How much data travels between the people in your company every day? During the lockdowns, how confident were you in its security?

Modern workplaces see a lot of data passed around every day. You likely open countless emails each day, some with attachments for projects you are working on. As you work between home and the office, you might be changing the devices you use. All of this mobility and collaboration creates points of vulnerability for cyber criminals to exploit.

If you are in the process of transforming your business into a modern workplace, you must consider how you will protect not only your employees but your business.

How cloud security mitigates challenges of the modern workplace

Modern workplaces face various security challenges, many of which increased due to en masse remote working. Under the circumstances, cloud platforms have become key targets for cyber attackers. Cloud providers can often include patches, network and application firewalls and security testing services as part of their offering, but it is not enough to provide the holistic security posture that is needed.

While cloud providers can manage much of the security maintenance needed, it is wise to take additional precautions as they do not take sole responsibility for cloud security.

You might:

  • Consider additional security features for your cloud network environment, such as your own network or application firewall.
  • Move your workforce to a cloud platform that handles video calls, messaging, and document sharing (like Microsoft Teams) securely to reduce the exposure from the number of cloud platforms an attacker could exploit.
  • Train your team on best practices for creating strong passwords and ensure multi-factor authentication (MFA) is activated for all access, especially privileged users.

Cloud solutions also offer the flexibility of remote support for employees on the go from anywhere in the world while also managing data storage and flexible methods of access to that storage.

Protect company emails and data from malware attacks

Malware is an umbrella term for ransomware, computer viruses, spyware and trojan horses. It can cause significant damage to mobile devices and company networks. Cyber criminals might target your business through malware to steal information, damage data or cause disruption to the business.

You can protect your modern workplace from malicious code by ensuring every user is protected on their corporate device. Such a solution should have the ability to filter spam or phishing emails to reduce the chances of a user clicking on a malicious link.

Phishing emails remain a key method for installing malicious code on a corporate device. Your security solution should filter emails, scan attachments, protect against malicious web links, and mark them as safe to open or download.

In addition to providing your team with the software to protect their systems, you should also educate them on recognising malicious emails. When people know what to look for, they can reduce the incidences of cyber attacks due to human error.

Secure devices to overcome challenges of the modern workplace

Mobile devices such as phones and laptops remained the centrepieces of work for a long time. Now, the use of mobile devices dominates the modern workplace. With employees working remotely, it can be challenging to protect their devices from modern security threats.

You can secure mobile devices with security software, but it might also be worth implementing policies around mobile device usage when accessing business resources. Additionally, you might develop a response plan in case of a breach.

Printing remains an essential element to the modern workplace and an often overlooked cyber security risk. Yet, modern printers are internet-connected devices that hold document data and could become an entry point for a cyber criminal. Modern printing devices often have a set of protections in place, such as password-only access and encryption. Still, it is a good idea to prioritise print security and educate your workforce too.

Prevent leaked user credentials in the modern workplace

Security in the modern workplace leans heavily on passwords to authenticate identity. As criminals can purchase employee credentials on online black markets, it is essential to take cautionary measures to prevent leaked credentials. 

Sixty-two per cent of cyber security incidents from January to June of 2021 included compromised or stolen credentials. Hackers often use brute force attacks to gain access to accounts by trying thousands of combinations of invalid passwords until they find one or more that work. MFA is one method of reducing the risk of leaked credentials.

You can prevent compromised credentials by ensuring a policy and process is implemented, to ensure best practices are followed, create a culture around managing strong passwords and/or passphrases, resetting them as required by policy, and implementing and enforcing MFA for an extra layer of protection. When you have these policies in place, you and your team can confidently access work resources from wherever you work.

Beat the challenges of the modern workplace with zero trust

Zero trust operates under the assumption that users cannot be trusted until they have verified their identity. Zero trust encompasses several aspects of cyber security, such as securing the end-user device and the network, then verifying the user’s identity.

To solve security challenges in the modern workplace, think about implementing a zero trust strategy to secure data accessed or shared via the internet. No matter what device a user accesses corporate data from, zero trust should be architected, if possible, to verify the device, the network and the end-user.

If implemented correctly, this is an excellent method for the modern workplace as it ensures the end user spends less time connecting to the corporate network than a VPN client and with identity management integrated, sign in can be less of a hassle for end-users. So, you can ensure that an end-user trying to access corporate information on their personal device can do so securely and that your data will be protected from deliberate and/or accidental exposure.

Centorrino Technologies can secure your modern workplace

We build systems designed to protect your critical assets. We increase business resilience, provide real-time threat intelligence, and help create a robust cyber security culture.

Our advisory services can help you pinpoint your risks and provide visibility of your cyber security posture. We can implement monitoring systems to notify you of potential threats and provide solutions before they cause damage to your organisation. Finally, we can provide your employees with the training they need to recognise threats, protecting themselves and the business.

Visit our Cyber Security page for more information on how we protect your business, your customers, and their data.