Employees are the biggest source of weakness in a company's cybersecurity

"Indeed, according to a study carried out by the company Dimension Data, the number of cyberattacks has increased by almost 55% over the last three months." Popularizes IT throughout the Montreal business community

In fact, according to a study conducted by the company Dimension Data, the number of cyberattacks has increased by almost 55% over the last three months.

Remote working increases the risk of intrusion into your systems

The main exploit vulnerabilities for hackers come from company employees. This observation can be explained by the fact that companies neglect to monitor their IT infrastructure, which is much more heavily used by employees working remotely due to COVID-19.

Around the world, the extraordinary COVID-19 situation has forced businesses to develop their IT in unprecedented ways.

Bad company policy

Some companies provide laptops for their employees to monitor and support them. However, it is common for companies to require employees to use their personal computers for work.

This type of use is not recommended at all, as sensitive data may become accessible to third parties.

Social engineering and phishing on the rise

Social engineering and phishing practices are becoming more common in this area. Employees are not careful enough on the network and allow cyber attackers to access their sensitive files.

Commonly, employees allow access while ignoring their company's policies. They are careless with their sensitive corporate data. Then, they install unauthorized applications on their workstations. These applications are developed by people who are not always trustworthy.

3 different types of assaults

According to PwC, attackers are launching their attacks with ransomware , with 48% of them using this technique. Next comes data or information theft, which accounts for 34% of the total. The theft can come from a hacker posing as a customer of the SME and requesting financial information or a password to complete a payment, for example.

Finally, we find the 31% denial of service attack . This attack overloads the company's server until it can no longer respond to user requests.

How to turn employees into your first line of defence

Employees are not a weakness by nature. Most incidents happen because people lack clear rules, the right tools or the habit of questioning unusual requests. The following measures address each of those gaps.

1. Train regularly, not once a year

Short, recurring security awareness sessions work better than a single annual presentation. Cover the situations staff actually face: suspicious emails, fake invoices, requests for passwords or payment changes, and unexpected file-sharing links. Simulated phishing exercises help measure progress without blaming anyone.

2. Make reporting easy and blame-free

An employee who clicked a bad link and reports it within minutes is far less damaging than one who stays silent out of fear. Give everyone a simple way to report a suspicious message and thank them when they do.

3. Protect accounts with multi-factor authentication

Stolen passwords are one of the most common ways attackers get in. Multi-factor authentication on email, cloud applications and remote access blocks most attempts that rely on a password alone. A company-approved password manager also helps staff use unique, strong passwords.

4. Give only the access people need

Apply the principle of least privilege: each employee should reach only the files and systems required for their role. Remove access promptly when someone changes roles or leaves the company.

5. Control the devices used for work

If personal computers must be used, set clear minimum requirements. Ideally, provide company-managed devices with automatic updates, antivirus or endpoint protection, disk encryption and the ability to wipe data remotely if a device is lost.

6. Write a simple acceptable-use policy

Spell out which applications may be installed, where company files may be stored, and how to work safely from home or public Wi-Fi. A one- or two-page policy that people actually read is more effective than a long document nobody opens.

Common mistakes to avoid

• Assuming antivirus software alone protects against social engineering
• Letting employees install any application they find useful
• Sharing accounts and passwords between colleagues
• Forgetting to revoke access for former employees and contractors
• Treating security training as a one-time onboarding task

Remote Management and Monitoring, the solution to your problems

It's important for businesses to exercise greater control over their IT infrastructure. The IT infrastructure is one of the most important pillars of your business. It contains your financial data, marketing files, and your employees' social security numbers.

If this pillar is corrupted, your entire company is corrupted. A Remote Management Monitoring solution could free your mind from all possible worries and ensure a truly safe environment for your employees.

Nexxo can assist you with managing and monitoring your workstations. We are proactive and experts in the field. This will give you peace of mind and allow you to focus on your high-value activities. Request your free initial consultation!

In summary

Technology cannot compensate for poor habits, and good habits cannot compensate for unmanaged technology. Combining regular training, strong authentication, controlled access and continuous monitoring of workstations is what makes the difference. To put these measures in place without overloading your team, explore our managed IT services.

Written by: Kevin Fleury-Filteau - Marketing and Business Development Director

I help companies focus on their growth by optimizing their IT!

Facebook | LinkedIn

Nexxo Solutions informatique is a company specializing in providing IT and technology services to Quebec businesses. Its mission is to offer Quebec companies IT services tailored to their needs. Acting as an external IT department, it handles all of a company's IT tasks, allowing it to focus on its business activities. It achieves this by collaborating closely with its clients and putting their interests at the center of its concerns.