Is your cybersecurity strategy just lip service or the backbone of your business strategy?

Prof. Patrick Krauskopf: "For me? It's the skeleton that holds the corporate body together. It's inconceivable in 2024 to treat cybersecurity as a secondary consideration. It goes far beyond protection – it's a matter of trust, integrity, and ultimately existence."

Tobias Gurtner: "Absolutely, Patrick. I see our cybersecurity strategy as the compass that guides us through the stormy waters of the digital world. It is deeply rooted in every aspect of our company, from product development to customer communication. Without a solid cybersecurity strategy, everything else is irrelevant."

How involved are executives and board members in developing and implementing the cybersecurity strategy?

Prof. Patrick Krauskopf: "As the chairman of the board of several publicly traded companies, I place great importance on our cybersecurity strategy not only meeting the latest international standards but also being visionary. It is our duty to ensure that we are not just reacting to threats but staying a step ahead."

Tobias Gurtner: "We foster a culture of vigilance where cybersecurity is not seen as a task, but as a privilege. By training and raising awareness at all levels, we ensure that cybersecurity is embedded in our company's DNA."

How do you navigate through the regulatory jungle without turning your cyber defense into a mirage?

Prof. Patrick Krauskopf: "With a sharp machete, metaphorically speaking. Compliance is an art, not an obstacle course. Through a clear strategy and ongoing collaboration with IT and legal experts, we ensure that our cyber defense is both robust and compliant."

Tobias Gurtner: "In this ever-changing landscape, adaptability is our greatest ally. By leveraging AI and machine learning, we turn threats into opportunities by detecting and neutralizing anomalies before they become problems. This is not a mirage, but our reality."

How do you adapt your risk management strategies to meet the constantly changing threats in the cyber landscape, and what role does continuous education and awareness of your employees play?

Prof. Patrick Krauskopf: "At the core of our risk management strategy is flexibility. Given the dynamic nature of cyber threats, it is essential to continuously evaluate and adjust our defense measures. We place a strong emphasis on the education and awareness of our employees, as the human component is often the weakest link in the security chain. Through regular training and awareness programs, we ensure that our team is not only aware of the latest threats but also knows how to respond in the event of an attack. This proactive and holistic approach allows us to effectively minimize risks and enhance our resilience to cyber attacks."

Tobias Gurtner: "Our response to the evolving cyber threat landscape is twofold: on the one hand, the continuous adaptation and optimization of our technical protective measures, and on the other, the promotion of a strong security culture within the company. The continuous education and sensitization of every employee are invaluable. We not only implement regular training on security awareness but also integrate simulations of phishing attacks and other threat scenarios into our daily routine. This helps us to create an atmosphere of vigilance where security awareness and practices become part of everyday actions. By considering every employee as an active participant in our risk management, we significantly increase the overall resilience of our company against cyber threats."

Technology Hype vs. Security Imperative: How do you balance innovation and investment in cyber resilience?

Prof. Patrick Krauskopf: "Balancing innovation and security is a challenge. For every new technological marvel we introduce, we ensure it strengthens our fortress, not weakens it. Innovation serves security, not the other way around."

Tobias Gurtner: "It's about making smart choices. In the world of Zero Trust and advanced IAM systems, every investment is an opportunity to strengthen our defenses. AI and machine learning are not just tools, but guardians at the threshold of the next generation of cyber resilience."

How do you adjust your cybersecurity investments to ensure an optimal cost-benefit ratio, and how do you decide which technologies are right for your company's security?

Prof. Patrick Krauskopf: "As a board member, strategic foresight and cost control in cybersecurity are essential. We rely on careful planning that assesses both the effectiveness of the technology and its compliance with legal requirements. By proactively weighing initial and long-term costs against the protection needs of our critical infrastructures, we ensure that each investment not only closes short-term gaps but also creates long-term value."

Tobias Gurtner: "Our approach in cybersecurity builds on existing systems. Through our advanced Cyber Security Evaluation Tool, we gain a detailed overview of the current risk profile and derive precise measures from it. This tool uses state-of-the-art statistical analyses and takes into account both the likelihood and the potential impacts of security breaches."

Discover more about our vision and how we see cyber resilience at the heart of our strategy.