How drones affect your threat model
Most security leaders are unlikely to have drones on the list of threats they need to defend against on the cyber or physical security front. Drones can, however, introduce new risks that organizations need to recognize and address proactively, say security experts, even if an organization isn’t using them. A growing number of organizations have…
Protecting employee COVID-19 health data: What CISOs need to know
Businesses re-opening in the wake of COVID are faced with keeping track of who in the company is healthy, who is sick, and who needs to isolate. A new International Association of Privacy Professionals (IAPP) study shows that 60% of employers are keeping records of employees diagnosed with COVID-19. These new sensitive datasets come at…
What’s next? CISOs weigh in on COVID’s long-term effects on security
As lockdowns ease, CISOs are looking ahead at how their teams operate and how they protect employees and assets. The most likely change is permanently supporting more work-at-home employees. According to a report released in April by (ISC)2, 96% of organizations had moved at least some of their staff to remote work, with nearly half…
Cloud configuration drift leaves organizations open to attack, research finds
Many organizations are automating their cloud infrastructure deployments through code. This allows them to establish a secure configuration baseline early in their DevOps lifecycle, but the security posture of most cloud resources later drifts due to undocumented changes that often remain undetected. A new study from cloud security company Accurics found that in as many…
Security threats associated with shadow IT
As cyber threats and remote working challenges linked to COVID-19 continue to rise, IT teams are increasingly pressured to keep organizations’ security posture intact. When it comes to remote working, one of the major issues facing enterprises is shadow IT. End users eager to adopt the newest cloud applications to support their remote work are…
5 steps to create a security incident response plan
The only thing worse than getting hit with a cyberattack is getting hit with a cyberattack and not having a strong security incident response plan in place. Sophisticated Advanced Persistent Threat (APT) attacks are typically aimed at high-value targets like credit card companies, banks, retailers, healthcare facilities and hotel chains that store large volumes of…
Most Security Pros Prefer Enterprise Over Industrial Cybersecurity: Survey
The respondents of the survey represented the United States, United Kingdom, Germany, France, and Australia. Globally, over 75% of IT security pros said they prefer enterprise cybersecurity to industrial cybersecurity. In the US, more than 70% would rather protect enterprise networks. “This is where it’s imperative that CISOs and IT security teams catch up on…
Security tips for working from home (WFH)
Over the last decade, remote work and working from home has grown in popularity for many professionals. In fact, a 2018 study found more than 70 percent of global employees work remotely at least once per week. However, the coronavirus pandemic and resulting lockdown in many parts of the world have forced a large number…
Free security resources for work-from-home employees during the COVID-19 crisis
As the world “shelters in place” amid the COVID-19 crisis, some tech companies are stepping up and offering their products and services free of charge for a limited time. These offers will help organizations set up and protect remote employees faster. In some cases, vendors are also offering support services to help companies through the…
8 key security considerations for protecting remote workers
Your boss just called and all your employees are mandated to work from home for the next two to three weeks due to the potential COVID-19 pandemic. What could go wrong? What risks are you now bringing to the firm? These are the actions should you take immediately to ensure you can allow your workforce…