einfachISO

Five Flawed Assumptions Expose German SMEs to Cyberattacks

Five Flawed Assumptions Expose German SMEs to Cyberattacks

Berlin – November 09, 2026 -- Cyber risk has risen in every industry group examined by Mittelstand-Digital, even though cybersecurity levels improved in eight of ten groups, according to the study cited by information security consultant Joachim Reinke of einfachISO. He identifies five recurring misjudgments that leave German mid-sized companies exposed.

Automated scans make small companies targets by default

Many SMEs assume criminals ignore them. Attackers often deploy automated programs that search the internet for known vulnerabilities, test stolen credentials and send phishing emails in bulk. Criminals typically assess a victim's value only after breaching it.

Missing ISO 27001 Certificate Can Eliminate Vendors Before Bidding

Missing ISO 27001 Certificate Can Eliminate Vendors Before Bidding

Berlin – November 03, 2026 -- IT service providers, software companies and SaaS vendors without an ISO 27001 certification can be dropped during supplier qualification at large clients, before price, offer or references are weighed, according to Joachim Reinke, information security expert and founder of einfachISO.

Large buyers screen vendors on formal proof before negotiations begin

Corporations and larger mid-sized companies often check suppliers against formal requirements ahead of contract talks. These include insurance, data protection rules and financial indicators, and in some cases certifications. Reinke says the costliest lost contract can be one management never learns about, because the company was filtered out before selection started.