The present study focuses on the tension between human versus technical risks in German companies. It examines how employees counter cybercrime and how this affects the company. Aim is to analyze human threats in family businesses and to create opportunities to use the human factor as an opportunity in the context of technological change. For this, an empirical study among 184 German firms was conducted. In general, the results demonstrate an insufficient awareness of the topic in the companies. Although companies are aware of the need for trained employees, there is a backlog of demand for workshops and awareness raising. Employees are detected as the main security risk, especially in family businesses. Better employee training is therefore indispensable. However, even training courses cannot prevent employees from making mistakes in the area of cyber security. Therefore, it can be emphasized that additional organizational security measures are necessary.