Interview with Markus Adolph: Cyber resilience starts with people
In a digital world where cyberattacks have become a daily threat, cyber resilience is a key factor for business success. But true security does not come from technology alone—it requires people. Markus Adolph provides insights into EBF's security culture and encourages other entrepreneurs to make cybersecurity a top priority—with people at the center.
Why is cyber resilience so important today?
“In our digital world, cyber attacks are unfortunately part of everyday life – and the risk is constantly increasing. Technologies such as artificial intelligence and quantum computers will profoundly change our security landscape. We must therefore work hard to prepare for a time when AI is ubiquitous and quantum computers could render conventional encryption useless. Security must be a top priority and is crucial to business success. Those who do not address this issue comprehensively now risk the future of their company.”
No easy task. How can companies position themselves securely?
“Security must be a top priority – but it must not remain in the boardroom. For me personally, this issue has absolute priority and is based on three pillars: a clear strategy, innovative technologies, and continuous awareness-raising among all employees. Attentive users, who are supported by effective technologies and well-designed structures, form the foundation of a strong security culture. This is the only way to ensure a high level of protection in the long term and to identify threats in good time and defend against them decisively. Security is teamwork!”
What is the security culture like at EBF – how are employees made aware of security issues?
“Security requires every single person – it is a shared responsibility! It is incredibly important to me that our employees do not see themselves as a potential weak link, but as part of the solution. To achieve this, we need to alleviate their fears and empower them. We rely on regular training courses – designed to be interactive – and continuously carry out phishing simulations that provide many valuable tips and create moments of realization. Anyone who is unsure can get support at any time. This is the only way to develop genuine security awareness – and confidence in one’s own ability to recognize attacks. And, of course, I also complete every training course – security needs all of us.”
How can technologies relieve and protect employees? What security solutions does EBF use?
“Security technologies play an essential role in supporting and relieving employees. They form a strong protective shield. Among other things, we rely on powerful firewalls, virus scanners, UEM systems, VPN, and mobile threat defense solutions that ward off many dangers in the background. Effective internal and external monitoring ensures that security-related events are detected immediately and updates are carried out promptly. We also provide our employees with tools for secure password management and encrypted file transfer to external parties – so that uncertainties and detours don’t arise in the first place. Our internal IT team does a great job here, balancing security and usability.”
What strategic considerations underpin all of this?
“Our security is based on a holistic, risk-based security strategy. We have established clear responsibilities, structures, processes, and guidelines—accessible and understandable to all, and implemented through appropriate measures. This also includes regularly reviewing where we stand. A well-thought-out emergency plan ensures that everyone knows what to do in an emergency. And transparency is a key component in all of this: those who know what measures are being taken and why develop a genuine awareness of security.”
What advice would you give to companies that want to improve their cyber resilience?
“The key to greater cyber resilience lies in a holistic approach. Identify, assess, and prioritize risks, and then derive measures from them. Technical solutions are essential—but they alone are not enough. The crucial thing is to get people on board! Create awareness that everyone can – and must – make an important contribution. Combine this with the right technologies and clear processes. And stay on top of it! Security is not a project with an end date. Security must be part of a company’s mindset and constantly evolve. When everyone pulls together, security is not only a shared responsibility, but also a shared strength.”
E-BOOK: The EBF Security Compass – with all our knowledge
A comprehensive guide to IT security covering cyber resilience strategies, current threats, the influence of AI, and measures to strengthen the security culture in companies.
