Home Working: Reduce The Cyber Risks

Whilst working from home will not be new to many organisations and employees, the coronavirus is forcing organisations to consider home working on a greater scale, and for a longer period of time. You may have more people working from home than usual, and some of these may not have done it before and this could go on for a lot longer than most people realise.

We live in an inter-connected world and we can work anywhere using the right cyber secure technology. Now video conferencing, live chat, social media and good old-fashioned emails let us catch up and share reports with employees in different time zones.

Working from home can be daunting for some people who haven't done it before, especially if it's a sudden decision. There are also practical considerations; staff who are used to sharing an office space will now be remote. Think about whether you need new services, or to just extend existing ones, so that teams can continue to collaborate. When working from home, make sure you are not helping hackers and scammers gain access to your business and company records.

Without the security protections that office systems afford us - such as firewalls and blacklisted IP addresses, we are far more vulnerable to cyber-attacks.

The most obvious risk is that most of our tasks are conducted online. If something’s on the Internet, then there’s always the possibility of a cyber-criminal compromising it. They might attempt to do this by cracking your password. This could be easier than ever if you’re reusing login credentials for the various online apps that you need to stay in touch with your team.

Alternatively, attackers could send phishing emails that are intended to trick you into either handing over your details or downloading a malicious attachment containing a keylogger. The dangers of phishing should already be a top concern, but things are especially perilous during the coronavirus crisis. If you're an employer with employees working from home, make sure you don't have holes in your Internet security system.

People who specialise in Internet security, say your home work environment may not be as secure as your regular work place and scammers are counting on it. 

Multiple Internet analyses indicate that phishing emails have skyrocketed since March. There have been more than 4.1 million spam emails globally in the last month. That's 139 thousand spam emails per day, many of them desigend to exploit to the  COVID-19 pandemic.

 In addition to phishing scams, cyber security experts said scammers capitalise on hidden work-from-home risks such as workers bypassing employer VPN, using unapproved online file sharing, and unauthorised apps and devices. 

Another vulnerable spot for many work-at-home employees is the your WiFi modem which is your link to the Internet and a gateway for cyber thieves if your password is not extra secure. 

NCSC:       Kaspersky:        ITGovernance:      KOMO News

If you would like more specific information about how you can improve your cyber home and business security, please contact Cyber Security Intelligence  for recommendations on the right solutions for your business. 

You Might Also Read: 

Cyber Criminals Exploit Lockdown Workers:


 

 

« WEBINAR: How to prioritize security controls for sensitive AWS assets
German Critical Infrastructure At Risk Of Russian Hacking »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Virtual Security

Virtual Security

Virtual Security provides solutions in the field of managed security services, network security, secure remote work, responsible internet, application security, encryption, BYOD and compliance.

vArmour

vArmour

vArmour is the industry’s first distributed security system that provides insight and control for multi-cloud environments.

CyberScout

CyberScout

Cyberscout delivers the latest cybersecurity education, protection and resolutions services. We also provide swift incident response services around the world.

Junglemap

Junglemap

Junglemap provide nanolearning training courses on ransomware, information security and GDPR.

NovaTech Automation

NovaTech Automation

NovaTech products and services make the world’s power grids and essential process industries more reliable, efficient, sustainable and secure.

Secarma

Secarma

Secarma provides penetration testing, security assessments, consultancy, and training services to ensure your digital infrastructure is secure from cybersecurity threats.

Information and Communication Technology Authority (ICT Authority) - Kenya

Information and Communication Technology Authority (ICT Authority) - Kenya

The ICT Authority is responsible for enforcing ICT standards in Government and ensuring information security.

Level Effect

Level Effect

Level Effect is developing new capabilities to bring a unique perspective on proactive network defense and advanced security analytics.

ActZero

ActZero

ActZero’s security platform leverages proprietary AI-based systems and full-stack visibility to detect, analyze, contain, and disrupt threats.

Speedinvest

Speedinvest

Speedinvest is one of Europe’s most active early-stage investors with a focus on Deep Tech, Fintech, Industrial Tech, Network Effects, and Digital Health.

InfusionPoints

InfusionPoints

InfusionPoints is your independent trusted partner dedicated to assisting you in building your secure and compliant business solutions.

Open Web Application Security Project (OWASP)

Open Web Application Security Project (OWASP)

The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software.

Ever Nimble

Ever Nimble

Ever Nimble are award-winning experts in IT support, cybersecurity, and cloud technology. Our proactive approach will enhance your security and protect you from cyber security threats.

Ignite Cyber

Ignite Cyber

IGNITE Cyber is focused on enabling secure technology adoption through intelligent business decisions. We are focused on providing a secure and stable business environment for everyone.

Hughes Network Systems

Hughes Network Systems

Hughes are industry leaders in networking technologies and services, innovating constantly to deliver the global solutions that power a connected future for people, enterprises and things everywhere.

SafeShark

SafeShark

SafeShark are Product Security and Telecommunications Infrastructure (PTSI) Act and Radio Equipment Directive (RED) compliance specialists.