SANS provides made freely available the “Work-from-Home Awareness Kit.”
When I think about how exactly COVID-19’s security actions are affecting organizational systems, I see many interrelated problems:
One, employees will work from their home systems and sometimes from their house computers. These systems will be outdated, unpatched, and unprotected. They’re more susceptible to attack since they are less protected.
Two, sensitive organizational information will likely migrate outside the network. Employees working at home are likely to save data by themselves computer systems, where they aren’t safeguarded by the organization’s safety techniques. This makes the info more likely to end up being hacked and stolen.
Three, employees will gain access to their organizational networks insecurely. If the business is lucky, they have already create a VPN for remote control access. Or even, they’re either looking to get one rapidly or not really bothering at all. Handing individuals VPN software to set up and make use of with zero teaching is really a recipe for protection mistakes, but not utilizing a VPN is a whole lot worse.
Four, workers are being asked to utilize fresh and unfamiliar tools want Zoom to displace face-to-face meetings. Once again, these hastily set-up techniques will tend to be insecure.
Five, the overall chaos of “doing issues differently” can be an opening for strike. Tricks like business e-mail compromise, where a worker gets a fake e-mail from the senior executive inquiring him to exchange money for some account, could be more successful once the employee can’t stroll down the hall to verify the email’s validity — so when everyone will be distracted therefore many other factors are increasingly being done differently.
Worrying about network safety seems almost quaint when confronted with the massive health threats from COVID-19, but assaults on infrastructure might have effects far better compared to the infrastructure itself. Remain safe, everyone, and help to keep your networks secure as well.
