Cybersecurity · Swiss SMEs
Cybersecurity for Swiss SMEs
Security audit, ransomware protection and secured access, with a prioritised action plan.
The most common security gaps in SMEs
Most SMEs have no security officer. These situations come up often during an audit.
- 01
You couldn't say whether you're under attack
No monitoring, no alerts. An intrusion can last for weeks without anyone noticing, until the day your files are encrypted.
- 02
Your backups have never been tested
You have "something" that backs up your data. But in the event of ransomware, an untested backup, or one connected to the network, will not save you.
- 03
Microsoft 365 is left in its default configuration
No widespread MFA, sharing rules that are too open, accounts of former employees still active. The number-one entry point for attacks.
- 04
No one has trained your staff
The phishing email remains the leading attack vector. Without awareness training, a single click is enough to compromise the entire company.
Security in several layers
Awareness, patched devices, controlled access, two-factor authentication: each layer stops part of the attacks. An attempt that gets past the first runs into the next.
These layers combined are what protect your data. We start with the layers you are missing most.
The measures we put in place
We fix the most exposed gaps first, then strengthen security step by step, without adding tools for the sake of it.
Security audit
Inventory of vulnerabilities, testing of your configurations, review of access. You leave with a clear report sorted by priority and real risk.
Anti-ransomware protection
Immutable backups, disconnected from the network and tested regularly. The only real insurance against the encryption of your data.
Microsoft 365 hardening
Widespread MFA, tightened sharing rules, conditional access, removal of orphaned accounts. We close the doors left open.
Workstation and network hardening
Managed antivirus, firewall, disk encryption, segmentation. We reduce the attack surface without complicating your teams’ daily work.
Identity and access management
Strong passwords via a manager, the principle of least privilege, regular review of who accesses what.
Team awareness training
A practical session to learn how to spot phishing and adopt the right reflexes. Security is not only about technology.
Audit deliverables and pricing
Audit deliverables
- A written audit report, sorted by level of risk and priority.
- A costed, realistic action plan, spread over time if needed.
- Critical fixes applied immediately (MFA, orphaned accounts, backups).
- Documentation of your security posture, reusable for your clients or insurers.
How it is billed
Security audit, fixed fee
1,500 – 4,000 CHF
Depending on the depth of the audit. Fixed fee defined on request after scoping, with no fixed-term commitment.
Continuously managed security
MFA, hardening, tested backups and updates integrated into a monthly per-employee fee, with a single point of contact.
See AlpenCare pricingAudit or one-off engagement
Security audit, upgrade or targeted fix, within IT Projects.
See IT ProjectsOn-site and remote work in French-speaking Switzerland
Based in Chavannes-près-Renens, we work on site in Lausanne and throughout the canton of Vaud, and remotely in the rest of French-speaking Switzerland. Your contacts speak your language and work on Swiss time.
- Chavannes-près-Renens Head office
- Lausanne 4 km
- Morges 6 km
- Vevey 22 km
- Yverdon-les-Bains 28 km
- Montreux 28 km
- Nyon 31 km
- Fribourg 54 km
km as the crow flies
Frequently asked questions about SME cybersecurity
Can’t find your answer?
Ask us your question01 How is cybersecurity billed for an SME?
Two options. For continuously managed security (MFA, hardening, tested backups, updates), it is included in the monthly per-employee fee of AlpenCare managed IT. For a one-off engagement (security audit, upgrade), it is a fixed fee defined on request as part of IT Projects, usually between CHF 1,500 and CHF 4,000 depending on the depth of the audit, with no fixed-term commitment. In both cases, you know the amount before we start: no hourly billing that spirals out of control.
02 What can you actually do against ransomware?
Protection rests on three pillars: immutable backups disconnected from the network (tested regularly), a reduction of the attack surface (MFA, hardening, updates) and team awareness of phishing. No miracle solution, but a combination that makes an attack much harder and, above all, recoverable.
03 Does my data stay in Switzerland?
For client services we operate directly, such as backups or certain managed services, we favour Swiss infrastructure such as Infomaniak. If your environment already depends on third-party tools, we document the constraints and propose the possible alternatives.
04 Do you need to be a managed-IT client to get a security audit?
No. The cybersecurity audit is an independent, one-off engagement. Many SMEs discover us through an audit before possibly moving to AlpenCare managed IT for ongoing support. No commitment is required.
05 Is cybersecurity linked to Swiss Data Protection Act compliance?
They are closely linked. The revised Swiss Data Protection Act requires "adequate" data security. A security audit covers a large part of the Act’s technical requirements. For the organisational and documentary aspects, we also offer a dedicated data-protection audit.
First step
Request a security audit
Request a security audit. You leave with a clear assessment and a costed action plan, with no commitment.
David Cunha
Founder and technical director
Chavannes-près-Renens