SMEs increasingly adopt external cybersecurity services

A study titled ‘Stand der IT-Sicherheit 2026’ reveals that small and medium-sized enterprises (SMEs) in Germany, Austria, and Switzerland are increasingly relying on external cybersecurity expertise. Due to rising cyber risks and a shortage of internal resources, many companies are opting for managed services and specialized providers rather than building in-house security teams.

Key services in demand include Managed Detection and Response (MDR), cloud-based management platforms, and external experts to assist in detecting and analyzing security incidents. Despite the shift toward outsourcing, the study notes a significant increase in internal security knowledge; the proportion of surveyed organizations with IT staff possessing specialized security expertise rose from less than 50 percent in 2023 to over 70 percent in 2026.