{"id":1685,"date":"2022-07-27T15:52:07","date_gmt":"2022-07-27T08:52:07","guid":{"rendered":"https:\/\/dt-corp.com.vn\/?p=1685"},"modified":"2022-07-27T15:52:07","modified_gmt":"2022-07-27T08:52:07","slug":"cybersecurity-needs-to-work-even-when-employees-arent-on-board","status":"publish","type":"post","link":"https:\/\/dt-corp.com.vn\/?p=1685","title":{"rendered":"Cybersecurity Needs to Work Even When Employees Aren\u2019t on Board"},"content":{"rendered":"

Goldman Sachs leadership didn\u2019t get the response they expected from their return to the office (RTO) order. In fact,\u00a0Fortune<\/a>\u00a0reported that only about half of the company\u2019s employees showed up. With today\u2019s tight labor market and many employers allowing remote work, employees have firm ground to stand on. How do you secure a workforce that won\u2019t always comply with your demands?<\/p>\n

Employee compliance with cybersecurity measures has always been a key component of digital defense. However, employees often either purposely don\u2019t comply or make mistakes. The\u00a02022 X-Force Threat Intelligence Index<\/a>\u00a0found that phishing was the most common way criminals gained access to a network. Of all the attacks remediated by X-Force in 2021, 40% involved phishing. Organizations need to focus on maintaining always-on security measures that work without depending on cyber awareness and security edicts.<\/p>\n

Zero Trust Protects Regardless of Compliance<\/h2>\n

Organizations are moving more and more toward the\u00a0Zero Trust framework<\/a>. This protects them with an always-on approach instead of focusing on employee compliance. According to the\u00a02021 Cyber Resilient Organization study<\/a>, 35% of respondents have adopted this approach. Of those, 65% agreed that zero trust security strengthens cyber resilience. In addition, 63% of those organizations reported that a zero trust approach is significant or moderate. Their top reason? The approach improved operational efficiency.<\/p>\n

Zero trust isn\u2019t a single technology or even a single process. Instead, the zero trust approach is a framework that organizations use to implement different techniques and tools.<\/p>\n

Other approaches focus on securing the perimeter and preventing an attack from occurring.\u00a0Employers expect their people to comply with the processes and cyber hygiene.<\/span>\u00a0With a noncompliant workforce, you can\u2019t rely on those methods of securing a network.<\/p>\n

With zero trust, there is a mindset shift in how to approach cybersecurity. Instead of defending a perimeter, zero trust focuses on controlling access of both users and devices. It takes the approach that a breach has already happened. The tools are always on and do not rely on employees. So, they\u2019re effective for employees who often don\u2019t comply with security measures. Passively not complying may not be as dramatic as a walkout, but it can cause serious damage when an employee accesses sensitive data on a personal device or connects a work device over a public network.<\/p>\n

Why Zero Trust Works for Remote Workers<\/h2>\n

Here are three common elements of a zero trust approach that apply to remote workers:<\/p>\n