Five Biggest Security Myths Busted

Five Biggest Security Myths Busted

There are a number of common misconceptions about endpoint security.

The rise of the modern collaborative digital workplace means an increasing number of wireless, mobile and BYOD users on company networks. That’s why endpoint security has become an important strategy for protecting business data assets, but there are a number of common misconceptions about it. 

Here are the five biggest security myths:

1. “We’ve got antivirus so we’re good”

Don’t think just because you have an antivirus product installed on all your devices that you’re protected against malware of every kind. If the antivirus protection isn’t regularly updated, or you don’t do regular security scans, the latest iteration of malware can sneak in without you knowing. Same with periodic OS updates from each device’s manufacturer: you need to do them, but they can’t protect you against everything. Cybercriminal methods quickly have become so sophisticated that a dense patchwork of antivirus, anti-spyware, firewalls and intrusion detection won’t even slow them down.

2. “Endpoint security slows down workflow”

You may have heard that rigorous endpoint security protection tools get in the way of work because they slow down apps or interrupt people from doing their jobs. This myth probably arose due to the effect of bad implementations of security tools rather than any fault of the tools themselves. The best endpoint security tools are specifically designed to provide the necessary level of security without affecting the workflow or user productivity.

3. “Some protection is better than none”

If you were concerned about a burglary, you wouldn’t lock your front door but fail to arm your home security system. We all know that layers of protection are more effective. A layered approach to endpoint security is also the best one, and ideally includes a number of different elements, like network perimeter security, strong user authorization policies, end-user education, data access monitoring and disaster recovery protocols.

4. “All our endpoints are covered”

Even if you diligently apply security patches and put up a good defense-in-depth, don’t assume you’ve got security covered. No company is ever hackproof. Hackers work hard to find new ways to exploit software or human nature to get into an endpoint. And too many companies are not prepared for the consequences of a data breach. You should always assume a data breach will occur, and continuously monitor and strengthen your security posture.

5. “We’re too small of a target”

Huge corporations and big-name businesses that get hacked make the news most often, and so it can seem like only big companies are being targeted. Wrong. Cybercriminals actually seek out small businesses with ties to larger ones—in hopes of getting access to the larger companies. For example, in 2013, hackers breached a small HVAC service company and gained access to all the credit card data in a major retailer’s point-of-sale system.

About the Author

Jerry Young is the Principal Solution Architect at MNJ Technologies.

Featured

  • The Future is Happening Outside the Cloud

    For years, the cloud has captivated the physical security industry. And for good reason. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. But as the number of cameras grows and resolutions push from HD to 4K and beyond, the cloud’s limits are becoming unavoidable. Bandwidth bottlenecks. Latency lags. Rising storage costs. These are not abstract concerns. Read Now

  • The Impact of Convergence Between IT and Physical Security

    For years, the worlds of physical security and information technology (IT) remained separate. While they shared common goals and interests, they often worked in silos. Read Now

  • Unlocking Trustworthy AI: Building Transparency in Security Governance

    In situations where AI supports important security tasks like leading investigations and detecting threats and anomalies, transparency is essential. When an incident occurs, investigators must trace the logic behind each automated response to confirm its validity or spot errors. Demanding interpretable AI turns opaque “black boxes” into accountable partners that enhance, rather than compromise, organizational defense. Read Now

  • Seeking Innovative Solutions

    Denial, Anger, Bargaining, Depression and Acceptance. You may recognize these terms as the “5 Phases” of a grieving process, but they could easily describe the phases one goes through before adopting any new or emerging innovation or technology, especially in a highly risk-averse industry like security. However, the desire for convenience in all aspects of modern life is finally beginning to turn the tide from old school hardware as the go-to towards more user-friendly, yet still secure, door solutions. Read Now

  • Where AI Meets Human Judgment

    Artificial intelligence is everywhere these days. It is driving business growth, shaping consumer experiences, and showing up in places most of us never imagined just a few years ago. Read Now

New Products

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities