Cyber Risk Compendium

Overview

The English version of this page is the original text. Automatic translations into French, Italian and German are provided for your convenience. If you find errors in the translations, please notify us on security-compendium@linkyard.ch and we will do our best to fix it.

In today’s increasingly digital world, cybersecurity is critical for small and medium-sized enterprises (SMEs). While large corporations often make headlines when attacked, SMEs are frequently targeted because they tend to have fewer resources dedicated to protecting their systems. Cybercriminals exploit this vulnerability, using methods like phishing, ransomware, or exploiting unpatched software to gain access to sensitive data or disrupt operations. A single successful cyberattack can lead to severe financial losses, reputational damage, and legal consequences—threatening the survival of a small business.

Moreover, SMEs are increasingly integrated into global supply chains and digital ecosystems, making them attractive stepping stones for attackers targeting larger partners. As regulations such as the GDPR or NIS2 require businesses of all sizes to safeguard personal and operational data, cybersecurity is no longer optional but a strategic necessity. By investing in basic security measures, training employees, and understanding their digital risks, SMEs can build resilience, protect their assets, and maintain trust with customers and partners.

The intent of this compendium is, that we hand over practical guidance on cyber risk management.

Tutorial

A pratical guide to cyber risk management for beginners

Glossary

Cyber and risk management terminology

Stakeholder

Who are commonly involved roles and stakeholders?

Assets

What are common assets that might need protection?

Threat agents

What sources of threats do we need to consider?

Threats

What kinds of threats may affect our assets?

Risk

What are common risks?

Control

What controls may mitigate risks?

Attack vectors

What do often cited attack vector terms mean?

Vulnerability

Where can I learn about vulnerabilities?