Table of contents
- A worrying scenario for cyber security in SMEs
- SMEs fail to recognize the real digital risk
- What is the Cyber Index PMI and why it matters
- Why SMEs must invest in cyber security
A worrying scenario for cyber security in SMEs
The new Cyber Index PMI report, developed by Confindustria and Generali, reveals a concerning picture: the majority of small and medium Italian enterprises are unprepared to face digital threats.
The study, which involved over 1,000 companies, shows that only 15% of SMEs have adopted a strategic approach to assess and mitigate cyber risks.
Despite the increasing frequency of cyberattacks and the digitalization of business processes, the overall awareness level of these companies stops at an insufficient 52 out of 100. A clear sign that digital security is still far from being a real priority for many businesses.
SMEs fail to recognize the real digital risk
The report highlights that 44% of the surveyed companies acknowledge the existence of a cyber risk, but only a small percentage translates this awareness into concrete actions.
A worrying 56% of businesses show little or no preparation: among them, an alarming 18% are classified as “beginners”, meaning they lack even the basic tools to prevent and manage cyberattacks.
This vulnerability exposes SMEs to increasingly sophisticated threats that can compromise sensitive data, business continuity, and the company’s reputation.
What is the Cyber Index PMI and why it matters
The Cyber Index PMI initiative was created to measure and monitor the level of awareness of small and medium-sized Italian companies regarding cyber risk management. The project benefits from the scientific contribution of the Digital Innovation Observatories of the Politecnico di Milano and the institutional partnership of the Italian National Cyber Security Agency.
Through this tool, it is possible not only to take a snapshot of the current situation but also to offer companies guidelines and resources to bridge the digital gap and foster a culture of cyber security that is still too weak today.
Why SMEs must invest in cyber security
Neglecting digital security is no longer an option. Cyberattacks are constantly increasing and mainly target unprepared businesses, as clearly shown by the report.
SMEs must understand that cyber risks do not only concern large corporations or tech giants: every business, even the smallest, is a potential target.
Adopting a strategic approach to cyber security means protecting data, productivity, and customer trust. It is therefore essential to invest in training, defense tools, and effective procedures to manage any possible threat.
