\u2013 A white paper from CEO to CEO<\/p>\n\n
Thomas Weihrich, CEO, Weihrich Informatik<\/p>\n\n
September 17, 2026<\/p>\n\n
Here is my answer. I\u2019m not writing this as a salesperson, but as a colleague who understands the concerns of a business owner from my own experience: responsibility for employees and customers, limited resources, and the need to position the company for a secure and sustainable future. What I\u2019m about to describe are seven areas of action that I consider the most important today. None of them is a vision\u2014all are proven, affordable, and feasible in companies like yours. <\/p>\n\n On top of that, there are three trends I\u2019ve observed in nearly every company: Employees work from anywhere, and their devices constantly switch between the corporate network and third-party Wi-Fi networks. Many use AI tools via personal accounts without the IT department\u2019s knowledge. And many Microsoft 365 environments are running with default settings that are no longer sufficient to withstand this level of threat. <\/p>\n\n That\u2019s why IT security is now a top priority for executives. Not because you have to configure firewalls yourself\u2014but because only senior management can make the necessary decisions, set priorities, and approve budgets. And it\u2019s more than just a formality: Those who professionally protect their IT environment position themselves as reliable partners in the marketplace. Customers, suppliers, and partners rightly expect their data to be in safe hands. <\/p>\n\n A thorough analysis scan examines your entire IT architecture for hidden vulnerabilities, outdated protocols, and potential entry points. The result is not an obscure list of error logs, but a clear analysis that tells you, in management terms: These areas are well-positioned; here, there is an urgent need for action. <\/p>\n\n Building on this, we create a security package tailored precisely to your business\u2014with proactive monitoring, state-of-the-art firewall solutions, and multi-factor authentication. The big picture is crucial here: IT must not be a patchwork. When systems do not integrate seamlessly, it not only leads to inefficiencies in day-to-day operations but, more importantly, creates dangerous security vulnerabilities that attackers can exploit. <\/p>\n\n The Microsoft Secure Score transparently shows how well your tenant is protected. We don\u2019t view this score as a static number, but rather as an ongoing mission: to disable unused features, strictly regulate access rights, and enforce security standards across the board. Specifically, this means: limiting administrative privileges to the absolute minimum, disabling outdated authentication protocols, consistently configuring threat defense and data encryption, and continuously monitoring login activity. <\/p>\n\n My advice: Have your Microsoft 365 environment checked regularly by experts. The investment is negligible compared to the damage caused by a compromised tenant. <\/p>\n\n Cisco Duo Essentials provides the foundation: phishing-resistant multi-factor authentication and device verification before every login. Thanks to over 500 pre-built application integrations, Duo Essentials can be quickly deployed in virtually any environment\u2014without months-long projects. <\/p>\n\n Duo Advantage goes significantly further. At its core is Cisco Identity Intelligence (CII): It consolidates identity data from the on-premises Active Directory and cloud sources such as Entra ID, Okta, or Google Workspace into a comprehensive view of your identity landscape. Specifically, this means the system also protects legacy protocols that do not support modern MFA. It detects forgotten or overprivileged administrator accounts that would otherwise go unnoticed and become persistent attack vectors. It detects suspicious login patterns and lateral movement by attackers within the network\u2014thanks to AI-powered ITDR (Identity Threat Detection and Response). And it identifies gaps between local AD and cloud identities (Identity Security Posture Management). <\/p>\n\n In short: Essentials secures the login, while Advantage secures the entire identity.<\/p>\n\n A SOC (Security Operations Center) is the central security control center where all data streams converge. There, unusual activity is immediately detected, assessed, and classified. SOAR (Security Orchestration, Automation, and Response) connects your individual security systems and automates response workflows: If the SOC detects an imminent threat, the appropriate countermeasure is implemented without delay. <\/p>\n\n The same principle applies to end devices: If a device exhibits suspicious behavior or reports an infection, it is automatically disconnected from the company network. The damage remains confined to that device; the rest of the infrastructure remains intact, and your employees can continue working. <\/p>\n\n For you as management, this means: You\u2019re not just buying technology, but time\u2014the most valuable resource in any security incident.<\/p>\n\n The answer is SecureEdge, a cloud-first SASE platform that moves security capabilities directly to the cloud. Regardless of location, every device benefits from the same high standard of protection as at a fixed workstation\u2014without any loss of performance or obstacles to daily work. Your employees won\u2019t even notice the protection\u2014except that they can work securely. <\/p>\n\n This is the most advanced way to extend the protection of central IT to the mobile world, especially for companies with 50 to 1,000 employees that operate in a hybrid model or across multiple locations.<\/p>\n\n The result is nonetheless an uncontrolled outflow of data: Public AI models are trained using the information entered. Internal documents, customer data, or trade secrets thus leave the company\u2019s secure environment\u2014irreversibly. <\/p>\n\n A strict ban is rarely the solution. It creates underground channels instead of protecting data. The better approach: foster transparency, assess actual usage, and steer AI use in a safe direction\u2014with clear guidelines, employee awareness training, and secure, approved alternatives. This way, your team benefits from the increased efficiency provided by AI, while your data remains protected. <\/p>\n\n The Disaster Recovery Plan (DRP) outlines what happens in the event of an emergency: clearly defined responsibilities, reliable communication channels, and strictly prioritized procedures. It answers the questions that leave no time for discussion during a crisis: Who makes the decisions? Who notifies employees, customers, and authorities? Which systems must be restored first? <\/p>\n\n The development of a DRP begins with a candid assessment: risk analysis, evaluation of the most critical business processes, and definition of maximum downtime and tolerable data loss. This leads to technical solutions\u2014such as redundant systems and off-site backups\u2014as well as organizational guidelines. <\/p>\n\n And a plan is only as good as its implementation: Regular testing is essential, because a contingency plan from three years ago no longer covers today\u2019s risks. The DRP is a living document that grows with your company. <\/p>\n\n In my conversations with business owners, one thing stands out: Many of their competitors neglect their systems. This presents an opportunity. Those who professionally strengthen their operations position themselves as a reliable player within the industry\u2014in the eyes of customers, partners, and in competitive bids. <\/p>\n\n My recommendation as a colleague: Start by taking stock of the situation. It provides clarity, costs very little, and shows you the way forward. You don’t have to tackle everything at once\u2014but you should know where you stand. <\/p>\n\n At Weihrich Informatik, we speak your language, explain complex issues in a way that\u2019s easy to understand, and take real responsibility\u2014from initial planning through integration to support. Talk to your IT team; give me a call or send me an email: Let\u2019s discuss 7 areas of focus that will help you and your business move forward! For more information, visit the \u201cNews \u2013 Weihrich Informatik<\/a> \u201d section at https:\/\/www.weihrich.ch\/loesungen\/it-komplettloesungen\/<\/a> <\/p>\n\n Yours,<\/p>\n\n Thomas Weihrich, CEO, Weihrich Informatik<\/p>\n\n <\/p>\n\n1. The Current Situation:
2. Action Area 1:
3. Action Area 2:
4. Action Area 3:
5. Action Area 4:
6. Action Area 5:
7. Action Area 6:
8. Action Area 7:
9. An Overview of the Seven Areas of Action
Area of Action<\/strong><\/td> Key Question<\/strong><\/td> Centralized Solution<\/strong><\/td><\/tr><\/thead> Security Analysis<\/td> Where do we stand today?<\/td> Vulnerability Scan and Customized Security Package<\/td><\/tr> Microsoft 365<\/td> Is our tenant really hardened?<\/td> Secure Score as an Ongoing Task<\/td><\/tr> Identities<\/td> Who actually gets in?<\/td> Cisco Duo Essentials and Advantage with Identity Intelligence<\/td><\/tr> Automated Response<\/td> What happens in an emergency?<\/td> SOC and SOAR with Automatic Decoupling<\/td><\/tr> Mobile Devices<\/td> Are we protected even when we’re outside?<\/td> SecureEdge as a Cloud-First SASE Platform<\/td><\/tr> Shadow AI<\/td> Where does our data go?<\/td> Transparency, Guidelines, Safe Alternatives<\/td><\/tr> Emergency Plan<\/td> Are we capable of taking action?<\/td> Disaster Recovery Plan with Regular Tests<\/td><\/tr><\/tbody><\/table><\/figure>\n\n 10. Conclusion: Your Next Step<\/h1>\n\n