IT security in hybrid working models

Published: August 25, 2021

The future of work is hybrid. This paradigm shift is associated with numerous new requirements, be it the role of the office or the nature of collaboration. IT departments are also facing new challenges due to the transformation to a hybrid working model. IT and data security must be rethought in the future.

What risks does hybrid working pose for information security?

The shift to mobile working means that, in addition to the company office, IT security must also ensure a secure working environment outside of it. It is important to consider both technical and human vulnerabilities.

Unsecured environments

Employees in remote work access company data from a wide variety of locations. They regularly switch between well-protected company networks and less well-secured, sometimes unencrypted home networks or public hotspots. Such unsecured Wi-Fi networks are usually an easy target for attackers to gain access to sensitive data. At the same time, this access makes it impossible for IT departments to identify suspicious activity based on IP addresses and prevent unauthorized access.

Non-protected end devices

In the home office, access is no longer only via the work computer. Instead, employees often use private devices, for example to check chat messages or emails on their smartphone or tablet. However, private devices are usually not under the control of the company. There is therefore often no adequate password protection or regular updates. Other devices registered on the same network also pose a potential risk.

Regular changes also increase the risk of devices being stolen or lost. If the mobile devices are not adequately secured, it is easy for unauthorized persons to gain access to sensitive data.

Carelessness on the part of employees

Last but not least, it has already been shown during the pandemic that employees working remotely are more susceptible to cyberattacks. More frequent distractions, but also a lack of contact with IT staff and colleagues, increase the likelihood of threats not being recognized as such and opening the door to important data for criminals. This applies, for example, to phishing attacks, i.e. attempts to obtain personal data or install malware via fake emails or websites.

How can organizations ensure IT security in the hybrid working model?

Companies must counteract the additional risks posed by hybrid work both at a technical level and in terms of the human factor. From a technical perspective, it is about securing data during transfer, processing and storage. At the same time, employees need clear rules and guidelines for handling data and devices.

Modern mobile devices for employees

Allowing employees to work with outdated private technology that is not managed by the company entails high security risks. Instead, all colleagues should work with the latest technology and regularly updated software. This is not only recommended for security reasons, but also guarantees maximum productivity. The use of private devices is also problematic from a data protection perspective.

Here you will find the latest
laptops, smartphones & tablets

Encrypted data transmission

Home networks are often inadequately secured or not secured at all. This leads to high security risks. With Virtual Private Networks (VPNs), secure and encrypted data transmission between the company network and the end device is possible.

Digital collaboration tools such as Zoom or Slack are usually used for chats, video conferences, and data exchange. Organizations should only make applications accessible that support end-to-end encryption.

Access management for employees

Another security precaution is the individual assignment of rights for individual users or user roles. With Single Sign On (SSO), access rights can be granted or revoked with little effort. At the same time, the IT department always knows which employee has access to which data. For users, SSO offers the advantage of having access to all relevant applications and services with just one account.

To prevent identity theft, multi-factor authentication provides additional security when logging in. Multiple confirmation of your identity ensures that you are actually the person you claim to be.

Establishing a safety culture

In a hybrid working environment, the human factor will play an even more important role with regard to IT security in the future. Companies can reduce avoidable risks by providing targeted training on IT and data security, the secure use of end devices and the protection of personal data. This is because regular training sessions not only create an awareness of potential dangers, but also provide employees with the right tools to deal with the risks appropriately.

The following measures can already achieve an appropriate level of protection in the home office:

Protect WLAN networks with a password
Use secure, unique passwords for applications and services
Perform regular updates
Keep documents and devices inaccessible to unauthorized persons

Maintain full control with mobile device management

Mobile Device Management (MDM) offers a way to implement many of the measures mentioned above. It allows IT departments to maintain full visibility and control over all devices. After a one-time registration of the device in the MDM software, it can then be easily managed, secured, and monitored centrally from a distance, regardless of whether it is a company-owned or private device.

A wide range of functions and configurations can be set up via the MDM software console. The features of an MDM solution include, for example

Configuring network access
Provision and updating of apps and applications
Access management for individual users or roles
Enforcement of security policies, such as password strength
Device encryption
Monitoring
Inventory & Management
White- & Blacklisting
Deleting and locking the device remotely
and much more

By using an MDM solution, the human factor and the associated security risks can be reduced to a minimum, thereby increasing IT security in the company.

Mobile Device Management is part of our Device as a Service solution. We would be happy to advise and support you in setting up and configuring your individual MDM solution.

Here you can find out more about Device as a Service with Lendis.

Eric Grieben

Here, Eric Grieben, Chief Operating Officer (COO) at Lendis, writes. Eric is responsible for the heart of Lendis. With his team, he ensures the smooth running of the entire logistics and ensures the high service quality for our customers. In his articles, he shares his knowledge to equip working environments and employees for maximum productivity.