IT-Security must be set individually for each company – depending on the threat situation, infrastructure, users, etc. – therefore a general answer is not possible. However, every company should have assessed and secured the six elements of IT-Security listed above for itself. Investments must be tailored to guarantee a maximum added value for the protection.

A modern firewall combined with up-to-date endpoint protection is certainly a good starting point – but the topic of IT-Security must be viewed holistically. A high level of protection can only be achieved if all relevant elements are protected. However, it must be assessed individually which investments really add value.

Not necessarily. Often the security of your IT can be increased significantly with existing security solutions – it depends on the correct configuration and relevant rules. In addition, employee empowerment is an essential factor that cannot simply be “bought”.

Unfortunately, many attacks on companies are not targeted. For example, in the case of phishing attacks, emails are sent to thousands of recipients, an inattentive employee is enough and your systems or data are already affected.