Only 2% of Swiss companies are optimally prepared for cyber threats

While almost one in ten companies in Switzerland was still optimally protected against modern security risks in 2023, the figure is now less than 2 percent. This is shown by the Cisco Cybersecurity Readiness Index 2024.

When it comes to cyber threats, the majority of companies are not yet mature enough. (Graphic: Cisco)

Over the last 12 months, the cyber landscape has changed significantly, particularly as a result of artificial intelligence (AI). It is now being used in both cyberattacks and protection solutions. As a result, companies need to adapt their security strategies and architectures. The Cisco Cybersecurity Readiness Index 2024 has determined the extent to which companies are up to these new challenges. Based on more than 8,000 expert surveys worldwide, companies were divided into four maturity levels: Beginner (Beginner), Formative (Formative), Advanced (Progressive) and Mature (Mature). 205 respondents also came from Switzerland. The respondents are responsible for business and cyber security in their companies and gave self-assessments on the status of their company's defense capabilities and the technology used. The survey was conducted in January and February 2024 using online interviews.

Swiss companies overestimate their defensive capabilities

The new study suggests that Swiss companies overestimate their own ability to protect themselves against current threats or underestimate the cyber threat situation. The results show that only 1.95% of Swiss companies have a sufficiently mature security structure to be optimally prepared for current threats. A year ago, the figure was 9 percent. If you cluster the two highest maturity levels "Mature" and "Progressive", Swiss companies rank third in Europe behind the UK and Germany with 24%. Nevertheless, 81% of companies in Switzerland are moderately to very confident that they can fend off a cyberattack with their current infrastructure.

Unsurprisingly, readiness also correlates with the size of an organization, as more budget and personnel can be allocated to cybersecurity. Companies with more than 1,000 employees have a higher level of maturity, while medium-sized companies (250-1,000 employees) are slightly behind. This applies worldwide and across all industries. The study found that the best-prepared sectors are financial services, technology and manufacturing - all with 30 % or more in the upper "Mature" and "Progressive" categories. The education sector, for example, still has some catching up to do.

The importance of securing IT systems is also shown by the figures from the Federal Office for Cyber Security (BACS). Reports of cyber incidents are trending upwards. "There is an urgent need for companies to rethink their security strategies and adapt to the reality of today's cyber threats," says Roman Stefanov, Head of Cyber Security Sales at Cisco Switzerland. According to the study, 45 percent of Swiss companies surveyed have experienced a cyberattack in the last 12 months.

Switzerland on the right track with AI

"An encouraging sign for Switzerland is the high use of AI for cyber defense," explains Roman Stefanov. "Almost 40 percent already use systems based on it with the highest or second-highest level of maturity." The protection of networks and machines is satisfactory at 32% and 26% respectively. However, there is a lot of catching up to do in the areas of identity and cloud. Only 18% and 14% of Swiss companies respectively have an adequate level of protection in these areas.

Swiss companies also cite the protection of corporate identities as the biggest challenge (39%), ahead of network protection (30%). "More than a third of Swiss companies have noticed a cybersecurity incident involving stolen digital identities in the last year," explains Roman Stefanov. "In this threat situation, we should no longer ask whether a user can have access, but whether they should."

Two thirds believe in a cyberattack in the next 12 to 24 months

According to the study, 66 percent of companies surveyed believe that a cyberattack will affect their business in the next 12 to 24 months. Despite these concerns, 51 percent of companies say they have more than 10 open cyber security positions, indicating an acute skills shortage. The cost of incidents is notable, with 45 percent of respondents stating that past incidents have cost more than $500,000.

The good news is that companies have increased their security budgets and want to increase them even further. This is because they recognize an increase in risks due to digitalization, more diverse types of attacks and greater financial impact: 86 percent of respondents stated that they have increased their budget in the last 1-2 years, and almost 80 percent want to increase their budget by more than 10 percent in the future. 92 percent plan to upgrade or even restructure their IT infrastructure to counter the coming challenges in cyber security.

Source: Cisco

Manufacturing: Six investments that pay off in times of crisis

The threat of recession, high energy costs, supply chain problems, a shortage of skilled workers - many companies are facing numerous challenges. The economic outlook is bleak; economic researchers at the ETH are forecasting GDP growth of 1.2% for Switzerland. In Germany, our country's most important trading partner, economic experts expect growth to be even lower.

New technologies in manufacturing can help to defy times of crisis. (Image: Oracle)

Even if demand is falling and cost pressure is increasing, manufacturers should not put planned projects on hold. After all, new technologies in particular can help during the crisis and the time afterwards. At least that's the belief at software and hardware manufacturer Oracle, which has outlined six ways in which companies can get through the crisis.  

1. digitization and data analytics 

The digitalization of production, procurement, supply chain and manufacturing processes is creating smart factories that are further accelerated by the Internet of Things (IoT), artificial intelligence (AI) and machine learning (ML). The basic idea: analyzing large amounts of data improves decision-making. According to a Survey by Deloitte in 2013, 60 percent of managers were already using analysis software, often with AI functions, to identify component bottlenecks in good time, optimize delivery routes, reduce fuel consumption and shorten delivery times. 

2. reduction of supply chain risks 

Geopolitical and trade tensions are prompting more and more companies to look for lower-risk suppliers. According to a Study by BCI Global more than 60 percent of European and US manufacturers are planning to relocate some of their activities to Asia in the coming years. Some EU companies also have their sights set on the Czech Republic, Poland and Hungary - others on Germany, the Netherlands, Belgium and Luxembourg. 

Modern supply chain technologies can also help to reduce supply chain risks. Better insights into workflows, schedules and capacities, fleets and distribution warehouses, as well as real-time status updates, enable companies to quickly identify and resolve bottlenecks. ML capabilities highlight anomalies and potential impacts. In a Study by KPMG  67 percent of CEOs stated that they want to invest more in data-driven technologies. 

3. smart manufacturing 

Manufacturers are using Industry 4.0 technologies to optimize production processes, improve product quality and automate maintenance. Typical examples include drones that detect structural damage to factory equipment, robots and cobots as well as cloud applications for automated demand planning. Digital twins simulate the effects of fluctuations in supply and demand on assembly line production. Augmented reality (AR) speeds up repairs and 3D printing enables the production of missing spare parts. Driverless vehicles deliver components to the assembly lines via the 5G network. Intelligent warehouses monitor stock levels and independently request parts.  

According to ABI Research global spending on automation technologies will increase from 345 billion US dollars in 2021 to over 950 billion US dollars in 2030. Automotive manufacturers in particular are investing in solutions to reduce labor costs and increase safety and productivity. In 2022, the automotive industry will account for more than half of robot sales. Overall, the global market for industrial robots is expected to grow by Grand View Research will grow by an average of 10.5 percent per year until 2030. 

4. qualified tech specialists 

The manufacturing industry is also affected by the shortage of skilled workers. There is a shortage of assembly line workers, welders, machine operators, industrial mechanics and production managers. Due to the increased use of new technologies, the industry also needs specialists in the fields of robotics, programming, integration of intelligent systems, prototyping and cyber security as well as data scientists.  

Real-time information is the prerequisite for the digital networking of all employees. So-called Connected Frontline Workforce (CFW) applications can alleviate the shortage of skilled workers. Training and further education is also important - for example, the European Commission's workshops, which are aimed specifically at the manufacturing industry. And recruiting applications in the cloud make it easier to fill technical positions in highly competitive markets. 

5. anything-as-a-service 

More and more companies are offering their products or their ongoing maintenance, monitoring or installation as a service. A manufacturer of welding robots, for example, takes on a certain number of welding jobs for a fee instead of selling its robots. This revenue is easier to plan than sales revenue. Anything/Everything-as-a-Service also offers additional cross-selling and upselling opportunities. Analyses from Accenture According to the company, this model can increase annual sales by 15 to 20 percent. According to Fortune Business Insights from USD 545.35 billion in 2022 to more than USD 2.3 trillion in 2029.  

More and more car manufacturers are also opting for the subscription model and offering registration, taxes, insurance, breakdown assistance and maintenance as services. According to Global Market Insights the global Vehicle-as-a-Service market is expected to grow to 30 billion US dollars by 2030.  

6. sustainability 

A quarter to a third of the world's energy is used for manufacturing processes. Manufacturers' supply chains in particular have a negative impact on the environment - for example during the extraction, production, transportation and storage of raw materials. The industry is under massive pressure to become more environmentally friendly and sustainable. Most companies are aware of this, as a survey by Harris Poll shows. According to the survey, 56% are taking measures to operate more sustainably - the highest proportion of all industries surveyed. 

New tools are also being used. Blockchain, for example, makes it easier to trace materials and goods. Automation and monitoring solutions offer detailed insights into production processes, supply chains and energy consumption. This helps manufacturers to increase their productivity and identify potential savings. 

Conclusion: Do not forego investments in a weak economy

"Even a weakening economy shouldn't stop companies from investing in new technologies," explains Martin Cereceda, Senior Business Development Manager Manufacturing & Automotive at Oracle. "On the contrary: those who digitize, automate and adopt an environmentally friendly approach will gain a competitive advantage - in the form of efficient business processes, innovations and long-term cost reductions." 

Source: Oracle

Account information from Chat GPT found on the Darknet

Kaspersky's cybersecurity experts have discovered thousands of stolen credentials for popular AI tools such as ChatGPT, Grammarly and Canva on the darknet. Cybercriminals can use infostealers to obtain user credentials and offer them for sale on the darknet.

The number of stolen Chat GPT account information found on the Darknet has recently increased dramatically. (Graphic: Kaspersky)

Chat GPT's AI tools are becoming increasingly popular, not only among private individuals but also in companies. The practical benefits of AI-supported office work are becoming increasingly apparent. However, AI services for image processing and translation as well as chatbots are also an attractive target for cybercriminals, as an analysis by Kaspersky experts shows. According to a recent analysis, the number of compromised account information for the services of chatGPT developer OpenAI increased more than thirtyfold compared to 2022.

ChatGPT a popular target for data thieves

Specifically, stolen logins for the services of ChatGPT developer OpenAI jumped to around 664,000 in 2023 compared to the previous year, with a total of almost 688,000 in the study period from 2021 to 2023. After the launch of the fourth version of ChatGPT in March 2023, the demand for corresponding accounts was particularly high, since then it has matched that of other AI services. In addition, around 1.2 million Canva user credentials were stolen in the three years and distributed on darknet forums and Telegram channels. Grammarly recorded around 839,000 compromised credentials in the same period.

"The compromised credentials come from Infostealer activity, a specific type of malware that steals user credentials for cyberattacks, darknet sales or other malicious activities. Infostealers can infect corporate devices via phishing emails or websites and public websites with malicious content, among others," explains Yuliya Novikova, Head of Kaspersky Digital Footprint Intelligence. "We expect the demand for ChatGPT accounts to continue. Effective enterprise security solutions that protect against Infostealer attacks and other malware are becoming increasingly important. For example, our software monitors compromised accounts on the darknet and notifies companies if users of their online services have been compromised."

Recommendations for risk minimization

Kaspersky's experts make various recommendations on how to minimize the risk in the event of data leaks:

  • Continuously monitor the darknet for posts about data leaks. For this purpose, Kaspersky has developed a detailed guide created.
  • The so-called. Kaspersky Digital Footprint Intelligence to gain an attacker's view of corporate resources and identify potential attack vectors.
  • Use a unique password for each service to minimize the impact of account theft.
  • In the event of a data leak to dedicated incident response services such as Kaspersky Incident Response Service to be able to act quickly and effectively and minimize the consequences. Such services help to identify compromised accounts and protect the infrastructure from similar attacks in the future.

Source and further information: Kaspersky

AI partnership for contract reviews in the construction industry

Legartis, a company specializing in AI-supported contract reviews, has announced a collaboration with Implenia, a multinational Swiss construction and real estate services provider. The partnership marks a significant step for the use of AI in the legal sector of the construction industry, according to a statement.

Legartis and Implenia are jointly developing an AI-supported tool that can be used for contract reviews in the construction industry. (Image: Legartis)

Legartis, which operates in the DACH region, has developed an award-winning legal AI solution for the automation of contract reviews and the automated extraction of data from thousands of contracts. Legal departments, sales organizations and purchasing teams can use Legartis' artificial intelligence to seamlessly analyze incoming contracts. The construction and real estate service provider Implenia is now also relying on this solution: the two companies are working together in several areas. As part of a co-development project, a specialized AI module is being jointly developed to speed up the review time of comprehensive contracts in the construction industry. In future, this should enable an automated and AI-supported construction contract review tailored to the industry.

Legartis' technology is changing the way Implenia performs its contract review tasks, according to the statement. It supports the Group's leading position in the digital transformation of the construction industry. "The partnership with Legartis is a signal to the construction industry that AI and legal departments are a good match. For us, the use of AI in the legal sector is an important step in our digitalization strategy and in increasing efficiency," says Dr. German Grüniger, General Counsel & Chief Compliance Officer at Implenia. Dr. Michael Burkart, Global Head Legal Operations & Strategy at Implenia adds: "By using Legartis' Legal AI technology, we expect improved management of contractual risks, greater standardization and a significant reduction in the workload of our legal experts."

David A. Bloch, CEO of Legartis, sees major benefits for the construction industry in the collaboration. "We are very happy about the co-development and the partnership with Implenia. Implenia's industry-specific expertise will flow into the training of our AI. These are ideal conditions for developing a powerful industry solution for AI-assisted construction contract review." The collaboration between Legartis and Implenia underlines the commitment of both companies to exploit the possibilities of innovative digital technologies and to establish themselves as pioneers in the use of AI in the field of law in the construction industry, according to a press release.

Sources and further information: www.legartis.ai/de and implenia.com

A question of organization

Establishing effective management structures in a company requires clear hierarchies. Dirk Kreuter, multi-entrepreneur, speaker and author, emphasizes the importance of a stable framework for increasing productivity and efficiency.

Like any stable structure, a successful company needs a solid foundation... (Image: Markus Spiske / Unsplash.com)

What is the secret of perfectly functioning machinery? Is it the fundamental quality of the individual parts? This aspect certainly plays a role. But even the best software and the most stable hardware are useless if the various fragments do not work together effectively and in perfect harmony. Every element - from the smallest cogwheel to the control computer - knows its task and is also aware of its role in a larger whole. Getting this structure and the corresponding mentality into the management team of a company is a major step towards a successful future, especially in difficult economic times. To achieve this, however, there are a few points to bear in mind.

1. create a clear hierarchy

Like any stable structure, a successful company needs a solid foundation in order to survive adverse weather conditions such as economic crises or financial and other downturns. Every employee should know exactly who is above them in the hierarchy and what their tasks and responsibilities are. This creates clarity, promotes efficiency and enables everyone in a management position to focus on their specific tasks.

2. the art of delegating

A successful boss must learn to relinquish responsibility. Everyone has to learn this sooner or later - either the hard way or the easy way. Once a company reaches a certain size, it becomes impossible for a manager to personally supervise all tasks and every employee. Through targeted delegation and a clear division of tasks within a management team, tasks can be completed more efficiently. In addition, everyone has the opportunity to make the best possible use of their individual skills and strengths.

3. being able to let go

Successful delegation goes hand in hand with a skill that many managers find difficult: not getting lost in every detail. But even though it may go against the very nature of a person in a managerial position, at a certain point in the company's growth there is no choice but to focus on the big picture. By freeing them from micromanagement, they create space for strategic thinking and enable the team to act independently. This not only promotes efficiency, but also creativity and innovation in the company through the influence of different voices.

4. communication as the key to success

If you want to keep your company running like a well-oiled machine, you need to create enough space for an open and clear exchange between its parts. Regular meetings, clearly defined lines of communication and transparent decision-making processes are key to ensuring that the management team shares the company's vision and keeps everyone involved. A positive working environment is created through an open communication culture, which in turn promotes employee motivation and commitment.

5. continuous further development

Of course, all the points mentioned above must not remain a rigid concept. Methodologies and measures quickly gather dust in a dynamic business world, which is why a successful management structure must continuously evolve. This
includes learning from experience, adapting to changing market conditions and constantly striving for improvement. With a management culture that has a strong hierarchical basis but is just as dynamic in its details, every company can be well equipped for an economically successful future.

 

To the author:
Dirk Kreuter is one of Europe's best-known sales trainers, multi-entrepreneurs and speakers. Over the past 32 years, he has generated millions in sales for DAX-listed companies as well as small and medium-sized enterprises. In 2016, he changed his focus and has been concentrating on open seminars ever since. His target group primarily includes committed entrepreneurs who want to take the next step towards becoming market leaders through continuous growth. 

www.dirkkreuter.com

A new AI model could streamline processes in a robot warehouse

The future belongs to automated warehouse handling: robots pick goods from shelves and assist with order picking. But where hundreds of robots are whizzing through warehouses, traffic problems can certainly arise. Researchers at the Massachusetts Institute of Technology MIT have addressed this problem. Once again, the solution lies in AI.

In automated warehouses, traffic problems can occur between robots. an AI algorithm developed at MIT ensures a collision-free robot warehouse. (Image: Depositphotos.com)

The scene is a warehouse somewhere in the world: robots scurry across the floor and pick up items, which they then hand over to human employees for packing and shipping. In many industries, from e-commerce to automotive production, warehouses with hundreds of robots are increasingly becoming part of the supply chain. The problem is that when 800 robots are on the move at the same time to efficiently deliver goods to their destinations, the risk of collisions increases. Even the best path-finding algorithms struggle to keep up with the fast pace of e-commerce or production. In a way, the robots are like cars that have to find their way in a crowded city center.

Intelligent traffic planning in the robot warehouse

A group of MIT researchers are already using AI to alleviate traffic congestion. They have adopted ideas from this field to tackle the problem of robot traffic in warehouses. To this end, they have developed a deep learning model that encodes important information about the warehouse. This includes information about robots, planned paths, tasks and obstacles. The model can be used to predict which areas of the warehouse should best be relieved to improve overall efficiency. The technique divides the warehouse robots into groups to unload them faster using traditional robot coordination algorithms. This allows the robots to be relieved almost four times faster than when using a strong random search method. Specifically, the new neural network architecture considers smaller groups of robots at the same time. In a warehouse with 800 robots, for example, the network could divide the warehouse into smaller groups of 40 robots each. It then predicts which group has the greatest potential to improve the overall solution when a search-based solver is used to coordinate the path to be traveled by the robots in that group. In an iterative process, the overall algorithm selects the most promising group of robots with the neural network, offloads the group with the search-based solver, then selects the next promising group with the neural network, and so on.

Concept of the deep learning algorithm for a collision-free robot warehouse: One architecture per subset consists of imagined paths and obstacles, 3D folds, 2D folds and a fully connected network. The current paths Si and shortest paths p(s, g) for all agents are shown for reference (top right). (Image: Neural neighborhood search for multi-agent path finding; review copy, 2024)

Consideration of relationships

In addition, the neural network records the complex relationships between the individual robots. Even if one robot is initially far away from another, their paths can still cross while traveling through the robot warehouse. The technology also streamlines the calculation as the constraints only need to be coded once instead of repeating the process for each sub-problem. In a warehouse with 800 robots, 40 robots can be relieved by setting the other 760 as constraints. Other approaches require all 800 robots to be considered in each iteration per group. Instead, the 800 robots only need to be considered once across all groups in each iteration. This deep learning approach could be used not only for streamlining warehouse operations, but also for other complex planning tasks such as designing computer chips or laying pipelines in large buildings.

"We have developed a new neural network architecture suitable for real-time operations at the scale and complexity of these warehouses. It is able to encode hundreds of robots in terms of their trajectories, origins, destinations, and relationships to other robots in an efficient way that reuses computations across groups of robots," summarizes Cathy Wu, Gilbert W. Winslow Career Development Assistant Professor in Civil and Environmental Engineering (CEE) and a member of the Laboratory for Information and Decision Systems (LIDS) and the Institute for Data, Systems, and Society (IDSS). Cathy Wu is the lead author of an article on this technique, and is assisted by Zhongxia Yan, a PhD student in electrical and computer engineering.

Source: techexplore.com

Fraunhofer presents flexible testing station with cobot

The manual quality inspection of components or products in industry is strenuous for employees and also prone to errors. The Fraunhofer Institute for Mechatronic Design IEM presented a universally applicable solution for this in the run-up to the Hannover Messe. This was developed in collaboration with the ATM manufacturer Diebold Nixdorf and the software specialist Verlinked and is a combination of a collaborative robot (cobot), AI-based image analysis and an IoT platform.

A newly developed cobot solution from Fraunhofer IEM: AI-supported image analysis is integrated directly into the camera module of the robot arm. If the analysis software detects defects, the system notifies the employees who can rectify the fault. (Image: Fraunhofer IEM / Janosch Gruschczyk)

Collaborative robots (cobots) are considered a key technology in the industry. The robots, most of which are equipped with AI and sensor technology, work together with humans on the production floor and enable flexible and intelligent automation concepts. In times of batch size 1, fragile supply chains and ever-changing regulations, this is an enormous competitive advantage. The Fraunhofer IEM will be presenting what it describes as a particularly flexible cobot solution at Hannover Messe 2024, which takes place from April 22 to 26. Together with Diebold Nixdorf and Verlinked, the Fraunhofer researchers have developed an inspection robot in the it's OWL project CogeP (Cobot-supported inspection stations for intelligent technical systems): Employees use the robot to check the quality of ATM control panels quickly and without errors - and effortlessly convert it to ever new testing tasks.

AI-supported quality inspection

To check the control panels, the sensor-supported robot arm guides a camera over the components, workpieces or products to be analyzed from several angles. The AI-supported image evaluation analyzes the quality, then the robot guides the camera over the next product. If the analysis software detects defects - such as an incompletely tightened screw or an unstable plug connection - the system notifies the responsible employees, who can correct the error quickly and in a targeted manner. In addition to productivity in production, employees also benefit from the Cobot solution. Dr. Eugen Djakow, Group Manager for Automation and Production Technology at Fraunhofer IEM, says: "Manual visual inspection in production is a monotonous, strenuous and error-prone task for employees. The inspection robot completes such tasks quickly and reliably. This also makes the work of people in production more interesting and less monotonous."

IoT platform enables a wide range of test scenarios

The highlight of the solution is the combination of the inspection robot with an IoT platform. It acts as a real-time data center, assigns the inspection tasks, stores their results and collects the data across robots and orders. This allows the inspection processes to be further optimized. The collected data can also be used to adapt the inspection for a new product version without any programming effort. The inspection only needs to be slightly updated for new variants of a product. "Cobot-supported test stations can collect all test and operating data in the central IoT platform and retrieve it in real time. This allows companies to reconfigure their test routines to new requirements without expensive conversions or investments. The system thus serves as a universally applicable tool for any test scenario," adds Djakow.

Advantages for SMEs: Flexible integration of cobot workstations into production

The cobot solution presented is intended to be suitable not only for testing processes, but also for assembly, order picking and general factory support. This solution should also make it possible for SMEs to integrate cobot workstations into existing production processes cost-effectively and with little effort. This means that they too can change their production at short notice or adapt it to small quantities or even the production of individual items.

Source and further information: Fraunhofer Institute for Mechatronic Design IEM

Review of SCSD 2024: Cyber is a joint task

The fifth edition of the Swiss Cyber Security Days was held under the motto "Shaping Cyber Resilience". It took place in Bern for the first time and, according to the organizers, attracted over 2,200 visitors. The conclusion from the 100 or so presentations: Cyber is a joint task.

Satisfied exhibitors and visitors at the SCSD 2024 (Image: BERNEXPO)

The fifth edition of the Swiss Cyber Security Days (SCSD), the dialog and know-how platform on the topic of cyber security, was successfully held on Tuesday, 20 and Wednesday, 21 February. The most important decision-makers and experts in the field of cyber security at national and international level met at the Bernexpo site. The event was attended by over 2,200 people. In his opening speech, Program Director Nicolas Mayencourt drew attention to the fact that cybercrime has literally exploded in recent years. In 2022, the damage was many times higher than the damage caused by natural disasters. For this reason, this platform on the topic of cyber is needed more urgently than ever: "There is a global lack of understanding of the impact cyberspace has on our society. We therefore see it as our task to act as a bridge builder and help the topic gain more attention."

More than 2.5 million vulnerabilities in Switzerland

Among other things, the annual edition of the State of Swiss Cyberspace was presented at SCSD 2024. This is a scientific scan of Swiss cyberspace, which includes all ICT infrastructures connected to the public internet. Over 2.5 million potential vulnerabilities were identified.

Robert Bohls, Cyber Operations Chief of the FBI, and Admiral Dr. Thomas Daum, Inspector of Cyber and Information Space of the German Armed Forces, were among the highlights of the rich program of presentations. Both emphasized that cyber security is not just a national issue, but that international cooperation is needed to master the challenges ahead. Natalie Silvanovich, Team Leader of Google Project Zero North America - an elite group of hackers - showed how they search for and eliminate existing vulnerabilities. Christian-Marc Lifländer, Head of Cyber Defense and Policy at NATO, provided fascinating insights into warfare in cyberspace. On the second day of the event, former NASA Science Director Thomas Zurbuchen also spoke about cyber security in space. He stated without question that NASA and its suppliers have been and continue to be targets of cyber attacks. He regrets that there is still a kind of "culture gap" between tech specialists and cyber experts: for the former, cyber specialists still have the reputation of "compliance police" and bureaucrats, while the latter refer to techies as "cowboys/girls and risk junkies". This gap needs to be overcome by adopting an innovation-driven approach.

Former NASA Science Director Thomas Zurbuchen during his presentation at the SCSD 2024 (Image: Thomas Berner)

A strong signal against disinformation

Disinformation is the most immediate risk to global stability. This was emphasized by Alois Zwinggi, Managing Director of the World Economic Forum (WEF), during his speech. He also presented the WEF's Global Risk Report 2024. Prof. Dr. Touradj Ebrahimi, Professor at the Swiss Federal Institute of Technology Lausanne EPFL, gave reason for hope. He presented the international "JPEG Trust" standard, which will be published in summer 2024 and rolled out worldwide. This will help to ensure the trustworthiness and authenticity of visual media content. Mauro Vignati from the ICRC showed just how far disinformation and cognitive warfare can go: according to a NATO definition, "cognitive warfare" is the most advanced form of mental manipulation of people that makes it possible to influence individual or collective behavior with the aim of gaining a tactical or strategic advantage. There is no question that cyberspace also serves as a means to an end here. Counter-strategies are difficult, as we must soberly note.

And SMEs? How threatened are they really? Christophe Gerber, member of digitalswitzerland.ch's cybersecurity commission, presented a figure that must give pause for thought: Only 14 percent of all SMEs consider themselves to be well equipped against cyber risks. The situation would be different for everyone else. The speaker warned that the risks should not be underestimated. "While large companies are investing massively in cyber security, they are becoming less attractive to hackers. Cyber criminals are now finding SMEs all the easier targets," said Gerber. And municipalities are also at risk, as they are basically no different to SMEs in terms of organizational size. "Many municipalities don't even know who to contact in the event of a cyber emergency." The recommendations are clear: SMEs and municipalities must obtain the relevant expertise, clarify responsibilities (e.g. create the position of a CISO) and, if necessary, purchase appropriate services. It is also important to ensure that protection mechanisms are in place 24/7 and to be prepared for emergencies. "Because it will happen, the only question is when," says Christophe Gerber. And after an emergency, you not only have to clean up and learn the lessons, but also remain operational at the same time.

Positive feedback from visitors too

The visitors were also enthusiastic. Emiel Brok, SUSE Ambassador Switzerland, said of SCSD 2024: "It was absolutely worth the trip to Switzerland. We were able to meet various exponents from interested companies and of course welcome the fact that open source topics are becoming increasingly relevant in the area of cyber security." Ingo Spranz, Regional Director CrowdStrike, echoed the same sentiment: "This was our first time as a sponsor and we were able to make valuable connections, meet customers and listen to exciting presentations. We are already looking forward to the next edition."

The program director of the Swiss Cyber Security Days, Nicolas Mayencourt, was enthusiastic about this year's event. "It is our declared goal to make Bern the cyber capital. I am very satisfied, it was a great two days and we learned a lot," said Mayencourt. The host and CEO of Bernexpo Groupe Tom Winter was also delighted: "Overall, our expectations of the Swiss Cyber Security Days were met. We are now looking forward to the next Swiss Cyber Security Days on February 18 and 19, 2025 here on the Bernexpo site".

Source and further information

"Always in defense mode"

The topic of cyber security no longer leaves anyone indifferent. Against this backdrop, the Swiss Cyber Security Days, which will take place in Bern on February 20/21, 2024, aim to further raise awareness of this topic and present concrete solutions for greater cyber resilience. At a media conference, representatives from the trade fair organization, business and politics provided information about the event.

On February 20/21, 2024, the Swiss Cyber Security Days will focus on the topic of "Shaping Cyber Resilience". The fact is that many organizations are in constant defence mode. (Image: www.scsd.ch)

It really can be too easy for hackers: According to an evaluation by the Hasso Plattner Institute (HPI), the number sequence "123456" is the most popular password in Germany. We can only assume that the situation in Switzerland is not much different. Regardless of this, cyberattacks on companies and public administrations have continued to increase. The city of Bern, for example, was attacked 23 million times in 2023, as Mayor Alec von Graffenried revealed at a media conference in the run-up to the Swiss Cyber Security Days. "We are always in defense mode," he noted.

Bern becomes "capital" for cyber security

It is no coincidence that Bern is now the venue for the fifth Swiss Cyber Security Days (SCSD). The event is now moving from the more tranquil Fribourg to the federal city and has found a location at the BernEXPO exhibition center that is predestined for events consisting of an exhibition and congress. Added to this, of course, is the more central location and better accessibility, as well as the greater proximity to federal authorities or (system-critical) state-owned companies such as Swiss Post, SBB or Swisscom, all of which could become "primary targets" for cyber criminals. In this sense, Bern will be the "capital" of cyber security for two days in February.

The possibility of a cyberattack on critical infrastructure is also high on the federal and cantonal risk management agenda. At the aforementioned media conference, Bern's Director of Economic Affairs Christoph Ammann pointed out the great potential for damage: according to estimates, damage from cyberattacks amounts to around 5% of a country's GDP, in Switzerland this would be around CHF 200 billion. "Everyone is therefore called upon to take precautions. This applies to large companies as well as SMEs," said Christoph Ammann.

Innovative, but not when it comes to cyber security

And it is precisely with these precautions that Switzerland is lagging behind. The former National Councillor and current President of the Swiss Cyber Security Days regrets that Switzerland, the world's most innovative country, only ranks 42nd in the Global Cyber Security Index - behind North Macedonia and ahead of Ghana. "Switzerland must do better," says Fiala. The SCSD therefore want to make a contribution to achieving this. Politicians have also recognized the urgent need for action. The fact that Switzerland has now had a State Secretariat for Cyber since January 1, 2024 is an important step, according to Fiala.

However, even though cybercrime is now one of the top risks on a par with climate change and energy shortages, awareness of the problem is not yet equally high everywhere. The externalization of the problem is underestimated, as government councillor Christoph Ammann emphasized. Simply outsourcing data to the cloud does not necessarily result in greater security. The canton of Bern, for example, does not use a cloud but stores its data on the servers of its own company. However, the cyber threat is also unleashing forces: for example, the Bernese Economic Directorate and the Security Directorate are joining forces for the first time at the SCSD. "This is a first," says Christoph Ammann.

Broad-based program

What can visitors expect at the SCSD? There will be a "Main Stage" with keynotes from national and international experts. For example, the Ukrainian Minister for Digital Transformation, Georgii Dubynskyi, will report on his government's current experiences with cyber defense in times of war. Christian-Marc Lifländer, Head of the NATO Cyber Defense Section, will discuss the topic of "Cyberspace as an area of warfare: the use of cyber defence as an inseparable part of collective defense in NATO". From Switzerland, Nicolas Mayencourt and Marc K. Peter analyze the local cyber situation and ETH President Joël Mesot explains what research and innovation can do to combat cybercrime.

The so-called "Tech Stage" deals with topics such as the metaverse: The metaverse connects the real world with the virtual world. Has the hype surrounding the metaverse already died down or is the technology finally ready to prove itself as a future-proof technology? Sebastian Klöss (Bitkom) and Fabian Wicki (University of Applied Sciences Northwestern Switzerland) will address this question. A student project from ETH will also be presented: the Cyber Clinic for SMEs. This initiative sees itself as a bridge between research and business. It aims to improve the cyber security situation of underserved Swiss organizations such as SMEs, but also of large NGOs.

In addition, around 80 exhibitors will be on site with various solutions for improving cyber security. They will also be presenting their applications at two "Best Practice Stages" in the form of short presentations.

Further information on the program can be found at www.scsd.ch

Tax compliance: Fatalism meets technical deficits and a shortage of skilled workers

A study on the management of VAT in the DACH region reveals a surprising fatalism: when technical deficits, complex regulations and a lack of specialist staff make VAT management difficult internally, companies show the courage to leave gaps. However, according to the authors of the study, this should be seen as critical in the wake of the EU VAT reform and the general trend towards the digitalization of the finance function.

Source: Vertex Inc.

In an international study in summer 2023, tax software provider Vertex Inc. asked managing directors and executives how their company deals with the requirements of indirect tax regulations and the associated risks. The survey covered 580 companies from the DACH, Benelux, Nordics, UK and US regions with annual sales of between 50 and 500 million US dollars and 500 million US dollars or more.

Sales and value-added taxes: tax compliance as a complex challenge

One thing is clear: determining indirect taxes - which affects virtually all business transactions - is a complex challenge for companies: in the DACH region, half of those surveyed stated that they had had to deal with complaints from the tax authorities, and for a quarter this was very often the case. Internal audits brought errors to light for 67 percent, and a good third were confronted with them frequently. This puts the DACH region slightly ahead of the international average, where compliance violations in VAT determination were uncovered by authorities in 62 percent of companies and by internal audits in 75 percent. Financial consequences due to non-compliance with indirect tax regulations were suffered by 56 percent of DACH companies, compared to an international average of 75 percent.

When it comes to tax regulations, the majority shows courage to leave gaps

These figures also match their own assessment. Less than a third (29%) of managers from DACH see their company as a "champion" with future-proof structures for managing indirect taxes. 39% consider themselves to be "calculators" - reasonably well positioned, but with a certain willingness to take risks when it comes to indirect tax determination. 13% classify themselves as "risk takers" - according to the motto: "I can't fear what I don't understand". A full 19 percent state that they are "laggards" - their business activities are impaired overall by shortcomings in indirect tax determination.

Regulatory real-time reporting forces modernization

"In many cases, heterogeneous system landscapes have grown in companies, and with them a wide variety of processes, which means that indirect taxes are determined and checked partly manually and partly with self-made functions in the ERP systems. This takes time and is prone to errors, especially in international business," explains Maximilian Borgmann, Director Sales & Value Engineering at Vertex Inc. "At the same time, tax authorities around the world are demanding more and more real-time reporting - keyword EU VAT reform and eInvoicing. This is forcing companies to digitize their finance and tax functions with appropriate compliance management. In this context, it is essential to automate and standardize indirect tax determination as much as possible." 

Source: Vertex Inc.

Deficiencies in indirect taxes also associated with personal risks

In general, two thirds of managers surveyed - across all regions - are aware that their organization is taking risks when it comes to indirect taxes. Given their current level of indirect tax compliance in the company, a full 84 percent see themselves exposed to personal risks. At the same time, 31 percent of managers from DACH consider these personal risks to be significant. "This also has consequences for recruiting - attractive employers for the much sought-after tax experts in the future will primarily be those companies that are characterized by solid tax compliance management and do not expose their employees to unnecessary risks," comments Borgmann.

Fines, prosecution and personal professional consequences are also the aspects that are most feared when indirect tax regulations are breached. If there is an overall lack of internal management of indirect taxes, this also affects business development. For example, 40 percent of the DACH companies surveyed stated that they are unable to do business in certain regions for this reason.

Incorrect tax determination due to lack of expertise and technical support 

The reason for the difficulties in complying with indirect tax regulations is a combination of many, almost equally important factors in all of the regions surveyed. In DACH, for example, a lack of skills (41%) and a lack of technological support (36%) and data quality (35%) are combined with constant changes to tax regulations (33%) and insufficient digitalization within the company (33%).

The driving factors for improving the often risk-oriented situation with regard to indirect tax compliance are of a technical and strategic nature. In DACH, it is mostly a modernization of corporate systems. This applies above all to large companies. In second place is the growing number of tax regulations worldwide. The goal of creating a holistic approach to financial compliance is the third most important driver. This is closely followed by the growing online and digital business, which brings with it additional challenges in indirect tax determination.

Real-time reporting obligations put an end to indirect tax negligence 

"Tax authorities around the world are upgrading digitally, requiring electronic invoicing and real-time reporting of transaction data. 'Courage to leave gaps' is no longer an option; manual tax processes or retrospective corrections will soon no longer be possible," explains Borgmann. "What's more, the general digitalization of the finance function is in full swing. As a result, routine activities in the tax department will and must be automated and standardized to the maximum extent possible. This gives tax specialists more room to focus on controls and strategic planning, which benefits the company's overall results."

Source: Vertex

VAT in Switzerland: new rates apply from 1.1.2024

The above study focuses on the situation in the EU. However, there were also changes in Switzerland at the beginning of the year. The increase in value added tax came into force on January 1, 2024. The standard rate is now 8.1% (previously 7.7%), while the reduced rate is now 2.6% instead of 2.5%. The special rate for accommodation is now 3.8% instead of 3.7%. This means that companies are faced with the challenge of having to cover these additional tax costs on the one hand, while also having to adapt their systems (e.g. updates to ERP and accounting software) in order to avoid legal consequences on the other. For SMEs in particular, this may be associated with personnel and resource problems. 

(red.)

Best Places to Work: The 30 best employers worldwide in 2023

Every year, the "Best Places to Work" program certifies the best employers worldwide. The ranking for 2023 has now been published. Three companies from the healthcare and pharmaceutical sector occupy the top spots. A Swiss company is also among the top 30.

Best Places to Work has published the ranking of the 30 best employers worldwide in 2023. (Image: https://bestplacestoworkfor.org/)

The Best Places to Work organization announced its list of the world's 30 best employers for 2023 in early 2024. Topping this year's ranking for the second year in a row is Novo Nordisk, the global healthcare company with nearly a century of innovation and leadership in diabetes care, followed by Takeda, another leading global healthcare company. AstraZeneca secured third place among the world's 30 best performing companies.

Evaluating and recognizing quality in HRM

Best Places to Work is an international certification program that is considered the "platinum standard" in identifying and recognizing top workplaces around the world. It provides employers with the opportunity to learn about the quality of their HR practices and employee engagement, and to recognize those that provide an excellent work experience with the highest standards of working conditions. With this in mind, the Best Places to Work program has certified leading employers around the world with several years of experience in evaluating workplace culture, employee engagement and organizational effectiveness. To be considered, companies must be identified as outstanding employers on at least one of the continents.

The program works with global employers annually to help them measure, benchmark and improve their HR practices and employee experience, giving them access to the tools and expertise they need to drive effective and sustainable change in their organizations. The companies that made this year's top list demonstrate that they are excelling in the workplace by creating differentiated employee experiences and inclusive cultures that lead to stronger and more sustainable business results. These companies know how to gain a competitive advantage and enjoy remarkable benefits in terms of employee engagement, retention, financial performance and customer satisfaction.

Best Places to Work: The 2023 ranking list

And these are the 30 best employers for 2023 - in 26th and 27th place are the pharmaceutical company Roche and Habib Bank Zurich Hong Kong, two companies with Swiss roots: 

  1. Novo Nordisk
  2. Takeda
  3. AstraZeneca
  4. McDonald's
  5. Alcon
  6. Bristol Myers Squibb
  7. Ivanhoé Cambridge
  8. BSH
  9. Konecta Group
  10. Serving dish
  11. Allianz Trade
  12. Pluxee
  13. MSD
  14. Fujitsu
  15. Old people
  16. MoneyGram
  17. Lundbeck
  18. Schneider Electric
  19. British American Tabacco
  20. Fifth Avenue Financial
  21. Pfizer
  22. Beko
  23. Diageo
  24. Meridiam
  25. APL Logistics
  26. Roche
  27. Habib Bank Zurich Hong Kong
  28. Paidy
  29. Cipla
  30. Teka

Source and further information

Heraeus Noblelight acquired by Excelitas

The Heraeus Group has sold its Noblelight division, which specializes in the development and manufacture of specialty light sources, to Excelitas Technologies Corp. The acquisition was completed retroactively as of January 1, 2024.

Noblelight has been a member of the global Excelitas Technologies organization since the turn of the year. (Symbolic image; Unsplash.com)

Noblelight's specialty light sources, components and system solutions with wavelengths from ultraviolet to infrared are used in instrumental analysis, industrial UV curing, water treatment, electronics manufacturing, medical and cosmetic therapy, battery production and beyond. The company has plants in Germany, the UK, the USA, China and Japan as well as several international application centers and sales offices. Excelitas, based in Waltham, Massachusetts (USA), another leader in the development and manufacture of innovative, market-oriented photonics solutions for industry and medical technology, is now strengthening its position in the global market for specialty light sources through the acquisition, according to a press release.

"We are delighted that Noblelight and its strong team are now part of the Excelitas family," said Ron Keating, CEO of Excelitas Technologies. "With our combined know-how and manufacturing expertise, we now offer one of the most comprehensive and versatile lighting portfolios from a single source. We are united by a proven, customer-oriented product development strategy that promises market success and long-term, reliable business relationships in the future." The Noblelight acquisition is the latest in a series of strategic acquisitions by Excelitas Technologies since the company was founded in 2010. Excelitas Technologies has more than 7500 employees in North America, Europe and Asia and supplies customers all over the world.

"We have great expectations of our new partnership," added Noblelight Managing Director Roland Eckl. "We are thus optimally positioned to provide our customers with convincing solutions and accelerate our growth trajectory." The parties have agreed not to disclose the contractual terms of the takeover. No information has been disclosed about any changes in management or staff at the various Noblelight locations. 

Source: Excelitas Technologies Corp.