Cyber security and the risks of working from home
Flexibility in the workplace has certainly seen an increase over recent years, but nothing could have prepared us for the challenges of this year with the pandemic.
Many businesses may have had certain security policies in place regarding home working, but even those with policies will not have been prepared for whole workforce becoming remote. This has challenged even the most prepared companies. As a result of COVID-19, there have certainly been spikes in cyber-attacks and whilst we have all survived two lockdowns, we may not be allowing our teams to return to the office immediately or may be continuing with a hybrid solution of some remote and some office based. So how do you protect your remote working teams and ensure that you are cyber secure? What are the dangers? On-line work in general increases the potential for cyber-attacks. Whilst we are working in the office environment, we are protected by our IT blacklisting distrusted IP addresses, firewalls. With our ever-increasing reliance on technology, we become more vulnerable. Work tasks are completed online and that can compromise the security of your business. Hackers can try and crack your passwords for instance and this is particularly easy if you use the same password for multiple on line apps-these are the apps that your teams could be using to stay in touch with other team members. The Ciso Benchmark report for 2020 identified that businesses are struggling to manage remote workers particularly on mobile/phone devices. In fact, 52% of respondents said that mobile devices were the most challenging to protect! Phishing emails are another method that hackers use to infiltrate your security. They can trick your teams into handing over personal details or more importantly, click on links or download malicious attachments. Many of these phishing emails are also targeting people’s fear over COVID-19 and another study showed that since February, there has been a 600% increase in Phishing emails! The most common concern though must be from employees using their own devices to work from at home and this most certainly spiralled when the pandemic hit. What security measures can you put into place? As much as possible, you should ensure that your teams are working from work devices only so that they are subject to remote access security and implementation of a two-factor password would be advisable to mitigate any risk of hackers gaining any access to your systems. Implement anti-malware software and update any applications with security measures. This means that your IT department will have complete sight of your organisations IT infrastructure and will have the ability to monitor any malicious security. Risk Control It is advisable that you create a remote working policy which should essentially contain the following:
- The creation and maintenance of strong passwords
- Acceptable policy on websites viewed when not viewing them for company work.
- Guidance on storing devices securely
- Use of devices in public places.
Whilst these polices will help in the short term through the pandemic, these are policies that you should keep going forward. If you need help supporting your teams whilst working remotely then contact our team today.
Many businesses may have had certain security policies in place regarding home working, but even those with policies will not have been prepared for whole workforce becoming remote. This has challenged even the most prepared companies.
Subsribe for updates and our latest research
You may be interested in
From AI Experimentation to Real Business Outcomes: Our Takeaways from Microsoft Frontier Tour London
This week, Pete Graham, Microsoft Business Manager at Espria, attended Microsoft Frontier Tour London alongside members of the wider Espria team to hear directly from Microsoft leaders, partners and customers about the future of artificial intelligence. Having attended Microsoft’s AI Tour last year, Pete was interested to see how the conversation had evolved over the past 12 months. What became clear throughout the day was that the discussion around AI has matured significantly. A year ago, many organisations were still asking what AI could do. Today, the focus is increasingly on how to adopt it…
Critical PHP vulnerabilities: do you know who owns the fix?
When websites and applications sit with different teams and suppliers, the first challenge is knowing who needs to act. Critical vulnerabilities have been disclosed affecting PHP, a technology widely used across websites, web applications and other software products. The technical advice is clear: identify affected systems and apply the available updates. But for many organisations, the first challenge is understanding where PHP is being used, who manages those systems and who is responsible for taking action. To help you identify potential exposure, we have created a PHP Security Checker to determine whether your systems have…
Beyond the Filing Cabinet: What Document Management Actually Saves You
Document Management for Small Offices with DocuWare For many small offices, document management still means a filing cabinet, a shared drive with inconsistent folder names, and a lot of time spent searching for the one contract or invoice somebody needs right now. DocuWare replaces that with a structured, searchable system that sits behind your everyday paperwork. What does DocuWare mean in practice? Giving Office Managers time back For an Office Manager who is often the person holding the whole administrative process together, this is time back. Fewer interruptions to find a document for a colleague,…
Copilot vs. Claude
Why Microsoft 365 Copilot fits every day work A plain-English guide for people trying AI at work: what Copilot does, how it differs from a separate assistant such as Claude and where to start. The short answer Claude is a separate AI workspace. Copilot sits inside the Microsoft apps many teams already use and can work with the emails, files and meetings each person is allowed to access. A separate assistant helps when: Copilot helps when: – You need help creating or developing content from scratch. – The task is focused research, reasoning or code….
Microsoft is changing Copilot billing. Here’s how to stay in control of AI costs
From 1 December 2026, new Microsoft 365 Copilot Business purchases through CSP will come with usage-based billing already configured. At first glance, that might sound like another variable cost for IT and finance teams to manage. But it also gives businesses a practical way to access the next generation of Copilot experiences while retaining control over who can use them, how much they can spend and where that money goes. This matters because Copilot is changing. New experiences such as Copilot Cowork are designed to carry out larger, multi-step pieces of work. That creates more…
Phishing just got personal
AI-powered phishing attacks are becoming harder to detect, with increasingly sophisticated emails bypassing traditional security controls. As a result, organisations are placing greater focus on Human Risk Management, recognising employee behaviour as a measurable cybersecurity risk. SecureLearn, powered by KnowBe4 and fully managed by Espria, helps businesses reduce human risk through continuous security awareness training, phishing simulations, targeted coaching, and board-ready reporting that demonstrates improvement over time.