Top 9 Security Challenges For Enterprises During COVID-19
Now's the time for organizations large and small to return to the basics with cyber hygiene protocols, the firm's cyber risk services leader says.
Go To Full Article Here
Publisher: TechRepublic Author: Jonathan Greig in Security on April 9, 2020
This is a summary of the TechRepublic article and you can click the button above to go the full article.
As the impact of COVID-19 continues to take shape beyond the initial business continuity efforts, organizations are now establishing new operating models that address unplanned, rapid, and massive shifts to a remote workforce. Deloitte's US Cyber Risk Services leader, Deborah Golden, spoke with TechRepublic about the top 9 challenges she has seen enterprises face now that thousands of enterprises are weeks into the massive shift to remote work.
Increased Use Of Collaboration Tools
One of the most publicized problems businesses across the world have been having is with collaboration tools that have had to scale up significantly since millions moved to working from home.
More Devices Mean More Attack Surfaces
Coming hand in hand with the need for collaboration tools is the need for a variety of devices now that people have to work away from their office computers and laptops.
Unsecure Home Networks
Many enterprises had strict rules prohibiting employees from connecting to corporate networks from home, and those have had to go by the wayside now that everyone is forced to telework.
Enterprises now have no choice but to allow employees to connect to centralized corporate networking through home devices on home networks, increasing concerns of security teams that now have to manage an exponential growth in physical, logical connections to an organization's operating environment.
Insider threats have always been a problem, but because of the drastic changes in the economy, businesses have had to make tough decisions in terms of personnel. Labor department statistics show that nearly 10% of the American workforce filed for unemployment, and those numbers may double the longer the economy is forced to retract as part of efforts to contain the coronavirus pandemic.
For enterprises in more regulated industries, telecommuting presents even more problems. Golden noted that surprisingly, some organizations have said regulations have been alleviated since the crisis while others say everything needs to stay the same as it's always been in terms of compliance.
Larger Adversarial Landscape
With the expansion of the network, technology, devices and operational environment, there is now a giant adversarial landscape.
Lack Of Talented Cybersecurity Officials
Companies were already struggling to fill cybersecurity positions and there has been a longstanding dearth of talent available for enterprises, even before organizations were struggling with dozens more devices and networks to secure.
Stress On Employees
With all of these operational changes and in some cases a severely reduced workforce, employees are now being forced to do more work and perform different jobs to make up for any drastic changes an enterprise is undergoing.
Supply Chain Issues
Even if an organization is able to avoid all of these concerns and problems, they may have no choice but to deal with them because they are intimately tied to other companies in their supply chain. While this may not be a huge concern for smaller businesses, larger enterprises are facing the prospect of suppliers or partners who may have lapses with any one of these many concerns.
This will be a difficult stretch for all enterprises, but Golden said organizations should focus on the basic cyber hygiene that they turned to in the past. Make sure everything is encrypted and that all video meetings have passwords.
Many of the basic cybersecurity rules and measures still apply, but there may be room for more modern security technology like artificial intelligence and machine learning that can help mitigate some of the concerns business leaders have.