# How is your business’ IT security adapting to the ‘new normal’? Author: Pal Sinha, Barnali Author URL: https://financedigest.com/author/pal-sinha-barnali Published: 2020-09-27 Category: BUSINESS Category URL: https://financedigest.com/category/business Meta Title: The Implications of Permanent Remote Working on Cyber Security Meta Description: Discover the challenges and implications of the permanent switch to remote working on cyber security, and how to maintain control and security in a URL: https://financedigest.com/how-is-your-business-it-security-adapting-to-the-new-normalhtml ![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/untitled-design-2020-09-27t184841-1736838828031-compressed.jpg) _By **Richard Menear,** CEO at [Burning Tree](https://burningtree.co.uk/)_ For years, organisations have been trying to get to grips with cyber security and figure out how they can protect their systems and network from a breach. Because the world of cyber security is constantly evolving — with new threats emerging every day — this can be a relentless task. The challenge has only intensified thanks to the coronavirus pandemic, which has seen a mass exodus from the office and employees forced to work from home. Whilst there was initial optimism that this would only be a temporary solution, it seems [remote working](https://www.financedigest.com/it-departments-getting-a-bad-rap-over-remote-working.html "IT DEPARTMENTS GETTING A BAD RAP OVER REMOTE WORKING") is here to stay. Many companies are choosing to keep staff at home for the foreseeable future — reluctant to [risk bringing](https://www.financedigest.com/treasury-and-risk-management-application-market-to-bring-in-revenue-of-us-7-1-bn-by-2028-comprehensive-research-report-by-fmi.html "Treasury and Risk Management Application Market to bring in revenue of US$ 7.1 Bn by 2028 – Comprehensive Research Report by FMI") employees back for them to have to pack up and leave again. However, after ironing out any teething issues, companies have also realised the myriad benefits of this flexible way of working and many organisations — including both large corporates and smaller [businesses — have made](https://www.financedigest.com/tripling-the-size-of-my-business-in-the-pandemic-the-mistakes-made-and-lessons-learned.html "Tripling the Size of my Business in the Pandemic — The Mistakes Made and Lessons Learned") the decision to introduce a permanent work-from-home policy. But what implications does this permanent switch to remote working have for [cyber security](https://www.financedigest.com/how-to-handle-cyber-security-during-mergers-and-acquisitions.html "How to Handle Cyber Security during Mergers and Acquisitions")? **Maintaining control** With employees [working from home](https://www.financedigest.com/working-from-home-heres-how-you-can-save-money-on-your-auto-insurance.html "Working From Home? Here’s How You Can Save Money on Your Auto Insurance"), organisations have far less control than they would in an office environment. They cannot control an employee’s home, who has access to it, who can listen to conversations or even how an employee is accessing [company data](https://www.financedigest.com/the-logo-of-french-cloud-computing-company-ovhcloud-is-seen-on-a-data-center-building-in-strasbourg-france-october-13-2021-reuters-christian-hartmann.html "The logo of French cloud computing company OVHcloud is seen on a data-center building in Strasbourg, France, October 13, 2021. REUTERS/Christian Hartmann"). In an ideal world, IT teams should be able to trust their staff to do the right thing. However, that is, unfortunately, not always the case. Rules get thrown out the window when employees are away from the watchful eye of IT, meaning they are more likely to engage in risky behaviours that can [leave companies vulnerable](https://www.financedigest.com/finding-it-hard-to-recruit-good-it-security-managers-dont-leave-yourself-vulnerable-to-attack.html "Finding it hard to recruit good IT security managers? Don’t leave yourself vulnerable to attack"). For example, if [security policies impede their work](https://www.financedigest.com/the-importance-of-information-security-in-a-post-pandemic-hybrid-working-world.html "The importance of information security in a post-pandemic hybrid working world"), they are likely to seek workarounds. Whilst not a direct [threat to security](https://www.financedigest.com/how-financial-services-firms-can-mitigate-against-their-top-data-security-threats.html "How Financial Services Firms Can Mitigate Against Their Top Data Security Threats"), the impact of poor staff wellbeing can also have a significant disruptive effect on misuse, abuse and mistakes — resulting in a security compromise. Social care and [mental health](https://www.financedigest.com/meeting-of-minds-using-technology-to-reimagine-mental-health-support.html "Meeting of minds: Using technology to reimagine mental health support") can become a serious issue for some employees who struggle with isolation. Many employees will be [working](https://www.financedigest.com/the-evolving-world-of-work-what-next-for-employers.html "The Evolving World Of Work – What Next For Employers?") much longer hours with fewer breaks — and potentially failing to eat as well or get sufficient exercise. As such, companies should consider working with emotional support organisations, such as the Samaritans, to deliver [communication around health and wellbeing to staff](https://www.financedigest.com/how-communication-technology-can-help-relieve-pressure-on-staff-in-the-financial-services-sector.html "How communication technology can help relieve pressure on staff in the financial services sector "). This inherent loss of control means companies must adopt a zero-trust approach to [cyber security](https://www.financedigest.com/the-future-of-cyber-security.html "THE FUTURE OF CYBER SECURITY"). Zero trust is based on the principle that every user, device, service or application is implicitly untrusted and will only gain a least privileged level of trust (and associated access entitlements) once it has gone through a robust [Identity and Access Management](https://www.financedigest.com/how-to-manage-identity-in-a-hybrid-cloud-environment.html "How to manage identity in a hybrid cloud environment") (IAM) process. **No ‘quick fix’** As working from home becomes an accepted practice in today’s business environment, organisations will need to introduce additional [security controls to protect systems, networks](https://www.financedigest.com/new-demands-on-network-security.html "NEW DEMANDS ON NETWORK SECURITY") and vital assets. Communication, education and awareness are still the most powerful methods for [securing company data](https://www.financedigest.com/normalizing-advanced-cloud-data-security-with-normalyze-from-amer-deeba-and-ravi-ithal.html "Normalizing Advanced Cloud Data Security with Normalyze from Amer Deeba and Ravi Ithal"). Employees should be told what is expected from them when it comes to remote working and the part they play in protecting company information. Working on the principle of ‘strength in depth’ is also key. Conditional and contextual access management (including privileged access controls) has to be the first security measure [businesses implement](https://www.financedigest.com/how-to-implement-ethical-employee-productivity-monitoring-for-future-business-growth.html "How to implement ethical employee productivity monitoring for future business growth"). This will ensure that only the people with the appropriate access level and from the right location can view, [share and alter company resources](https://www.financedigest.com/exit-from-taiwan-lifts-shares-of-french-company-carrefour.html "Exit from Taiwan lifts shares of French company Carrefour"). Network segmentation and zoning are also necessary to [protect core systems and critical assets](https://www.financedigest.com/how-to-best-protect-assets-following-major-global-shifts.html "How to Best Protect Assets Following Major Global Shifts"), whilst guaranteeing that employees can access the information they need and carry out tasks as required — with minimal disruption. Other controls include encryption such as multi-factor [authentication](https://www.financedigest.com/psd2-merchants-must-regain-checkout-control-through-delegated-authentication.html "PSD2: Merchants Must Regain Checkout Control Through Delegated Authentication") and enhanced network access controls like secure VPNs. With organisations increasingly embracing the cloud to facilitate remote working, companies can also use a cloud access [security broker to monitor all activity and enforce security policies](https://www.financedigest.com/uk-finance-regulators-should-pay-heed-to-energy-security-policy-says-sunak.html "UK finance regulators should pay heed to energy security policy, says Sunak"). Equally, Security Information and Event Management (SIEM) solutions can provide real-time [analysis of security alerts generated by applications](https://www.financedigest.com/cold-start-system-market-analysis-size-share-sales-growth-forecast-segment-application-analysis-2021.html "Cold Start System Market Analysis- Size, Share, Sales, Growth, Forecast, Segment, Application Analysis 2021") and network hardware. However, perhaps the most critical action is to take regular back-ups and store them away from the core network — either completely offline or using a [cloud backup solution](https://www.financedigest.com/the-future-of-fintech-and-open-source-cloud-solutions-in-the-united-kingdom.html "The future of fintech and open source cloud solutions in the United Kingdom"). This will ensure [business continuity in the event of a breach or network](https://www.financedigest.com/networking-is-key-to-forming-business-ideas-as-a-college-student.html "Networking Is Key To Forming Business Ideas As A College Student") failure. At Burning Tree, we have helped customers understand the impact of remote working on cyber security. To find out more about our consulting services and how we can assist with [managing risk](https://www.financedigest.com/risk-management-redefined-navigating-post-covid-disruption.html "Risk Management redefined: navigating post-COVID disruption") in the ‘new normal’, get in contact today. --- This blog is powered by Superblog. Visit https://superblog.ai to know more. ---