For weeks now, our public life has been completely upside down: although most stores have already reopened for customers and restaurants and cafés are also opening their doors, the majority of German employees are still working from home. Since the major lockdown this spring, many companies have been working exclusively remotely or, at best, on a rotational basis in order to continue operations and protect employees from infection. A definitive end to this situation is not yet in sight. In addition to traditional emails and phone calls, employees are increasingly using video conferencing and more informal messenger services such as WhatsApp to make arrangements and exchange data. However, the initially improvised new structures are currently becoming more and more established and are becoming the new normal, which entails a number of risks for companies.
In the following blog post, Materna Virtual Solution explains why you should be careful now and where exactly the danger lurks.
Confusing mixture of data
In some cases, companies had to send their employees home in March in a complete rush. There was not enough time to set up a suitable new infrastructure that also complied with all IT security guidelines. Not all employees have company-owned laptops or smartphones with encrypted access to sensitive data. Most employees therefore temporarily switched to their private end devices. Due to a lack of alternatives, simple but insecure services such as WhatsApp, Gmail or Dropbox have to be used. The consequence: a mixture of private and professional data on all devices, which the employer can no longer keep track of.
Case Messenger services
However, even those who do not use services such as WhatsApp for professional communication are not immune to the risk of data leakage, as it is sufficient to have the app installed on their private device. By confirming the terms and conditions, the user allows the app to read all contacts stored on the device, including personal data, which fundamentally contradicts the GDPR and can result in fines for companies that can run into the millions.
Gateway for cyber criminals
The currently very confusing IT structures of companies also play right into the hands of cyber criminals. The number of phishing emails and ransomware has risen rapidly in recent months and fraudsters can quickly gain access to the company network via infected email attachments or poorly secured private computers, where they can cause a great deal of damage.
Now is the time for companies not to allow the emergency solutions that were created at the beginning of the crisis to become the norm. According to many forecasts, the crisis will permanently change our working world and result in most jobs becoming even more flexible and digital.
It is best to ensure secure and legally compliant communication on smartphones and tablets now.