Despite claims that employers are encouraging and, in some cases, requiring employees to return to work, it is evident that the pandemic has permanently altered the way people operate. It may well be that the pandemic only increased the rate of change. Many organisations already had the technology in place to offer remote working and understood the potential benefits such as increased productivity, increased retention and lower operating costs. But in addition to the benefits, remote working has brought its own cyber security dangers, which may have been missed due to quick adoption.
It is critical to examine an organisation’s security posture via vulnerability assessments, penetration testing, or red teaming activities that cover the whole attack surface, including remote workers. This can significantly minimise cyber risk while also increasing security awareness and secure behaviour among remote workers and all employees.
Organisations cannot rely on a security operation centre (SOC) to detect anomalies and threats that come from remote workers. SOCs work on datasets of what normal traffic and behaviour looks like and then any deviation from this can be quickly…