Survey: Phishing and Malware Lead Remote-Work Security Concerns
Original report publisher: not verified. Report discovered via Awesome Annual Security Reports.
Summary
A March 2021 survey of 237 US IT and cybersecurity professionals found widespread concern about remote-work security, including phishing, malware, unmanaged devices and limited visibility when workers disable VPNs.
Key points
- The report is based on an online survey of 237 US IT and cybersecurity professionals conducted in March 2021.
- 80% of respondents were moderately to extremely concerned about security risks from working at home.
- Respondents ranked phishing (71%), malware (61%) and unpatched systems or vulnerability exploits (56%) among their leading remote-work threat concerns.
- 57% said employees could access managed applications from personal, unmanaged devices.
- When a remote worker disabled VPN, 18% reported full visibility into user activity; 46% had partial visibility and 22% had none.
- 87% were not confident legacy email tools could stop sophisticated novel phishing attacks; separately, 87% agreed signature- and rule-based tools cannot detect novel attacks.
Article Details
- Publisher
- Cybersecurity Insiders
- Report Period
- Survey conducted March 2021
- Scope
- US IT and cybersecurity professionals surveyed about enterprise remote-work security
- Sample Size
- 237 IT and cybersecurity professionals
- Key Statistics
- 80% of surveyed organizations were moderately to extremely concerned about security risks introduced by working from home.
- 98% were concerned about sophisticated impersonation and/or phishing email attacks.
- 87% of respondents were not confident legacy email tools could stop a novel email phishing attack from reaching employee inboxes.
- 57% of organizations allowed employees to access company resources from personal, unmanaged devices.
- 64% of increased security support questions since the move to remote work concerned suspected phishing attempts.
- Recommendations
- Use security tools that can adapt to changing digital environments without requiring humans to configure them.
- Use a unified, enterprise-wide security solution to protect the organization’s digital estate.
People
Vendors
Countries
Industries
Education & ResearchFinancial Services Technology, Software & Internet Education & Research Professional ServicesEnergy & UtilitiesHealthcare, Pharmaceuticals & Biotech Manufacturing Government Energy & Utilities OtherFinancial ServicesFinancial Services Technology, Software & Internet Education & Research Professional ServicesGovernmentHealthcare, Pharmaceuticals & Biotech Manufacturing Government Energy & Utilities OtherHealthcare, Pharmaceuticals & BiotechHealthcare, Pharmaceuticals & Biotech Manufacturing Government Energy & Utilities OtherManufacturingHealthcare, Pharmaceuticals & Biotech Manufacturing Government Energy & Utilities OtherProfessional ServicesFinancial Services Technology, Software & Internet Education & Research Professional ServicesTechnology, Software & InternetFinancial Services Technology, Software & Internet Education & Research Professional Services