The Cyprus Mail spoke with Andrey Leskin, Chief Technology Officer of Cyprus-based Qrator Labs, about the cybersecurity risks facing small and medium-sized enterprises (SMEs) in Europe. Leskin pointed to ransomware as the most serious threat. He said limited resources and a lack of strategic focus leave many SMEs vulnerable.
Leskin stressed that governments can help by creating tax-friendly policies, supporting public education, and building strong local cybersecurity sectors. He also discussed challenges in the cybersecurity job market, such as the talent shortage and the perception of cybersecurity roles. Leskin shared his thoughts on Cyprus’ push to become a regional cybersecurity hub, highlighting both its advantages and potential risks.
Ransomware: The Top Threat to SMEs
Leskin said ransomware remains the biggest cybersecurity danger to SMEs today. In these attacks, criminals break into company systems, encrypt important data, and then demand payment for the decryption key.
Many SMEs are poorly prepared for such attacks. They often lack proper data backups and do not secure administrator accounts well. Leskin explained that SMEs struggle to plan for all possible threats because of their limited budgets. Instead, they focus on recent problems or compliance requirements. This means ransomware, despite its severe impact, is often overlooked until it is too late.
The Role of Government Support
Leskin believes governments should make it easier for SMEs to access affordable cybersecurity tools, especially for data protection and backups. He suggested lowering taxes and reducing red tape. Governments can also promote awareness by hosting workshops and conferences that explain real-world risks.
Leskin noted that beyond ransomware, SMEs also face threats like data leaks, DDoS attacks, phishing, and business email fraud. He encouraged cooperation between cybersecurity vendors and SMEs to tackle these risks effectively.
Cybersecurity Talent Shortage and Its Impact
The shortage of skilled cybersecurity workers mainly affects large companies, Leskin said. Small businesses are less impacted because they rarely hire full-time cybersecurity staff. Often, SMEs lack the budget or prefer to invest in other roles.
Leskin pointed out that many businesses see cybersecurity as just a compliance issue. This view leads them to offer salaries similar to compliance jobs, even though cybersecurity roles require technical skills like programming and systems management. As a result, fewer skilled professionals are interested in these jobs.
Leskin suggested that more investment in cybersecurity education could help grow the talent pool. This could attract people who might otherwise choose other technical careers.
Cyprus’ Cybersecurity Ambitions
Leskin said Cyprus has a friendly business environment that makes it attractive to foreign companies. This gives the country a good chance to draw in international cybersecurity firms and support local startups.
However, Cyprus faces tough competition from places like Israel and the UAE, which are also growing their cybersecurity sectors. Still, Cyprus benefits from being part of the EU, which offers regulatory and market advantages.
Leskin warned that as Cyprus promotes itself as a cybersecurity hub, it could become a bigger target for cyberattacks. This may force the government to invest more in protecting its digital infrastructure. He added that while building strong cyber defenses requires significant upfront spending, maintaining those defenses over time is far more affordable.
