Best Practice B-04 SS: How work from home has come at the expense of SMEs security

IT teams had to scramble to enable working from home – and they did a good job. But for many, enablement came ahead of security

A checklist for keeping home workers secure:

• Protect data on both devices and removeable media by enforcing encryption
• Think of physical security of devices and data – lost/stolen devices
• Combine traditional and next-gen anti-virus. Combines the efficiency of comparing files against known threats vs. the "intelligence" of screening threats based on AI/machine learning
• Endpoint detection and response (EDR)
  • "CCTV for your device" recognizes unusual behavior that anti-virus won't pick up
  • Especially important for this WFH
• What about blockers to productivity
  • Security should work under the hood and not even know it's there
  • Used to push security education more, but if the tech is transparent enough, don't need to have processes in place to educate users.