Swiss companies are investing more in cyber security

In the face of geopolitical tensions and rapid technological change, Swiss companies are increasing their investments in cybersecurity - but they are lagging behind in international comparison. The new PwC study «Global Digital Trust Insights 2026» provides an insight into the cybersecurity strategies of local companies and shows where there is a need for action.

«Only half of Swiss companies are spending more money on their cyber security - this is too little, precisely because cyber criminals are constantly investing. This leaves smaller companies and particularly vulnerable sectors such as healthcare and especially critical infrastructures vulnerable,» explains Urs Küderli, Partner and Head of Cybersecurity and Privacy at PwC Switzerland. He goes on to emphasize: «Investing in technology is not enough. Clear governance, processes and a risk-managed approach are needed to make cybersecurity effective and increase resilience in the long term.»

Swiss companies are modernizing - but gaps remain

Technological modernization was cited by 56 % of the companies surveyed in Switzerland as the main reason for higher cyber investments - well above the global average of 41 %. Nevertheless, there is often a lack of comprehensive risk quantification and company-wide integration and management. Few companies carefully analyze the financial and, in some cases, legal consequences of cyber risks, which means that resources are often unbalanced between prevention and response.

In the area of safety training, around half of Swiss companies rely on automation and upskilling. It is interesting to note that the use of AI-supported learning tools in Switzerland, at 34 %, lags well behind the global average of 53 %. Comparably internationally, it is governance and risk issues and not technical hurdles in the use of AI in cyber defense (43 % of respondents). Accordingly, a consistent focus on clear governance rules and the reduction of control gaps are very important in order to be able to use the potential of AI safely and effectively.

Quantum computing preparation - an underestimated risk

While companies around the world are increasingly preparing for the risks of quantum computing, Switzerland is showing restraint. Only 11 % of companies are concretely prepared, while 40 % are still in the exploration phase. This jeopardizes the security of sensitive and sensitive data in the long term, long before quantum computers are available in a dangerous form. Quantum computers will be able to crack existing encryption in the future and criminals will be able to collect data today in order to attack it later. Johannes Dohren, Head of Cyber Resilience and Defense at PwC Switzerland, warns: «Quantum is closer than many people think. Swiss companies will be exposed to considerable risks in the near future if they don't take action now.» As is often the case, it starts with an «inventory»: what data is worth protecting in the long term, where do I use encryption, which algorithms do I use, etc.? This basic step allows a risk assessment to be made and a protection strategy to be developed over the next few years.

Based on these findings, the authors of the study recommend that Swiss organizations:

• Treat cybersecurity as a strategic factor for a sustainably successful business environment, not just as a cost factor or a technology problem
• Strengthen risk, data and AI governance to combine security and innovation
• Integrating CISOs as partners in transformation, value creation and value retention
• Addressing AI and quantum readiness now to mitigate future risks

Source: PwC