NC1801

OPINION
HOME WORKING: THE SECURITY RISK
DOMENICO CRAPANZANO WHO IS CEO AT FING, THE MAKER OF
FINGBOX, REFLECTS ON THE CYBER RISK OF HOME WORKING
AND EMPLOYEE OWNED DEVICES. DOES THIS FREEDOM COME
WITH A COST?
Where we work is no longer
restricted to the office, thanks to
improvements in Internet access,
remote access solutions and the
increasing affordability of smart devices.
We now have the tools to work effectively
on the move - but this means that the IT
team has limited control.
Technology developments combine with
the cultural desire for flexible working
and drive this progressive freedom from
our desks. In turn, organisations have
saved on building costs, can engage with
talent from across the globe and offer a
more inclusive employment structure. But
does this new-found freedom come with a
cybersecurity cost?
THE SECURITY THREAT
Cybercrime is rising rapidly and
businesses are feeling the heat. It is
estimated that by 2021, the global cost
of cybercrime will be $6 trillion.
Cybersecurity is finally being taken
seriously and most businesses hire inhouse
professionals or outsource their
security to specialist companies. However,
cybersecurity has been blown wide open
by the remote worker.
THE NEW CHALLENGE
Historically, the IT framework was simple
with all the devices connecting with
company assets belonging to the
business, wired into one location.
Although still hackable, there was at least
visibility and some control over device
protection and the provision of network
security measures.
The fact that we can now work away
from our desks without question has
become an organisation's greatest
security weakness. IT professionals have
almost no visibility of the security of
employees' personal or companyprovided
devices outside of the office.
They also have no control over the
external networks these devices connect
to, or even the physical security of the
devices against theft.
To make matters worse, the adoption of
cloud services by organisations has put
both the access and security of businesscritical
information at increased risk. The
amount of security holes opened up in
the network is astronomical, and should
just one employee's personal device be
compromised, the entire network is at
risk. As a result the challenge is to find
ways to secure assets against external
threats without restricting remote working
or invading employee privacy.
SECURE REMOTE WORKING
Unfortunately this is a problem that is yet
to find a definitive solution. However,
there are a few steps that organisations
can take to create a more secure IT
framework and mitigate risk.
A good place to start is to provide a
guest network that both employees and
guests can use to connect their personal
devices, thus keeping them off the main
business network. And although it may
not be fashionable, providing employees
with the devices they need for their
remote work is an insignificant cost when
compared to a cybersecurity breach. This
will also provide control over the security
and setup of the devices, which will also
help the support team.
It is a largely unchallenged assertion
that providing regular cybersecurity
training helps to prevent attacks.
Employees can provide an excellent first
line of defence for common attack
vectors, including phishing and
untrustworthy sites. Also consider
providing a security appliance for
employee's home networks. It could be a
very smart investment and will protect
their networks from attack and such
devices are now very affordable.
One way or another, cyber defence and
risk both come back to money, so don't
be afraid to spend some on good people
and effective security measures. Hackers
love it when you cut corners! Survival
post attack is expensive, so carefully
consider insuring your specific risks. With
cyber threats always evolving, protect
your assets in the event of an attack, both
financially and with tested backups.
The good news is that whilst hackers get
smarter so too does the cybersecurity
industry - so don't let your organisation
fall behind. NC
WWW.NETWORKCOMPUTING.CO.UK @NCMagAndAwards JANUARY/FEBRUARY 2018 NETWORKcomputing 33