In my daily consulting work, I encounter the same IT challenges again and again – regardless of industry or company size. The pattern is striking: The problems are well-known, the causes are similar, and yet they are often dragged along for years because "it works somehow anyway."
In this article, I describe the five most common IT problems I encounter in Swiss SMEs, explain why they develop, and show a structured way out of the situation.
1. No Clear IT Strategy
The Problem
Many SMEs operate their IT purely reactively: Action is only taken when something doesn't work or an acute need arises. Investments happen sporadically and unplanned – a new server here, a cloud tool there, a software license somewhere else. There's no overarching thread.
Why It Happens
In SMEs, IT is rarely a core competency. Responsibility often falls on someone who "also does IT" – the managing director, the accountant, or the tech-savvy employee. For strategic planning, there's simply a lack of time and know-how.
The Solution
Develop a simple IT roadmap – not a 50-page strategy, but a pragmatic document that answers three questions: Where are we today? Where do we want to be in 2–3 years? What measures are necessary for that? Review this roadmap at least once a year.
2. Shadow IT and Uncontrolled Tool Sprawl
The Problem
Employees independently use cloud services, apps, and tools that no one in IT knows about or has approved. Dropbox here, Trello there, WhatsApp for business communication – so-called Shadow IT grows unchecked.
Why It Happens
Shadow IT is usually not malicious intent, but a sign that official tools are insufficient or cumbersome. Employees seek pragmatic solutions for their daily work. The problem: These tools store company data outside enterprise security – without backups, without access controls, without compliance.
Typical Shadow IT Risks
Data loss: Company data on private clouds without backup strategy
Security vulnerabilities: Outdated apps as entry points for attacks
Compliance violations: Personal data on servers outside Switzerland/EU
Loss of control: No visibility into where which data resides
The Solution
Instead of banning Shadow IT, you should make it visible and channel it. Conduct an IT inventory: Which tools are actually being used? Which of them are worthwhile? For the useful ones, find official, secure alternatives. For the others, define clear guidelines. The key is that official tools must actually work well – otherwise employees will find workarounds again.
3. Unclear Responsibilities Between Business, IT, and External Partners
The Problem
Who is responsible if email doesn't work? Who decides whether a new tool should be introduced? Who coordinates with the external IT service provider? In many SMEs, these responsibilities are not clearly defined. This leads to tasks being neglected, work being duplicated, or decisions being delayed.
Why It Happens
SMEs grow organically – and IT organization doesn't grow with it. When a company grows from 5 to 30 employees, IT structures often remain as they were at founding. Additionally, there's frequently no clear distinction between what is handled internally and what the external provider does.
The Solution
Create a simple RACI matrix for the most important IT topics: Who is responsible (Responsible), who makes decisions (Accountable), who is consulted (Consulted), who is informed (Informed)? It sounds formal, but can fit on a single page and brings enormous clarity.
4. Outdated Infrastructure Held Together with Workarounds
The Problem
The server in the basement is eight years old, the printer only works with a specific driver, and the accounting software still runs on Windows Server 2012. It works – just barely. But every change becomes a risk, and IT costs creep up through constant repairs and workarounds.
Why It Happens
"Never change a running system" is an understandable instinct, but dangerous in the long run. The fear of change, combined with the cost of modernization, causes investments to be postponed again and again – until the pressure becomes so great that everything has to be renewed at once.
When Does Outdated Infrastructure Become Dangerous?
It becomes critical as soon as operating systems or software no longer receive security updates. Windows Server 2012, for example, has had no regular support since October 2023. Systems without updates are open doors for cyberattacks.
The Solution
Conduct an inventory assessment: What is outdated? What is critical? Prioritize by risk and business relevance. Then create a modernization plan in phases – not everything at once, but step by step and plannably. Also evaluate which systems can be moved to the cloud.
5. Missing Documentation and Knowledge Management
The Problem
Only the external IT partner knows the network configuration. Only the managing director has the server passwords – somewhere in an Excel file. The employee who set up the backup three years ago is the only one who understands how it works. If any of these people leave or are unavailable, the company faces a serious problem.
Why It Happens
Documentation is thankless work. It provides no immediate benefit, takes time, and is systematically neglected in daily operations. The result: Knowledge gets bound to individual people instead of being anchored in the organization.
The Solution
Start with the essentials: Document critical systems, access credentials, and processes. This doesn't need to be a comprehensive IT manual – a structured overview of the key points is enough to start. Use tools like a wiki, a shared notebook, or a simple SharePoint page. What's important: Establish who maintains the documentation and review it regularly.
- Network diagram: Which systems are connected, where are servers located, which IP ranges are used?
- Access credentials: Centralized, secure management of all admin access (e.g., with a password manager)
- Backup concept: What is backed up, where, how often, and has restoration been tested?
- Disaster recovery plan: What to do in case of total failure? Who is reachable? What steps need to be taken?
Conclusion
These five problems are not a sign of failure – they are the natural consequence of SMEs channeling their energy into their core business. And that's the right approach. But sooner or later, IT reality catches up with every company.
The good news: None of these problems is unsolvable. It doesn't take a million-dollar budget plan, but rather a clear view of the current situation, pragmatic priorities, and step-by-step implementation. Often, just a few targeted measures are enough to achieve noticeable improvements.
Tackling IT Challenges?
I help you bring clarity to your IT landscape – with a structured analysis, pragmatic priorities, and an actionable plan.
Schedule a free initial consultation