The Human Side of Security: Security Threats and Considerations For Today’s Mobile Workforce

The Human Side of Security: Security Threats and Considerations For Today’s Mobile Workforce

While flexibility is empowering the workforce, it is also complicating data security.

  • By David Konetski
  • Jul 20, 2017

As an industry, even as a community, we’ve been particularly focused on external cybersecurity threats. Colossal data breaches and high profile attacks on corporate data centers and institutional networks that have originated outside victim organizations have dominated the news cycle. However, it’s going to become increasingly important to focus on insider threats and the human element of cybersecurity as workforces continue to become more mobile. Over half (52 percent) of employees already work outside of a traditional office at least one day a week, while 18 percent are working from a public location every week.[i]

Whether by malice, accident or negligence, end users – people like you and me – are increasingly responsible for network breaches. Gone are the days where we work exclusively from our offices on our desktop PCs. Today we’re working from our homes, coffee shops, co-working spaces and other locations on laptops, smartphones, tablets and desktop computers. While flexibility is empowering the workforce, it is also complicating data security. With this in mind, there are a few key areas that will become increasingly important to focus on this year: social engineering attacks, user behavior analytics and the need for a multifaceted security solution to address both internal and external threats.

Gaining Access Through Social Engineering

While many external threats start with malware or phishing, we’re seeing an increasing number of attacks using social engineering to compel users to expose their credentials like passwords and usernames. These attacks are appealing because if successful, the attacker can pose as a legitimate user – and won’t be easily caught by anti-virus or anti-malware software. Social engineering uses various methods to target specific employees’ personal information with the intent to leverage that information to deceive those employees into handing over confidential, restricted company information. According to the results of the Dell End-User Security Survey, nearly half of all employees at companies large and small are regularly accessing social media sites on their work devices, which indicates this is an area of significant exposure, and one to which we need to pay more attention.

While the employee’s actions are usually not malicious, accessing social media using the same devices that are used to access corporate data can create significant cybersecurity vulnerabilities. Once an attacker gains access to an organization’s network with credentials stolen via social engineering, they can stay in that network for any length of time, stealing critical data or plotting a larger attack without an organization realizing that the person accessing the network and its information isn’t who they say they are. This is where user behavior analytics comes in.

User Behavior Analytics

While still in its early stages, user behavior analytics is rapidly gaining interest from a wide range of organizations. User behavior analytics leverage big data techniques to help organizations identify unique patterns indicating who is accessing the network, from where, and that they are who they claim to be. If the system detects anomalous behavior, the deviation creates an alert to help organizations determine if a breach is in motion and then take steps to stop it. User behavior analytics differ from other forms of security analytics because they focus squarely on users’ behavior rather than traditional security events. If someone has had their credentials stolen, eventually, an anomaly will arise – whether that’s logging in at odd times, poking around areas of the network that they don’t normally access, or moving large amounts of data.

Organizations Need a Multifaceted Approach to Cyber Security

The combination of both internal and external threats facing organizations today creates a significant threat landscape that requires a multi-layered security solution. While user behavior analytics can help detect and flag threats from within the network, you must also put programs in place to prevent these threats from occurring in the first place. It is essential to provide employee education to help reduce the incidence of insider induced breaches. According to the Dell End User Security Survey, only thirty-six percent of those surveyed feel very confident in their knowledge of how to protect sensitive company information. Many successful attacks target users who are traditionally more vulnerable to cyber-attacks, or those who handle sensitive data – be it smaller businesses without dedicated IT resources and education programs or organizations where data is of paramount importance. Better educating employees about cybersecurity and the role they play in helping to reduce threats should be part of any organization’s security strategy.

Finally, organizations need to focus on securing their data with file-based data encryption as well as protecting against external threats with an advanced threat prevention solution. The combination of both data encryption and advanced threat prevention ensures that while we reduce and quickly detect external threats, the data remains protected whether at rest on an endpoint or when it travels, both inside and outside of the organization.

[i] Dell 2016 Future Workforce Study

Featured

  • Report: 47 Percent of Security Service Providers Are Not Yet Using AI or Automation Tools

    Trackforce, a provider of security workforce management platforms, today announced the launch of its 2025 Physical Security Operations Benchmark Report, an industry-first study that benchmarks both private security service providers and corporate security teams side by side. Based on a survey of over 300 security professionals across the globe, the report provides a comprehensive look at the state of physical security operations. Read Now

    • Guard Services

  • Identity Governance at the Crossroads of Complexity and Scale

    Modern enterprises are grappling with an increasing number of identities, both human and machine, across an ever-growing number of systems. They must also deal with increased operational demands, including faster onboarding, more scalable models, and tighter security enforcement. Navigating these ever-growing challenges with speed and accuracy requires a new approach to identity governance that is built for the future enterprise. Read Now

  • Eagle Eye Networks Launches AI Camera Gun Detection

    Eagle Eye Networks, a provider of cloud video surveillance, recently introduced Eagle Eye Gun Detection, a new layer of protection for schools and businesses that works with existing security cameras and infrastructure. Eagle Eye Networks is the first to build gun detection into its platform. Read Now

  • Report: AI is Supercharging Old-School Cybercriminal Tactics

    AI isn’t just transforming how we work. It’s reshaping how cybercriminals attack, with threat actors exploiting AI to mass produce malicious code loaders, steal browser credentials and accelerate cloud attacks, according to a new report from Elastic. Read Now

  • Pragmatism, Productivity, and the Push for Accountability in 2025-2026

    Every year, the security industry debates whether artificial intelligence is a disruption, an enabler, or a distraction. By 2025, that conversation matured, where AI became a working dimension in physical identity and access management (PIAM) programs. Observations from 2025 highlight this turning point in AI’s role in access control and define how security leaders are being distinguished based on how they apply it. Read Now

Most   Popular

New Products

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.