Pentest Budget 2025 for IT decision-makers: How to explain pentests & Co. to your management

Preventive measures often only show their value once damage has been prevented. Nevertheless, you can estimate the likelihood of an attack on your company based on the general threat situation in Germany and your industry. According to Claudia Plattner, President of the Federal Office for Information Security (BSI), it is no longer a question of whether a company will be hacked, but when.

The BSI's 2023 IT security report provides relevant facts:

• According to a Bitkom study, almost every German company has been affected by a cyber attack at some point.
• The increasing professionalization of cybercrime makes ransomware (as a service) in particular a growing threat.
• Hackers are increasingly working more efficiently and in a more collaborative manner, which is increasing the threat situation.
• Ransomware attacks often affect not only the attacked company itself, but also its customers, which increases reputational damage.
• Outsourced IT does not protect against damage: IT service providers are a popular target and their customers are directly affected.
• No one is too small or too big: large companies remain attractive targets, while SMEs and public institutions become easy targets due to lower defenses.
  
  

Is your management asking for concrete figures? The HDI Cyber ​​Study 2023 shows the average damage caused by cyber attacks on SMEs and large companies - valuable figures for your argumentation.