{"id":31323,"date":"2026-09-11T07:00:02","date_gmt":"2026-09-11T05:00:02","guid":{"rendered":"https:\/\/smecyberinsights.co.uk\/?p=31323"},"modified":"2026-09-15T11:52:02","modified_gmt":"2026-09-15T09:52:02","slug":"one-in-four-smes-very-high-cyber-risk","status":"publish","type":"post","link":"https:\/\/smecyberinsights.co.uk\/index.php\/2026\/09\/11\/one-in-four-smes-very-high-cyber-risk\/","title":{"rendered":"One in Four SMEs Faces Very High Cyber Risk and Why Basic Security Gaps Still Drive Attacks"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t
\"Partners1_NordVPN\"<\/figure><\/div>
\"Partners3_R3\"<\/figure><\/div>
\"Partners2_Zoho\"<\/figure><\/div>
\"Partners4_Plesk\"<\/figure><\/div>
\"Red_Button_Slider\"<\/figure><\/div>
\"ogo2\"<\/figure><\/div>
\"Securus<\/figure><\/div>\t\t\t<\/div>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"SME\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"https:\/\/www.securuscomms.com\/\"\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t
<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

SECURUS Communications Ltd<\/strong><\/p>\n

Securus<\/a> <\/strong>is a managed communications Operator, providing next-generation network infrastructure and value added services to Managed Hosting providers and the ‘cloud generation’\u200b of enterprises. Securus<\/a> <\/strong>priority is to offer communication services that represent excellent value for money and are backed by exceptional levels of support.<\/p>\n

Contact Securus<\/strong>
\nSecurus Communications Ltd
\nStation Road, Landmark house, Hook, England RG27 9HA, GB
\nT: Enquiries:\u00a003451 283457<\/span><\/a>\u00a0| Service Desk: 03451 283458<\/a>
\nSecurus on LinkedIn<\/a> | Securus on “X”<\/a> | https:\/\/securuscomms.com<\/a><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t

\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"One\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t
Image Credit: PV Productions via Magnific<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"Nord\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

Gibraltar:\u00a0 Friday, 11 September 2026 \u2013 07:00 CET<\/p>\n

One in Four SMEs Faces Very High Cyber Risk and Why Basic Security Gaps Still Drive Attacks
\n<\/strong>By: Iain Fraser<\/a>\u00a0\u2013\u00a0Cybersecurity Journalist
\n<\/a>Published in Collaboration with:
\nSecurus Communications Ltd
\n<\/a>SMECyberInsights.co.uk<\/a>\u00a0– First for SME Cybersecurity
\n<\/a>Google Indexed on: 110926 at 09:15 CET | SERPS: LLM<\/a>(AI) Google<\/a>
\n#CyberJourno #<\/em>CyberEssentials <\/em>#CyberResilience<\/em> #CyberSafe #CyberSecurity #Cybersecurity #NCSC #SME #SMECyberInsights #SMECybersecurity #SMECyberInsights <\/em>#ThreatIntelligence #Securus<\/em><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

One in Four SMEs Faces Very High Cyber Risk and Why Basic Security Gaps Still Drive Attacks <\/strong><\/p>\n

Small and medium-sized enterprises do not need to be reckless to become vulnerable. In many cases, they are simply under-resourced, unevenly protected, and carrying more digital exposure than their internal controls can comfortably support. That is what makes new SME cyber risk data so important. It turns general concern into something more useful: a clearer picture of where smaller firms are exposed and which weaknesses keep appearing.<\/p>\n

According to BOTECH\u2019s<\/a> report on the state of Cybersecurity in SMEs, based on analysis involving almost 1,000 SMEs, one in four SMEs is at very high risk of suffering a cyberattack. The findings also point to systemic weaknesses across access control, ransomware and malware exposure, and web application security.<\/p>\n

For SME leaders, this is not just a warning about threat volume. It is evidence that baseline protections are still missing in too many organisations.<\/p>\n

Why this finding matters<\/strong><\/p>\n

The phrase \u201cvery high risk\u201d can sound broad, but the underlying indicators are highly practical. BOTECH\u2019s analysis suggests that many SMEs are not failing because of one catastrophic gap. They are failing because several smaller weaknesses combine into a much larger attack surface.<\/p>\n

The report highlights several notable findings:<\/strong><\/p>\n

* 1 in 4 SMEs is at very high risk of suffering a cyberattack<\/p>\n

* 100% of SMEs are exposed in terms of access because of poor privilege management<\/p>\n

* less than 6% of companies have low exposure to ransomware and malware<\/p>\n

* only 5% audit their web applications or implement specialised web application firewalls<\/p>\n

Taken together, those findings suggest a familiar pattern in smaller businesses: partial controls in some areas, serious neglect in others, and very limited containment when an attacker gets in.<\/p>\n

Where SMEs are most exposed<\/strong><\/p>\n

The most striking theme in the BOTECH material is not just the presence of risk, but the unevenness of protection. Some businesses have adopted stronger defences, while others remain highly vulnerable in core areas.<\/p>\n

Access and privilege management<\/strong><\/p>\n

BOTECH states that 100% of SMEs in the study were exposed in the access stage because of poor privilege management. That is an important finding because attackers do not always need advanced tools if ordinary user access is weakly controlled.<\/p>\n

Poor privilege management can include:<\/strong><\/p>\n

* too many users with admin rights
\n* shared accounts
\n* weak offboarding of leavers
\n* excessive access across departments
\n* limited separation between standard and privileged accounts<\/p>\n

For SMEs, this raises a practical issue. Access control is often treated as background admin. In reality, it is one of the most important ways to prevent a minor compromise from becoming a serious incident.<\/p>\n

Ransomware and malware resilience<\/strong><\/p>\n

The report also notes that fewer than 6% of companies maintain low exposure to ransomware and malware. That is a sharp reminder that malware resilience is still weak across much of the SME market.<\/p>\n

This matters because ransomware risk is not just about being infected. It is about whether the business can:<\/p>\n

* stop malicious code from executing
\n* contain spread across devices and users
\n* recover cleanly from backups
\n* continue critical operations during disruption<\/p>\n

BOTECH also points out that fewer than 10% have adequate mechanisms to manage the final impact of serious incidents, which implies limited recovery capability when prevention fails.<\/p>\n

Web application and external security weakness<\/p>\n

Only 5% of SMEs in the study audit their web applications or deploy specialised firewalls for web apps. That is significant because internet-facing systems are often among the first things attacker\u2019s probe.<\/p>\n

For SMEs with websites, portals, booking tools, e-commerce systems, or customer logins, external weaknesses can create avoidable entry points. Even when the wider business feels secure internally, exposed applications can quietly widen the attack surface.<\/p>\n

What the wider pattern tells us<\/strong><\/p>\n

One of the most useful observations in the BOTECH analysis is that the problem is not simple uniform weakness. It is heterogeneity. Some areas may be reasonably covered, while others are left almost entirely exposed.<\/p>\n

That mixed posture is dangerous because it can create false confidence. An SME may have antivirus, backups, and staff training, yet still have:<\/p>\n

* weak privilege management
\n* poor web application security
\n* no network segmentation
\n* limited incident response capability
\n* insufficient visibility into suspicious activity<\/p>\n

In practice, attackers only need one neglected route that works.<\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\"One\t\t\t\t\t\t\t\t\t\t\t
<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

What SMEs should do now<\/strong><\/p>\n

The right response is not to chase every possible control at once. It is to strengthen the security basics that reduce the likelihood and impact of common attacks.<\/p>\n

Priority actions for SME leaders<\/strong><\/p>\n

* Tighten privilege management
\nReview who has administrative rights, remove unnecessary privilege, and separate day-to-day user accounts from elevated accounts.<\/p>\n

* Enforce MFA on critical systems<\/p>\n

* Apply multi-factor authentication to email, cloud platforms, finance tools, remote access, and administrator accounts.<\/p>\n

* Improve ransomware recovery capability<\/p>\n

* Maintain tested, protected backups, including offline or otherwise isolated copies, and ensure recovery procedures are documented and rehearsed.<\/p>\n

Segment networks and key systems<\/strong><\/p>\n

Do not make it easy for an attacker to move laterally after an initial breach. Separate critical systems where possible.<\/p>\n

Audit external-facing assets<\/strong><\/p>\n

* Review websites, portals, VPNs, and remote services regularly. If a system is internet-exposed, assume it will be probed.<\/p>\n

* Train staff using realistic scenarios
\nPhishing, credential theft, and social engineering remain practical entry routes. Staff awareness still matters, especially in finance, operations, and leadership roles.<\/p>\n

* Patch and scan consistently
\nAutomated patching and regular vulnerability scanning help remove known weaknesses before attackers exploit them.<\/p>\n

FAQs*<\/strong><\/p>\n

\u00a0<\/strong>What does \u201cvery high cyber risk\u201d mean for an SME?<\/strong><\/p>\n

It means the business has enough weaknesses across access, systems, or recovery capability that common attack paths are more likely to succeed.<\/p>\n

Why is privilege management such a big issue for SMEs?<\/strong><\/p>\n

Poor privilege control makes it easier for attackers to escalate access, move across systems, and cause wider damage after an initial breach.<\/p>\n

Are ransomware risks really that serious for smaller firms?<\/strong><\/p>\n

Yes. SMEs often have less recovery capacity, fewer spare resources, and greater operational disruption when critical systems go down.<\/p>\n

We already use antivirus. Is that enough protection?<\/strong><\/p>\n

No. Antivirus can help, but it does not replace MFA, patching, access control, backups, monitoring, and staff awareness.<\/p>\n

What should an SME fix first if budget is tight?<\/p>\n

Start with the basics that reduce both likelihood and impact: MFA, privilege review, patching, protected backups, and stronger control of internet-facing systems.<\/p>\n

(*FAQs are informed by live questions and trending discussions on Reddit and Quora, then refined by SMECyberInsights.co.uk for clarity, accuracy and relevance.)<\/em><\/p>\n

Looking forward<\/strong><\/p>\n

The most important lesson in BOTECH\u2019s findings is that SME cyber risk is not only about sophisticated attackers. It is also about ordinary weaknesses left unresolved for too long. When one in four SMEs is assessed as being at very high risk, the issue is no longer awareness. It is execution.<\/p>\n

For SMECyberInsights.co.uk, the practical takeaway is straightforward: SMEs do not need enterprise complexity to improve their position, but they do need consistent control over access, exposure, and recovery. That is where resilience starts.<\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"Nord_logo_1.png\"\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t
<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

What is a VPN & Does my SME Need one?<\/strong> A VPN<\/strong><\/a> is a Virtual Private Network a method of securing your communications credentials. When it comes to SMEs<\/strong><\/a>, the choice of VPNs<\/strong><\/a> can significantly impact the security and efficiency of their operations. NordVPN<\/b> secures your Internet data with military-grade encryption, ensures your activity remains private and helps bypass geographic content restrictions online.\u00a0 \u00a0Join\u00a0NordVPN\u00a0Today and\u00a0Save\u00a0up to\u00a073%\u00a0and Get 3 months\u00a0Extra Free<\/a> – Rude Not to \u2026!<\/strong><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tLearn More \/...<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"CYBERInsights\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t
Image Credit: IfOnlyCommunications<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t

SMECYBER Insights \u2013 Helping Keep Small Business CYBERSafe!\u00a0<\/strong><\/p>\n

Launched in 2020 by\u00a0Cybersecurity Journalist<\/a>\u00a0Iain Fraser<\/strong>\u00a0and his team at\u00a0IfOnly…<\/strong><\/a> SMECYBERInsights<\/strong><\/a> was developed to be the go-to platform providing definitive, reliable & actionable Cybersecurity News, Intel,\u00a0 Awareness & Training specifically written and curated for Small Business<\/strong><\/a> & Enterprise Owners, Partners and Directors throughout the UK.\u00a0#SMECyberInsights #SMECyberSecurity #CyberAttack #CyberAwareness\u00a0 #Compliance #DDoS #Fraud #Ransomware #ScamAlert #SME #SmallBusiness #SmallBusinessOwner #ThreatIntel <\/span>\u00a0<\/em><\/p>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t

\n\t\t\t\t\t<\/span>\n\t\t\t\t\tLatest Posts ...<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t<\/h2>\n\t\t\t<\/div>
\n\n
\n
\n\n
\n \n \n \"SME <\/a>\n\n \n