Tips: Safe Online Holiday Shopping From The Office

A new national survey from ISACA shows employees plan to spend the equivalent of nearly two full work days shopping for the holidays using work computers, creating personal and business security risks.

“Online shopping can open the door to viruses, spam and phishing attacks that invade the workplace and cost enterprises thousands per employee in lost productivity and potentially millions in destruction or compromise of corporate data,” said John Pironti, a member of ISACA’s Certification Task Force and chief information risk strategist at Archer Technologies.

Tips for companies include:

1. Educate employees. Blocking sites can do more harm than good, causing employees to seek out less secure ways to get around your blockade.

2. Get employees on board with learning by teaching them how to protect their work and home computers.

3. Reinforce what you teach by having employees sign an acceptable-use policy every year.

4. Offer a “safe zone” for holiday shopping -- create a virtual sandbox that can be taken down after the holidays.

5. Don’t wait until Cyber Monday to step up security. Many employees begin shopping much earlier.

Tips for online shoppers include:

1. Use your desktop PC, not your mobile device, because your desktop browser is likely to be more secure.

2. Protect sensitive information by password-protecting both your mobile device and its memory card.

3. Update your anti-virus and anti-malware programs continually.

4. Treat social networking sites with the same caution as other Web sites -- they are a growing target for fraudsters and virus writers.

5. Be cautious of special offers from unfamiliar sites. Fake online offers and coupons may lead to harmful sites, so be suspicious.

Featured

  • A Look at AI

    Large language models (LLMs) have taken the world by storm. Within months of OpenAI launching its AI chatbot, ChatGPT, it amassed more than 100 million users, making it the fastest-growing consumer application in history. Read Now

  • First, Do No Harm: Responsibly Applying Artificial Intelligence

    It was 2022 when early LLMs (Large Language Models) brought the term “AI” into mainstream public consciousness and since then, we’ve seen security corporations and integrators attempt to develop their solutions and sales pitches around the biggest tech boom of the 21st century. However, not all “artificial intelligence” is equally suitable for security applications, and it’s essential for end users to remain vigilant in understanding how their solutions are utilizing AI. Read Now

  • Improve Incident Response With Intelligent Cloud Video Surveillance

    Video surveillance is a vital part of business security, helping institutions protect against everyday threats for increased employee, customer, and student safety. However, many outdated surveillance solutions lack the ability to offer immediate insights into critical incidents. This slows down investigations and limits how effectively teams can respond to situations, creating greater risks for the organization. Read Now

  • Security Today Announces 2025 CyberSecured Award Winners

    Security Today is pleased to announce the 2025 CyberSecured Awards winners. Sixteen companies are being recognized this year for their network products and other cybersecurity initiatives that secure our world today. Read Now

  • Empowering and Securing a Mobile Workforce

    What happens when technology lets you work anywhere – but exposes you to security threats everywhere? This is the reality of modern work. No longer tethered to desks, work happens everywhere – in the office, from home, on the road, and in countless locations in between. Read Now

New Products

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.