Working from home is awesome. However, for many employees of companies it's a security threat, says an IBM study.
The study shows more than 80% of respondents either rarely worked from home or not at all prior to the pandemic, and, in turn, more than half are now doing so with no new security policies to help guide them.
Business activities that were once conducted in protected office environments, and monitored under specific policies, have quickly transitioned to new, and potentially less secure territory. For example, customer service agents who worked in closely managed call centers are now managing sensitive customer data at home.
No Support for Newbies Creates Opportunity for Cybercriminals
The rapid shift to working from home has also changed the ways many organizations do business from moving face-to-face meetings to video conferencing calls to adding new collaboration tools—yet the survey showed many employees are lacking guidance, direction and policies.
Sponsored by IBM Security and conducted by Morning Consult, the IBM Security Work from Home Survey is comprised of responses from more than 2,000 newly working remotely Americans. Key findings include:
- Confident, Yet Unprepared: 93% of those newly working from home are confident in their company's ability to keep personally identifiable information (PII) secure while working remotely, yet 52% are using their personal laptops for work – often with no new tools to secure it, and 45% haven't received any new training.
- Lacking PII Guidelines: More than half have not been provided with new guidelines on how to handle highly regulated PII while working from home. This is despite more than 42% of people who manage PII as part of their regular jobs now doing so at home.
- Policy Awareness: More than 50% of respondents don't know of any new company policies related to customer data handling, password management and more.
- Personal (Unprotected) Devices in Use: More than 50% of new work from home employees are using their own personal computers for business use, however 61% also say their employer hasn't provided tools to properly secure those devices.
- Passwords Lacking Protection: 66% have not been provided with new password management guidelines, which could be why 35% are still reusing passwords for business accounts.