In the context of increasing digitalization and networking, the importance of cyber security for family businesses is also growing and is moving onto the management agenda as a cross-divisional, group-wide challenge. A study of 184 German companies shows that although family businesses identify cyber security as a relevant field of action, they do not take sufficient account of the organizational framework and process implementation. This paper is dedicated to the investigation of this phenomenon. Possible causes of this phenomenon are discussed. Based on this, recommendations for action are given.