Remote Working & Cyber Security

COVID-19 has transformed how companies operate today. With 50 percent to 90 percent of staff working remotely, organisations are now looking at remote work as the new working style in the future. While working remotely has its benefits, one of the biggest challenges it presents is cyber security problems. 

Remote working has a lot of benefits, including increased productivity, improved employee mental health, and reduced costs in office space. But it also has its challenges. Your remote employees may be unknowingly putting your company's data at risk. Working from home can potentially lead to data breaches, identity fraud, and a host of other negative consequences. 

For many businesses, remote working has become a normal practice. Working away from the office had been on the rise for the past few years, but many organisations were pushed to begin embracing it from March 2020.Since then, businesses have solved teething issues like remote collaboration and a lack of equipment. But what about the security implications?

Remote working brings with it a new set of cyber security challenges. We already know that your employees are your weakest link when it comes to your IT security and 95% of security problems start with human error. Cyber security education is vital to ensure that your remote working policies are followed closely .Remote working can blur the lines between business and personal life. That means employees could slip into bad cyber security habits, for example, using work devices for personal tasks and vice versa.

A survey by IBM found that over half of remote workers use a personal device to carry out their work. Business data is more likely to be compromised on a personal device, especially if people external to the business are using it. Employees won’t have business-grade security solutions installed on their personal devices and, with no IT supervision, they may have unknowingly installed malware or bloatware.

This isn’t a risk only associated with home working, but it’s amplified in this setting. Phishing emails in the UK significantly increased by over 600% during the start of the Covid virus. The attacks used widespread awareness of the subject to trick users into handing over their log-ins and financial information, and/or unwittingly downloading malware to their computers.

Phishing emails have become so sophisticated that it is increasingly becoming harder for employees to detect them, especially when phishing emails make it past email filters straight to an employee's main inbox.

Cyber criminals are also taking advantage of the pandemic itself. The study found that a lot of phishing emails were Covid-themed, capitalising on widespread fears about the virus. Some scam emails are impersonating the World Health Organisation (WHO) and it has now issued fake email guidance. Education is vital to avoiding falling victim to an email-borne cyber-attack. By empowering your employees to spot the signs of a suspicious email, file, or link, you’re strengthening your first line of defence. You can educate your staff in many ways, from mandatory training courses to tools which simulate phishing attacks. 

UK workers are also reckless when it comes to software. A fifth (20 percent) don’t install updates for collaboration and video conferencing tools, such as Zoom or Webex, and a quarter (23 percent) admit they do not update software installed on devices connected to their home WiFi network. Two thirds of workers haven’t received any formal training on how to stay safe when working from home, while only a third of businesses have established cybersecurity policies for remote working.
A strong cyber security defence includes strong password policies, however, this can often be overlooked or even put aside for most employees as something ‘to do later’. Sometimes their passwords might also not be strong enough to fight against cyber hackers.

Cybersecurity is a critical component in remote working. Employees need to ensure that they are following the guidelines to work from a remote location safely. Since remote working is going to become the new normal, cybersecurity will take the frontier in configuration and setup for remote employees. Cyber security should always be a high priority for businesses, but it takes precedence for organisations with a high percentage of remote workers. Only By putting effective training and the right security measures and in place, can you improve the chances that your remote workforce won't compromise the security of your business.

WHO:     Data Center Dynamics:       DZone:    Infosecurity Magazine:    ITProPortal:   SOS Can Help:     Image: Unplash

You Might Also Read:

Every Single Employee Requires Cyber Security Training:

 

« US Legislators Take Aim At Big Tech Companies
DarkSide May Not Stay Dark For Long »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Black Hat Briefings

Black Hat Briefings

The Black Hat Briefings are a series of highly technical information security conferences that bring together thought leaders from all facets of the infosec world.

Cyren

Cyren

Cyren is a cloud-based, Internet security technology company providing threat detection and security analytics.

Clusit

Clusit

Clusit is the Italian Association for Information Security, a nonprofit organization devoted to promoting every aspect of information security.

D-Fence

D-Fence

D-Fence high availability security service protects corporate email communication, the company and it's employee's against cyber threats.

Bit4id

Bit4id

Bit4id provides software and systems for security and identification based on PKI technology.

Smokescreen

Smokescreen

Smokescreen's IllusionBLACK employs deception technology to detect, deflect and defeat advanced hacker attacks.

SySS

SySS

SySS is a market leader in penetration testing in Germany and Europe.

Vaulto Technologies

Vaulto Technologies

Vaulto protects critical business processes that are conducted via the cellular network.

Dreamlab Technologies

Dreamlab Technologies

Dreamlab specialises in securing critical IT infrastructures. We offer qualitative support and advice for managing your infrastructure and cyber security needs.

Penten

Penten

Penten is an Australian-based cyber security company focused on innovation in secure mobility and applied AI (artificial intelligence).

CyberCyte

CyberCyte

CyberCyte provides a disruptive built-in integrated physical, network and perimeter security solution framework.

Qohash

Qohash

With a focus on data security, Qohash supports security, compliance and optimization use cases enhancing your risk management process.

Comcast Business

Comcast Business

Comcast Business keeps businesses ready for what’s next with powerful connectivity, advanced cybersecurity solutions, and the right people at your side.

Kiberna

Kiberna

Kiberna are a small but niche company specialising in data driven security to manage your cyber risks.

Novacoast

Novacoast

Novacoast helps organizations find, create & implement solutions for a powerful security posture through advisory, engineering, development & managed services.

GuardYoo

GuardYoo

GuardYoo's SaaS platform allows cybersecurity professionals to perform Compromise Assessment remotely from anywhere in the world.