The business management literature has largely neglected the theme of risk management for Small- to Medium-sized Enterprises (SMEs). So the aim of this research was to explore the current state of risk management in German SMEs. Derived from a comprehensive analysis of a questionnaire survey which was supported by research interviews, a multidimensional scoring approach to assess a firm’s risk management sophistication has been developed. The present approach does not evaluate one single scoring figure, as is usual. Instead, it allows a differentiated assessment by evaluating separate scoring figures for each aspect that a holistic risk management system should cover. Based on the scoring approach, this paper introduces a new typology of ri...