{"id":38509,"date":"2020-04-24T16:19:16","date_gmt":"2020-04-24T08:19:16","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=38509"},"modified":"2020-06-19T17:40:47","modified_gmt":"2020-06-19T09:40:47","slug":"cybersecurity-simplicity-in-a-complex-time","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2020\/04\/24\/cybersecurity-simplicity-in-a-complex-time\/","title":{"rendered":"Cybersecurity simplicity in a complex time"},"content":{"rendered":"\n

By Sumit Bansal
Managing Director of ASEAN and Korea
Sophos<\/strong><\/p>\n\n\n\n

Due to the COVID-19 health crisis, countries around the world are in various states of lockdown forcing many businesses to take a serious look at remote working for business continuity. <\/strong><\/p>\n\n\n\n

While many businesses offered employees some level of remote working before the COVID-19 pandemic, others were not that far along in their digital transformation journeys. Mobilizing a remote workforce is now necessary for business survival and while it might not be ideal for a lot of businesses, it could very well be the buoy to keep businesses (and economies) afloat in this unprecedented time.<\/p>\n\n\n\n

Instigating remote working can also be exacerbated by the ever-changing cyberthreat landscape. However, following some common sense guidelines for remote working for organizations and employees, can reduce the cyber risks associated with working from home.    <\/p>\n\n\n\n

Enabling remote working<\/strong><\/p>\n\n\n\n

Simply arming employees with a laptop and mobile phone doesn\u2019t mean they are ready for safe remote working. <\/p>\n\n\n\n

To protect their businesses and employees from cyberthreats such as scams, phishing and malware, employers need to ensure that employees have the necessary knowledge to help them navigate any potential cyberthreats they may come across while working remotely. In fact, it is especially important in times of uncertainty that employees are reminded of the potential cyber threats as cybercriminals capitalize on people\u2019s fears and curiosity and leverage this for their nefarious activities to trick people into providing personal details or clicking on malicious links disguised as legitimate organizations offering help or information relevant to the crisis.  <\/p>\n\n\n\n

This is why, whether employees are using company-issued or personal devices, it\u2019s imperative that the appropriate cybersecurity tools are installed \u2013 such as endpoint or mobile protection \u2013 to ensure company files are kept safe no matter when, where or how employees are accessing them. When possible, it is also good to use a virtual private network (VPN) to ensure all the data transferred between the home user and the business network is encrypted and protected in transit. <\/p>\n\n\n\n

\"\"
To protect their businesses and employees from cyberthreats such as scams, phishing and malware, employers need to ensure that employees have the necessary knowledge to help them navigate any potential cyberthreats they may come across while working remotely.<\/em><\/figcaption><\/figure><\/div>\n\n\n\n

Here are some guidelines for safe remote working for employees and businesses: <\/p>\n\n\n\n

1. Make it easy for users to get started<\/strong>
Remote users may need to set up devices and connect to important services. Look for products (security and otherwise) that offer a self-service portal so that users can do things themselves.<\/p>\n\n\n\n

2. Ensure devices and systems are fully protected<\/strong>
Ensure all devices, operating systems and software applications are up to date with the latest patches and versions. All too often malware breaches an organization\u2019s defenses via a rogue unpatched or unprotected device.<\/p>\n\n\n\n

3. Encrypt devices wherever possible<\/strong>
Most devices include native encryption tools such as BitLocker \u2013 be sure to use them.<\/p>\n\n\n\n

4. Create a secure connection back to the office<\/strong>
Using a VPN ensures that all data transferred between remote workers and the office network is encrypted and protected in transit. Plus, it makes it easier for employees to do their jobs.<\/p>\n\n\n\n

5. Scan and secure email and establish healthy practice<\/strong>
Home working will likely lead to a big increase in email. Cybercriminals are wise to this and are using the coronavirus in phishing emails as a way to entice users to click on malicious links. Ensure email protection is up to date and raise awareness for phishing amongst employees.<\/p>\n\n\n\n

6. Enable web filtering<\/strong>
Apply web filtering rules on devices to ensure users can only access content appropriate for \u2018work\u2019 while protecting them from malicious websites.<\/p>\n\n\n\n

7. Enable use of cloud storage for files and data<\/strong>
Cloud storage enables people to still access their data if their device fails while working remotely. Don\u2019t leave files and data in the cloud unprotected and accessible by anyone. At the very least, employees must successfully authenticate. Multifactor authentication takes that a step further.<\/p>\n\n\n\n

8. Manage use of removable storage and other peripherals<\/strong>
Working from home may increase the chance of people connecting insecure devices to their work computer \u2013 therefore you should enable device control within your endpoint protection to manage this risk.<\/p>\n\n\n\n

9. Control mobile devices<\/strong>
Mobile devices are susceptible to loss and theft. To lock or wipe them should this happen, implement application installation restrictions and a unified endpoint management solution to manage and protect mobile devices.<\/p>\n\n\n\n

10. Make sure people have a way to report security issues<\/strong>
Give people a quick and easy way to report security issues, such as an easy-to-remember email address.<\/p>\n\n\n\n

11. Make sure you know about shadow IT solutions<\/strong>
With large numbers of people working from home, shadow IT \u2013 where non-IT staff find their own technology to solve issues \u2013 will likely increase. Ensure users report use of such tools.<\/p>\n","protected":false},"excerpt":{"rendered":"

Mobilizing a remote workforce is now necessary for business survival and while it might not be ideal for a lot of businesses, it could very well be the buoy to keep businesses (and economies) afloat in this unprecedented time.<\/p>\n","protected":false},"author":7,"featured_media":38510,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,26],"tags":[7081,1481,54,2103,3914,53,4100,4234,206,4328],"class_list":["post-38509","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","category-opinions","tag-covid-19","tag-cybersecurity","tag-security","tag-security-breach","tag-security-platform","tag-security-risk-management","tag-security-solutions","tag-security-as-a-service","tag-sophos","tag-sophoslabs"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/38509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=38509"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/38509\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/38510"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=38509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=38509"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=38509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}