A 12 months in the past, IT and cybersecurity groups confronted various challenges — consistently rising threats, information privateness rules, and a big and widening abilities hole, to call a couple of. Then issues actually obtained tough.The COVID-19 pandemic and its impression on enterprise processes modified the safety dynamic in a giant method, making issues much more advanced. Shifts to cloud companies have been accelerated. E-commerce efforts have been launched or expanded. COVID-related cyberattacks turned widespread.But essentially the most important growth was the sudden and big shift to a distant workforce. Seemingly in a single day, workers who’d previously labored in places of work started working from house, many counting on their very own computing units and makeshift community entry strategies, with IT departments scrambling to guard their units and information.As the pandemic enters its second 12 months, it’s value reviewing a few of the safety classes we’ve realized up to now and looking out forward on the strategies and applied sciences that can assist defend the long run hybrid office.Enterprises ought to prolong endpoint safety toolsFor one factor, organizations have found that they should prolong the capabilities of their current safety infrastructures in methods they won’t have thought-about earlier than the work-from-home shift. That consists of making certain that company safety practices and instruments that fortify and defend an organization’s perimeter can cowl a broader vary of geographic places to account for house places of work.“Moving into a remote work environment has meant a change in focus from macro-level security to micro-level extensions of platforms and adoption of new ways of extending a secure environment to remote workers,” says Mark Liggett, CEO of Liggett Consulting and a longtime IT and cybersecurity advisor.During the previous 12 months, the agency has suggested firms on extending their endpoint protections and endpoint detection and response instruments to their distant customers. “This type of change might take negotiation with vendors to add additional licenses for remote users,” Liggett says.“Some vendors include licensing by user ID rather than device, which can save time and money on deployment. In today’s environment, it is worth a review and pressing for the options that you need to accomplish a secure working environment anywhere,” advises Liggett.Advanced authentication and entry controls are keyAlthough distant work has added dangers, for essentially the most half, firms have been capable of mitigate them by means of modified entry controls, robust authentication instruments, and rising applied sciences, Liggett says. “The use of multifactor authentication and leveraging modern security platforms that feature machine learning and computer behavior monitoring have given additional layers of protection and security into remote connections.”Ubiquitous VPNs and distant entry controls have performed vital roles within the emergence of widespread distant work, Liggett says, however enhancements are on the way in which. Security groups can count on to see a retooling of distant entry and VPN instruments, the place multifactor authentication performs the important thing function in authenticating customers and offering entry controls, he says.It helps to undertake cloud-first safety measuresAs the massive shift to distant work accelerated firms’ transfer to cloud-based apps and platforms, cloud-based safety has change into more and more vital. “Using a cloud application security broker adds additional security and compliance protections into the cloud space,” says Liggett.In truth, some say the cloud has change into a vital a part of distant work safety. “The pandemic has taught us that a cloud-first security strategy is the future,” says Andrew Hewitt, an analyst at Forrester Research serving infrastructure and operations professionals.Overreliance on on-premises VPNs and digital desktop infrastructure “required heroic work from IT practitioners to get them up and running at the start of the pandemic,” Hewitt says. “We expect that cloud-based security solutions such as zero-trust network access and cloud desktops will emerge from this pandemic as clear winners against the on-prem solutions.”Collaboration instruments want shoring upCompanies have additionally discovered that on-line collaboration apps — important for a distant workforce — include safety dangers. “The initial use of these tools was not very secure, either by the delivery of the systems or by the design by the manufacturer,” Liggett says.In the push to discover a method for at-home workers to carry conferences, for instance, many organizations turned to videoconferencing apps, particularly Zoom, which was notable for its ease of use. Among different safety missteps by the seller, the Zoom app initially left vital safety and privateness options turned off by default, leaving inexperienced customers susceptible to uninvited visitors.In response to widespread criticism, Zoom rapidly enabled key safety features by default, added help for AES 256-bit GCM encryption, and introduced that it might add end-to-end encryption sooner or later. Other videoconferencing distributors have rolled out quite a few safety enhancements previously 12 months as properly.“The market demand for security forced change to these systems to [become] a safe and secure way to communicate,” Liggett says, nevertheless it’s nonetheless incumbent on IT to make sure that the instruments are configured for optimum safety and that customers are educated to make use of them correctly.Moving ahead: Preparing for the hybrid workplaceBecause many organizations rushed to help the distant workforce, extra work nonetheless must be finished to safe distant environments.“CISOs were able to increase their 2020 cybersecurity spending to account for the rush to the cloud, the new work-from-home model, and responding to endless phishing attacks,” says Frank Dickson, program vice chairman, Cybersecurity Products, at analysis agency IDC. But these investments “extended the existing remote access solutions for the most part,” Dickson says. “There was not time for optimal [protection]. Now, CISOs will have to work to secure the new holes in their security posture that all these rapid changes have no doubt opened up.”The excellent news for a lot of safety executives is that they may have the sources they want. IDC analysis exhibits that safe distant entry expertise is second solely to conferencing platforms in deliberate enterprise spending will increase for 2021, Dickson says.In addition to shoring up defenses for distant staff, safety leaders must plan for a hybrid work situation, wherein some workers cut up time between working at house and at a company location. That mannequin seems to be right here for the long run; Forrester tasks that 70% of organizations may have hybrid or “work-anywhere” environments sooner or later.The actuality of a distant work surroundings that lacks a real perimeter and could be tough to manage has prompted the emergence of a brand new market phase that IDC calls pervasive information protection and response platforms.“These platforms consist of tightly integrated cloud security gateways, data loss prevention platforms, and secure web gateways by leveraging unified user or group policy across the entire security stack, and providing a single reporting mechanism,” Dickson says. This converged safety infrastructure exhibits promise in lowering the complexity of managing information governance insurance policies throughout hybrid and multicloud environments, he says.Vendors equivalent to McAfee, Symantec, and Forcepoint are addressing this phase, Dickson says. McAfee’s Unified Cloud Edge platform supplies cloud-native safety that allows information and menace safety controls for units and cloud companies. Symantec’s built-in information loss prevention platform additionally supplies information and menace safety controls for units and cloud companies. Forcepoint’s method is designed to attraction to organizations that need a robust safety posture with tight monitoring over workers to stop insider threats.In the approaching months, firms ought to take a look at new methods to handle and help their workforce from customers’ places, Liggett says. “The continuous improvement in the SD-WAN space has promise for extending secure network access above and beyond the capability of VPN,” he says. He additionally expects to see firms investing in cloud and edge computing platforms to additional improve safety for distant connections.“I have a philosophy: any data, anywhere, anytime, any device — and it should be done securely,” Liggett says. “Following this path has been advantageous in [this] time of uncertainty. It continues to pay dividends as we further leverage technology to remove barriers of distance.”
Copyright © 2021 IDG Communications, Inc.