
Secure your operations now and build digital resilience for the future.

➤ Get personal advice from our IT security experts

Source: Deutschland sicher im Netz e.V. – Praxisreport Mittelstand 2021/22